Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb9e2490-842b-35aa-96b2-b702d247056f.roa
File:                     bb9e2490-842b-35aa-96b2-b702d247056f.roa (raw, json)
Hash identifier:          EQf0lsAiIajArfTY2gXEt5XBsFy2txxtM+FWi+U9uT8=
Subject key identifier:   D4:9B:86:1D:4F:62:27:46:AC:0A:75:EB:F8:E9:5F:D7:A3:91:C3:20
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847600BA3B7C147D27FB9C592C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb9e2490-842b-35aa-96b2-b702d247056f.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     20940
IP address blocks:        23.73.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a3:b7:c1:47:d2:7f:b9:c5:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=c830e558-a1e2-4612-83c4-ec9101854b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:db:e5:9c:d7:2b:43:d0:e5:61:51:1c:d8:e5:
                    bc:ae:84:44:be:30:de:88:f1:53:1a:f9:7a:df:c6:
                    fa:c3:50:69:1e:7b:49:e3:61:8c:26:84:25:03:ac:
                    78:55:ce:3b:46:79:2c:9a:de:50:2f:53:f6:b5:03:
                    9c:2e:ab:0e:4e:cc:76:d4:d8:40:4d:50:12:17:c7:
                    b5:dc:f1:f2:ac:70:59:83:e1:15:62:50:b9:fc:71:
                    43:9a:3d:1e:fc:9a:c9:3f:27:7b:69:8c:08:91:01:
                    3c:fb:bb:70:ac:73:bb:43:49:75:03:66:d7:85:01:
                    45:ed:00:29:58:36:8b:61:2c:4a:76:b4:cf:68:0e:
                    9f:d9:96:6a:2d:3d:fc:7d:68:12:a1:e9:05:38:b1:
                    6b:73:fb:a0:cb:0a:5f:a5:b8:a1:f4:7f:ea:d4:31:
                    5f:e7:d5:1c:41:b3:6f:23:ed:83:66:e0:91:8b:d3:
                    16:ab:27:bd:6d:0a:3b:d8:37:3e:a2:76:5d:a2:95:
                    47:74:fc:20:c7:6e:1e:0b:d9:81:30:54:76:55:1a:
                    33:98:67:bb:ca:97:af:92:eb:7f:a3:4d:05:bb:af:
                    ce:95:da:23:06:ac:ec:66:f2:4a:5a:0e:36:51:f3:
                    9d:5b:82:b1:77:d8:c6:6f:40:08:d5:ef:90:0e:a2:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9B:86:1D:4F:62:27:46:AC:0A:75:EB:F8:E9:5F:D7:A3:91:C3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb9e2490-842b-35aa-96b2-b702d247056f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.73.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:19:cc:52:0f:b4:f2:d1:f3:64:18:d8:92:9a:52:c0:f6:
         32:af:80:ed:26:71:be:be:73:13:e6:4e:ac:c0:9d:be:be:11:
         6a:1c:78:d4:4e:58:1e:9d:e7:fd:f8:b2:dc:28:c2:a5:e6:45:
         14:e2:07:d7:df:b4:ce:9e:90:3f:31:2d:a5:27:2a:a8:e6:ff:
         a1:37:eb:da:dc:bd:87:8b:cd:d0:95:18:82:e4:6f:dc:bf:43:
         9c:5e:af:c8:de:f2:aa:7a:f5:cc:30:80:ff:ad:bc:31:c0:c3:
         be:94:72:3d:dd:33:c7:91:56:05:3d:f8:a3:d6:9e:c9:6f:f6:
         fd:bc:b6:de:ea:d2:84:a5:4a:29:9a:a3:24:9a:27:13:56:55:
         de:67:3b:cc:bb:50:f0:58:12:d9:60:ce:08:da:8a:5d:63:58:
         8c:e5:44:b2:d7:66:18:bb:5c:d4:03:c2:72:a8:ba:43:8d:24:
         f3:f3:a9:29:8d:9e:20:0c:01:b5:d3:bd:00:0b:70:d0:f5:56:
         d1:e2:fe:20:aa:eb:e5:da:e2:98:52:46:3c:ef:6e:56:fc:8d:
         93:f3:0c:4a:e5:01:28:4d:ca:ac:f6:9f:5a:42:ab:fa:29:4c:
         88:c0:16:7d:4b:e6:bd:ba:45:ff:50:cd:39:df:24:28:f1:27:
         f2:d0:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:19 2024 by rpki-client on console-ams.rpki-client.org