Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd17ed2c-b7ad-3097-b647-d386c7e6bd5e.roa
File:                     bd17ed2c-b7ad-3097-b647-d386c7e6bd5e.roa (raw, json)
Hash identifier:          86AEssKnx4bc5LJ0MAffnTMsc6C0aNKNuE3ApYcIaBw=
Subject key identifier:   41:73:C9:8F:F8:24:C6:3E:F1:37:25:B3:CB:25:52:8A:7B:98:18:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36E06F14FAAAA3FF774600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd17ed2c-b7ad-3097-b647-d386c7e6bd5e.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.59.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:e0:6f:14:fa:aa:a3:ff:77:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=aa15d159-c8a0-4124-979c-8fb2fb218ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:8a:7d:6d:62:8c:0d:5b:f5:82:39:56:07:
                    fb:4d:ad:a8:9f:c2:de:03:62:f1:fc:b4:5f:76:1d:
                    de:13:6b:04:09:f0:eb:12:21:07:c6:0c:1f:65:81:
                    1b:f9:56:72:81:ff:36:60:26:44:a8:9f:d3:3b:93:
                    bb:d0:98:5f:61:6d:91:7e:5b:59:db:2d:ec:f6:a7:
                    c5:83:25:a5:7c:24:8c:49:42:3f:36:6a:fd:58:2b:
                    dc:68:b5:45:0b:be:43:a5:6f:94:36:3a:d7:83:d5:
                    79:35:a9:8c:c6:53:fc:70:cc:2b:a6:a3:fe:ac:21:
                    25:3c:d4:23:03:c3:96:60:bb:0a:47:fe:98:95:33:
                    70:ae:3e:4f:95:85:39:79:b8:c3:a9:59:a3:2a:6c:
                    36:7e:bd:6f:d9:ed:52:2b:d1:1b:0b:cc:75:2c:60:
                    94:64:45:64:8b:10:e1:46:b2:27:cc:3f:7f:54:f8:
                    c6:17:5a:93:d2:ee:6e:c2:8d:d4:49:e0:6d:c4:7f:
                    7c:55:82:cb:df:2c:5b:5f:80:a2:28:fd:8a:17:c8:
                    d5:51:77:4d:31:81:f2:53:0b:10:13:61:e1:6a:31:
                    2d:86:73:cf:1e:d5:b2:47:45:d5:98:af:b2:7f:ec:
                    fa:b2:9f:2a:62:c2:8b:9c:41:19:e1:d8:ec:c2:40:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:73:C9:8F:F8:24:C6:3E:F1:37:25:B3:CB:25:52:8A:7B:98:18:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd17ed2c-b7ad-3097-b647-d386c7e6bd5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f9:cb:51:bf:83:9b:74:c5:b2:f6:4c:41:31:68:d6:8d:aa:
         74:de:74:cb:46:dc:b1:02:74:a6:6e:47:d4:6d:c1:91:3d:c2:
         c0:bc:51:57:ab:9d:1f:06:8c:ef:a4:eb:d6:96:79:00:78:c9:
         f4:14:9d:4a:da:36:8d:97:48:ed:40:9f:3d:d5:6d:45:91:15:
         a1:b5:2f:cf:d1:6e:9e:ff:a4:c5:a0:b4:05:c5:80:3e:1d:20:
         b4:77:f8:7b:87:f1:f5:de:5b:15:cd:fc:33:76:9b:60:44:e8:
         74:c4:b0:a7:63:1d:61:4a:f0:d4:d0:57:99:4a:15:99:42:ed:
         ad:e4:db:49:40:6d:30:4a:1e:1a:7b:f7:59:11:21:01:c4:e2:
         2b:8e:87:be:cd:4b:0d:b5:ce:c9:14:f4:65:cb:4e:0f:db:d2:
         bb:a6:61:fd:9d:ea:da:48:ab:c8:2b:d7:5f:26:1f:ad:73:ed:
         36:7f:2e:29:da:74:af:b6:6e:00:36:31:bd:0f:2e:53:08:12:
         a9:d6:a4:75:37:e5:03:05:be:31:41:ea:26:14:ec:c7:99:1f:
         05:90:49:6c:63:e9:db:c3:23:ac:44:81:8c:86:63:cb:e7:3b:
         2a:50:b1:46:a3:ac:3e:c2:ce:7c:41:23:dc:11:03:f5:4f:37:
         55:62:d7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:32 2024 by rpki-client on console-fra.rpki-client.org