Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9e8899-2cd0-3ce4-996f-82d66602a493.roa
File:                     bf9e8899-2cd0-3ce4-996f-82d66602a493.roa (raw, json)
Hash identifier:          Jt/R07ed7GOsm5hYH16jMuT3apwutFUKKmPpwyMbmK0=
Subject key identifier:   45:B8:EC:82:A3:7F:60:32:CF:9D:80:70:04:7A:ED:BE:2B:B6:1C:67
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479EDBD54B7545D74DDEAB8600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9e8899-2cd0-3ce4-996f-82d66602a493.roa
Signing time:             Tue 22 Oct 2024 01:00:31 +0000
ROA not before:           Tue 22 Oct 2024 01:00:31 +0000
ROA not after:            Mon 20 Jan 2025 02:00:31 +0000
asID:                     20940
IP address blocks:        23.46.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:db:d5:4b:75:45:d7:4d:de:ab:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 22 01:00:31 2024 GMT
            Not After : Jan 20 02:00:31 2025 GMT
        Subject: CN=99c2d311-5a17-4130-9883-de887cb4d1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:16:b9:6c:f2:82:10:19:2d:b8:99:50:69:
                    36:37:7f:43:91:6d:10:71:5a:0f:ac:5c:03:b3:46:
                    de:99:78:4a:99:00:7f:7a:08:22:6c:ed:70:ca:36:
                    ec:8d:0e:f6:6c:43:84:60:41:7c:d0:a2:17:80:c0:
                    5c:57:8e:07:6e:98:b8:57:62:e4:f3:ac:e9:c9:c0:
                    b6:ce:4a:63:dc:80:e8:f5:17:1d:52:ce:0e:a6:33:
                    f7:a9:a9:30:21:29:59:07:f2:55:b2:d4:e7:ec:fd:
                    d3:7f:bf:e5:54:8d:cc:84:13:58:f2:8c:e4:c5:12:
                    ef:e7:1c:a8:3e:2a:4a:7d:db:35:83:9f:f2:a2:18:
                    e0:7e:3e:23:d8:66:f7:d8:14:86:6e:f2:01:02:0b:
                    a6:d6:f5:77:8d:fc:36:7a:c7:e8:1b:c3:17:0e:de:
                    30:4a:36:ff:36:66:8a:0d:c2:97:c1:c3:48:e8:9c:
                    5b:f7:b4:97:1e:de:83:33:19:7e:47:60:ee:94:2e:
                    a9:49:fb:fc:b9:6a:f6:b7:91:75:c4:de:2a:9d:07:
                    87:6a:ef:f9:6f:d0:c4:6d:a5:e4:d8:fd:c7:c2:f3:
                    d0:bf:70:f2:87:3d:ca:89:59:7e:cb:f0:b4:b2:99:
                    1b:a3:cb:00:38:a0:db:1b:dd:e3:e1:38:3f:61:27:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B8:EC:82:A3:7F:60:32:CF:9D:80:70:04:7A:ED:BE:2B:B6:1C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf9e8899-2cd0-3ce4-996f-82d66602a493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:94:6b:07:59:98:a0:c5:cb:cc:2c:93:15:1a:da:22:bd:8b:
         9b:23:1e:1d:c1:94:6b:01:d1:ca:19:cf:c4:16:04:8b:77:ea:
         4d:70:26:f1:32:e1:f6:00:c3:dc:9c:02:90:28:a7:71:4d:9e:
         d0:44:b8:c0:8a:f7:ca:ed:f9:71:c6:b5:f1:51:7e:63:ef:2e:
         5c:5f:ce:c9:39:8c:4b:e8:af:39:7d:20:94:a2:05:7f:d7:53:
         dc:f0:26:8b:aa:c3:3a:9c:41:87:81:4a:15:f4:05:d0:68:a8:
         a2:d0:2f:52:68:6d:d4:e8:32:ad:0b:63:fa:29:c4:d8:bc:98:
         2c:5b:37:62:2f:40:b1:c0:fb:10:dd:d5:b0:c9:a4:73:e4:ff:
         0e:2d:77:f9:cc:96:31:89:83:a0:02:66:3d:01:24:fa:25:09:
         97:ad:fa:c9:0b:57:98:2a:6d:47:ad:8b:0e:6c:f6:c2:4c:29:
         ff:f8:a8:b2:f6:4c:34:90:e1:40:99:19:1a:82:9b:fb:0b:23:
         4e:29:ff:52:5f:b6:c3:ed:ad:c9:5f:70:61:88:01:21:00:30:
         c2:cd:7d:7b:77:c9:81:ea:a5:ac:ca:be:bb:67:a0:c3:1e:bc:
         cd:ff:aa:39:20:c3:9e:2f:57:f8:3e:8c:fb:1c:fe:e0:2a:71:
         23:67:64:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:21 2024 by rpki-client on console-ams.rpki-client.org