Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be16937c-244a-309d-a9ee-cdecf3c3fd06.roa
File:                     be16937c-244a-309d-a9ee-cdecf3c3fd06.roa (raw, json)
Hash identifier:          oIQWWTZZdp+zSWjyj1XXfbUk9bvXEN9qQw4ZcywiGiA=
Subject key identifier:   A3:57:97:D5:80:3A:B7:35:AA:A4:8F:52:A7:D5:E5:E8:0C:E5:42:D9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847EA5A0E2B3E0047A0CD91F300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be16937c-244a-309d-a9ee-cdecf3c3fd06.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.219.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:0e:2b:3e:00:47:a0:cd:91:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=ab622a29-d447-4e8d-b7ae-f90028968db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:61:58:9b:e2:72:ba:c5:2b:40:47:1f:7d:
                    b9:d5:bf:30:72:2e:cb:37:80:a6:d8:91:89:c1:84:
                    05:05:d9:f1:4b:ea:68:ff:07:6f:e6:4f:3d:24:4d:
                    5a:4c:41:31:af:95:35:20:e4:c5:e6:7a:76:75:1e:
                    7b:ad:f9:4f:44:84:c6:d7:eb:f0:75:7c:0f:ca:a5:
                    7c:40:fd:f5:23:52:66:90:e6:89:ac:dd:cd:e6:5b:
                    ca:0f:81:8c:a7:06:02:4c:70:31:6d:8c:3c:d7:dc:
                    3e:4b:cd:83:c4:50:5d:1c:cc:34:f1:31:ca:9b:e3:
                    39:9c:f3:de:05:30:09:78:80:ba:89:a1:30:3c:19:
                    32:f0:fd:93:24:29:ea:aa:b3:bb:12:be:14:71:94:
                    4f:89:04:97:73:60:c0:38:4b:99:27:f9:be:4e:37:
                    f8:03:b6:fe:b2:7f:ae:05:99:14:10:37:d4:a0:61:
                    87:1a:39:61:ad:ac:cf:b0:7f:12:a8:fe:b8:13:56:
                    f2:be:0f:54:fd:43:44:f9:8c:cf:d4:63:10:ec:b6:
                    77:f5:8f:7f:37:cf:0d:43:f2:58:60:99:2b:be:9a:
                    43:c8:17:3f:aa:ac:49:60:18:f4:d7:a0:c0:f8:3d:
                    25:2b:fb:3a:3a:26:fa:e5:fe:12:aa:b3:8b:71:7c:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:57:97:D5:80:3A:B7:35:AA:A4:8F:52:A7:D5:E5:E8:0C:E5:42:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be16937c-244a-309d-a9ee-cdecf3c3fd06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e5:c9:33:30:4e:bd:d6:6b:19:f0:6b:e6:a7:99:66:d9:ab:
         02:de:14:72:40:bf:91:59:8d:6d:fd:f0:7a:5c:1d:5a:e2:69:
         ce:cc:c0:4e:9d:76:f0:2a:f5:bc:94:b4:34:15:58:4b:e5:b2:
         c8:41:d5:0b:c5:b1:1d:ee:bc:34:03:35:73:5d:f1:6e:f6:1c:
         ac:79:a9:21:37:32:f6:40:6d:a1:89:a1:9b:b1:3b:6c:ed:2e:
         13:cf:20:2b:f0:21:6e:c9:bb:da:69:bf:b9:53:eb:64:03:e1:
         7d:ea:bd:9a:03:5b:35:b3:de:9f:6d:66:ce:60:a0:54:35:95:
         fc:d0:0f:68:54:12:90:1c:48:da:d0:67:a1:07:54:27:e0:50:
         5b:81:3f:eb:ad:a3:6e:39:e3:79:37:8d:8e:3c:75:24:04:ba:
         8d:85:55:60:30:c1:e6:d8:42:3e:20:6d:75:c8:68:0d:27:e5:
         71:1b:01:3e:06:59:26:76:72:2f:e1:1f:ea:fd:76:2f:2c:41:
         6d:95:7e:ac:82:e9:8c:81:c2:46:24:06:98:14:f0:4e:ff:72:
         c9:43:df:02:72:70:d9:35:c4:19:3f:26:1f:4d:33:fd:70:18:
         49:96:22:e6:b6:be:ce:6a:75:ee:dc:90:88:04:0e:18:c1:ac:
         aa:b4:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:20 2024 by rpki-client on console-ams.rpki-client.org