Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc492877-0ce1-34b2-8751-238e5cf88357.roa
File:                     bc492877-0ce1-34b2-8751-238e5cf88357.roa (raw, json)
Hash identifier:          gB89e/U8exBhlTc3BcTT1Q2GpjXrvfXDjaKov4Nx4UM=
Subject key identifier:   5B:CF:E7:27:3A:3F:47:18:AD:E0:54:28:6B:F0:64:E0:80:08:0B:A0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C4AA2B8F72A46637E26AFEC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc492877-0ce1-34b2-8751-238e5cf88357.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     16625
IP address blocks:        23.196.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:2b:8f:72:a4:66:37:e2:6a:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=f88c89b2-23ae-4a76-b3e7-cd0726042219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:aa:2f:1e:22:46:07:ea:25:7c:ed:91:cb:
                    39:f8:6b:47:c6:ab:2a:16:90:30:5b:cc:20:aa:12:
                    83:8f:9a:9b:c3:5b:96:1a:21:95:ec:09:78:f9:b4:
                    44:5c:8e:6e:12:86:18:1f:d3:92:c0:01:c6:98:30:
                    d1:e5:57:c3:fb:5c:18:eb:1a:96:7b:87:b1:fa:bf:
                    95:0b:a1:46:fa:7c:c8:9b:56:e6:8d:54:e3:ab:46:
                    9d:a1:2e:6e:ab:3a:6e:2b:66:e6:2c:1d:da:ec:80:
                    50:35:a0:29:87:41:d5:07:d3:a6:a1:b7:18:66:f4:
                    05:69:04:73:67:a8:f1:bb:cb:b3:18:07:85:bc:6c:
                    8f:51:d2:ae:7d:25:a6:83:5e:ed:0a:4c:08:a5:e3:
                    20:b4:9d:c7:33:84:6e:73:fb:9f:00:d7:63:d8:0a:
                    ae:68:0c:d4:e5:f4:4c:6e:9e:14:79:ad:d4:86:33:
                    81:fd:59:49:1d:33:1a:ec:2c:7c:44:e8:97:3a:c7:
                    f6:f2:7a:77:22:da:e7:4e:56:ba:e3:6c:2b:bf:e6:
                    30:d1:40:95:07:a1:98:6a:69:90:59:66:6f:c2:7a:
                    76:41:ab:df:28:34:b5:4b:07:20:ac:cd:ba:dd:92:
                    93:68:8c:16:a5:39:07:41:b0:75:54:1d:ec:22:2c:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CF:E7:27:3A:3F:47:18:AD:E0:54:28:6B:F0:64:E0:80:08:0B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc492877-0ce1-34b2-8751-238e5cf88357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.196.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4e:0d:f9:ab:6a:d2:4c:81:4e:d7:28:57:8b:bb:93:48:14:
         3b:af:41:35:32:af:ad:2a:35:df:8a:1d:35:f5:cb:b2:2a:21:
         ee:cb:61:e4:85:ce:e2:0c:d5:bb:8e:4e:83:53:72:bf:58:70:
         22:3e:9e:12:15:0f:29:28:b1:39:32:fc:dd:19:07:75:47:97:
         c0:e5:06:8c:27:84:bb:ae:30:76:0f:f7:e3:71:2b:ea:24:60:
         20:da:9d:0f:8a:df:4f:49:7a:dc:8b:9c:ef:f8:bb:c2:cc:3e:
         8b:53:40:ee:ff:0b:4d:78:e7:8b:a4:4c:6e:10:d2:f3:42:f2:
         3e:fc:da:ca:4c:22:56:22:05:d3:df:4d:74:92:42:01:7a:a3:
         f7:be:6c:51:5d:ec:48:e9:97:6f:8d:b8:64:53:22:8f:a1:fc:
         d6:e9:63:b3:6d:88:59:2c:cb:ec:37:4c:33:c8:19:7e:b5:cf:
         a0:fe:56:68:5f:1c:b1:e5:83:67:6b:42:0c:ce:85:3b:e5:0a:
         b5:64:b9:34:6c:db:bc:b2:35:6b:69:7d:1a:ad:9b:d8:19:fa:
         a5:4c:19:70:19:74:c9:cd:f1:e8:97:43:34:aa:5a:3d:eb:53:
         01:fc:f5:ae:df:ca:4d:ad:67:c0:a0:ac:88:cf:3a:7c:34:54:
         1c:1d:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:48 2024 by rpki-client on console-ams.rpki-client.org