Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbea8fb8-3e32-3ba0-9469-54c0cce4f826.roa
File:                     bbea8fb8-3e32-3ba0-9469-54c0cce4f826.roa (raw, json)
Hash identifier:          RhDp04LUE21BgmATZSiCc0R/2KmDn4lBNM+klDTvGCw=
Subject key identifier:   12:5D:81:F6:39:97:01:25:98:5D:A0:DF:26:36:6D:67:D9:6E:61:FA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C8DA019BF90506DB1B4C3480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbea8fb8-3e32-3ba0-9469-54c0cce4f826.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     20940
IP address blocks:        23.200.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:da:01:9b:f9:05:06:db:1b:4c:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=fecb3717-0b4b-4a72-bccc-844f2941cc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:12:da:6e:0a:ed:0b:53:72:8a:6f:d2:54:7e:
                    eb:ca:e9:d0:72:06:aa:bf:bb:e4:75:da:e9:33:02:
                    cc:fe:0e:64:c2:e1:58:8f:ef:9a:e5:b4:35:51:08:
                    4b:8d:6c:2d:8b:8a:a7:7f:57:9d:ca:c3:8c:ba:ef:
                    88:7c:2f:e0:e2:81:52:2e:99:b4:58:64:e0:c2:13:
                    f0:0f:e4:68:a3:f5:63:4b:d4:b2:a0:48:56:0d:83:
                    c4:cc:d4:e8:24:b3:8e:46:14:01:a4:a3:33:4e:63:
                    3e:39:03:66:25:1b:9b:eb:43:b2:e7:5a:49:a6:ff:
                    e0:85:fe:ba:ee:cb:59:22:fa:9d:0b:77:7d:90:1d:
                    68:cf:ac:f3:b4:34:10:80:9c:68:a2:db:85:7d:d5:
                    8d:9e:b6:dd:00:14:1b:6f:0c:71:4a:14:fd:44:31:
                    b1:4b:6f:54:37:4f:9e:9c:de:71:f8:54:2c:8b:90:
                    46:f6:c1:c0:ee:f6:93:d1:99:92:e3:25:35:09:d8:
                    44:8a:97:57:a1:93:8b:8b:96:21:c6:d8:6a:30:d4:
                    de:d9:98:bc:3f:f7:fb:a6:f8:c3:67:8e:79:f0:08:
                    f5:f2:de:46:51:22:5f:df:07:fc:dc:a2:b0:e5:1e:
                    e2:3b:a2:09:73:16:46:09:3a:ef:b0:fa:4b:52:9d:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5D:81:F6:39:97:01:25:98:5D:A0:DF:26:36:6D:67:D9:6E:61:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbea8fb8-3e32-3ba0-9469-54c0cce4f826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:da:99:fb:d1:6e:b0:61:bb:de:c9:a4:12:ae:a5:87:3a:78:
         ac:18:ab:fb:5e:29:ce:0a:1e:a0:65:e9:de:e8:69:3b:23:ee:
         0e:c5:7c:27:63:57:7c:45:69:c6:7c:80:cd:aa:dc:90:48:7f:
         0c:88:4a:21:e5:cd:87:f7:d5:30:05:1d:f2:a3:40:b0:e4:42:
         19:f1:c9:10:7c:f6:ac:44:c7:16:b4:7d:b6:5b:69:00:69:f6:
         83:8d:d8:6d:8b:65:1b:d1:49:3c:e7:a2:73:22:75:b0:52:9e:
         f7:96:97:30:02:94:d8:cd:0d:52:ea:15:b5:41:9a:44:c9:c2:
         09:4a:e1:4c:5b:fc:91:d0:93:24:90:26:f0:e1:30:94:aa:a0:
         95:9a:a7:f0:16:85:94:ad:f9:f8:14:d2:71:98:f9:d0:c8:aa:
         90:e3:d4:4c:85:75:10:ab:f7:9f:48:db:bb:71:10:c4:c3:24:
         37:29:61:1c:3f:3f:0a:e6:56:d8:bb:e7:bc:a3:0f:f5:1c:34:
         a1:db:47:60:b4:dc:92:4d:49:74:a7:ba:4f:69:78:c1:34:49:
         fb:a0:1e:1e:43:7c:67:9e:64:a0:50:dc:13:ef:1c:ae:3e:cc:
         57:61:de:85:c8:7f:3c:70:12:af:4c:0f:b0:74:23:2d:9d:49:
         eb:1e:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:32 2024 by rpki-client on console-fra.rpki-client.org