Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c18259ed-d891-320f-97b4-8a88abcf4ed9.roa
File:                     c18259ed-d891-320f-97b4-8a88abcf4ed9.roa (raw, json)
Hash identifier:          HyN6CBn8sMZGd7JtDjs+kh7QjaenIbzq2GOujIN5anQ=
Subject key identifier:   3D:1B:15:18:C4:40:D6:5C:6B:94:BF:C4:CB:4D:32:E7:93:53:0D:B3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479D76CF10775E8306824526C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c18259ed-d891-320f-97b4-8a88abcf4ed9.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.43.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:cf:10:77:5e:83:06:82:45:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=5c0a3e4b-0030-4e99-9a68-0836d2ed44d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:d0:3a:2b:1d:2f:fa:76:98:1f:03:24:49:
                    d2:0a:7c:02:49:d6:f5:8c:d1:a0:7b:b7:6b:90:02:
                    30:b1:da:7b:e8:3f:5f:d8:24:31:86:a9:c4:e6:44:
                    38:ba:9f:c5:34:8c:ed:26:9b:09:7d:ed:11:28:30:
                    4a:08:48:5f:8e:ab:93:be:ba:1a:81:49:81:23:3b:
                    19:9c:6f:df:21:08:3f:10:74:90:80:cf:52:96:bf:
                    cf:da:f9:08:b1:4b:ed:0a:54:a9:bd:ab:45:c3:dd:
                    ac:6c:f4:9c:55:a9:0b:8f:ad:4e:55:a0:9f:2c:84:
                    47:99:c8:26:19:12:59:fb:9c:c6:09:ff:5c:52:6b:
                    57:bb:31:98:50:fa:88:99:70:67:f3:34:29:66:a6:
                    ff:62:25:4d:74:20:5a:0c:c9:f7:eb:bf:2a:fa:5f:
                    ef:1b:00:4d:df:67:74:60:3a:51:c3:f5:64:28:37:
                    86:6b:85:56:f0:d8:f6:99:97:f4:78:aa:1e:40:cb:
                    8e:b3:cb:cb:b2:d1:22:eb:ba:7f:7f:b7:5e:bc:3b:
                    d0:3a:78:20:d2:08:a8:89:4b:e8:f5:9c:7e:f6:ee:
                    7e:d9:82:39:e5:d4:b1:4d:17:17:a6:30:2e:a3:32:
                    1c:eb:48:02:3d:7f:c3:43:d4:e3:5a:90:fb:ed:da:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1B:15:18:C4:40:D6:5C:6B:94:BF:C4:CB:4D:32:E7:93:53:0D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c18259ed-d891-320f-97b4-8a88abcf4ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9d:0d:c0:8f:45:41:8a:14:8e:c8:ff:8f:54:3b:06:ff:cc:
         a7:c5:18:42:83:ec:d6:d2:c4:55:36:04:08:41:94:69:b4:2e:
         0d:ab:99:02:33:13:45:27:70:dd:52:04:de:e3:67:04:be:3a:
         94:c3:ae:61:6a:bc:3b:1e:13:02:7a:dc:8d:db:65:c4:70:d5:
         40:7d:2d:93:79:03:8a:c0:35:e1:d5:e7:fc:bb:5b:01:58:8a:
         74:bf:60:13:ce:00:47:3d:95:95:15:73:4a:77:fd:b3:08:23:
         7e:64:66:0d:c5:c3:27:e8:f5:c6:20:81:c6:1c:19:f7:8e:84:
         e8:f1:02:fc:0e:ab:5f:d2:3a:f5:98:ca:96:21:76:3c:a3:0a:
         34:0c:56:3b:d4:13:4a:09:c5:bc:29:e9:9b:e6:a8:d3:4d:84:
         1c:f0:cf:de:78:5c:f6:8a:cf:e5:8b:6f:fd:2f:80:94:34:11:
         44:8a:28:1b:5d:62:0e:4b:29:02:8d:79:e7:b7:92:02:d6:0e:
         8c:e5:f4:a8:6d:65:c7:a1:42:9a:70:61:04:6f:31:e2:cf:59:
         b5:2c:2e:50:4d:31:3d:8b:01:20:1c:a3:98:73:0c:e2:c0:b3:
         9b:f0:7d:24:0a:b0:58:00:5d:b6:b9:12:39:65:85:11:27:d5:
         db:3f:ae:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:08 2024 by rpki-client on console-ams.rpki-client.org