Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc298127-b4b1-363c-a9c7-49acbeb473bb.roa
File:                     bc298127-b4b1-363c-a9c7-49acbeb473bb.roa (raw, json)
Hash identifier:          JdRfTqBE8Mgd94QUZgYe4JBQ3aGMoKgr5nVMWsLL89I=
Subject key identifier:   65:D8:89:59:32:E8:CA:A1:BF:98:BE:B2:4C:29:A0:A3:2D:41:E8:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584754E0F3E173D37F2145D5E800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc298127-b4b1-363c-a9c7-49acbeb473bb.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     20940
IP address blocks:        23.67.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:f3:e1:73:d3:7f:21:45:d5:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=0b0edd0d-f9d6-47e0-8afb-e7e8e11623c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:c9:6d:eb:32:8d:77:43:9f:95:45:6a:28:
                    1a:5a:d0:89:1d:48:d8:d9:3c:8c:75:90:e7:82:94:
                    49:07:bd:35:46:27:a7:73:51:4b:b9:93:00:17:c3:
                    10:fd:c4:9f:f2:d0:dc:00:73:45:10:00:06:32:e8:
                    40:40:0c:b3:cb:a6:19:56:9f:b8:d1:e1:62:e5:66:
                    82:ed:c2:16:d2:70:86:88:5a:9a:53:7b:1e:8e:db:
                    63:b3:28:50:da:35:0e:ac:cc:92:c0:51:0a:27:6f:
                    6d:4b:51:30:95:37:39:02:b7:84:87:2c:1e:ee:5e:
                    68:4f:0c:b4:03:a9:59:5f:bd:83:22:64:b8:63:e4:
                    12:2e:23:a1:f3:6b:c2:40:67:cf:09:8a:d7:15:df:
                    21:67:fd:2f:c3:f8:91:00:43:de:5b:91:2d:83:a3:
                    f7:a0:75:3d:d4:9b:58:3f:8d:19:5a:6b:6b:dd:ec:
                    ce:22:d2:3e:bb:6a:35:20:32:79:89:2e:28:e3:31:
                    d3:ec:69:c2:81:2a:32:0b:ac:9e:6c:3d:55:94:b6:
                    e7:b0:a2:00:53:a7:f1:b2:2c:49:92:f6:b4:4a:b4:
                    02:53:93:b1:8b:a4:40:bf:26:9a:67:0c:bc:39:28:
                    13:40:57:eb:57:a5:1e:98:48:b9:01:4e:2b:87:f6:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D8:89:59:32:E8:CA:A1:BF:98:BE:B2:4C:29:A0:A3:2D:41:E8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc298127-b4b1-363c-a9c7-49acbeb473bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.67.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:8c:16:c3:05:2a:d4:0d:28:3c:d8:90:b4:ac:4f:e6:9c:30:
         80:68:da:47:d4:61:88:d5:d7:34:a7:e4:61:5b:4f:0f:f2:d3:
         3c:bf:bb:16:25:50:8d:48:64:04:b4:27:c2:bf:1f:2d:05:e6:
         54:90:4c:e8:44:dd:86:ab:76:36:2d:c1:09:dd:06:ab:22:f3:
         94:91:81:00:c6:05:b5:d1:8f:23:bb:bb:84:7a:5b:3b:74:64:
         ae:b9:ec:d3:01:a8:94:33:09:af:d8:73:97:a2:c4:2b:14:f4:
         2c:43:d5:4b:d2:af:07:51:a0:f1:85:6a:59:e2:95:f3:0b:71:
         56:96:be:be:9a:d8:91:c6:fd:82:d1:4b:45:8e:29:26:00:34:
         09:32:fd:76:56:f0:5f:37:4e:ad:32:25:6e:fe:33:32:20:3e:
         6d:ce:53:93:c2:5e:09:6c:36:86:5e:ef:6c:da:c1:7c:e7:fa:
         a1:67:b1:ab:f7:4e:42:84:15:99:7b:ea:dd:38:0b:0f:6b:96:
         96:39:df:6e:75:5c:2a:ac:0b:da:96:d3:87:76:0f:6a:fc:de:
         c3:25:ce:87:e1:d0:ac:89:fb:07:7c:a4:f7:ec:7d:0b:7e:1d:
         b2:df:28:2c:bc:c1:03:d7:ec:82:81:d3:cb:9f:1f:69:21:46:
         22:cb:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:32 2024 by rpki-client on console-fra.rpki-client.org