Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c65419e9-c52a-3763-a585-91483ffd6f7f.roa
File:                     c65419e9-c52a-3763-a585-91483ffd6f7f.roa (raw, json)
Hash identifier:          mqkrFvNypYuYlRBPKCDqNmiORYJmlnhOqm03HE3EBUo=
Subject key identifier:   4A:5B:A1:8C:0B:64:FA:FD:5D:30:8D:0E:E4:C5:8C:3A:92:F6:90:A2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B1017C2631D200F543701500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c65419e9-c52a-3763-a585-91483ffd6f7f.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     35994
IP address blocks:        23.200.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:7c:26:31:d2:00:f5:43:70:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=2950a180-1d8d-4d14-930f-07a70b050665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:e9:27:e9:f2:5e:34:e0:39:8e:59:2b:88:
                    bc:25:47:b5:04:9f:15:8b:62:1f:cb:3f:7a:e8:dc:
                    e6:c5:bd:fa:e5:a6:b1:64:98:bb:00:2f:c0:58:e4:
                    46:b5:49:41:3f:5e:5e:f0:17:fa:50:2d:13:c6:19:
                    c7:76:e8:3e:30:5c:8a:75:d2:d3:11:54:88:ec:f4:
                    00:36:dd:36:1a:0a:3f:98:06:14:f9:4e:04:ee:8c:
                    42:6e:1a:f5:78:86:c9:fa:fe:78:96:bd:06:c0:d4:
                    28:ae:dc:86:0d:a8:40:ef:7f:9b:fc:32:38:86:8d:
                    7c:8e:1a:e8:0c:75:e5:f3:7a:44:39:80:5c:d2:0c:
                    85:51:0c:8c:d0:d9:69:be:8f:4a:af:a6:bc:db:e7:
                    b9:5e:c1:f3:06:c6:40:95:bb:7d:a2:ce:98:ae:28:
                    99:39:aa:66:9b:e1:f7:55:8f:bc:0f:66:5b:d0:a9:
                    69:e6:06:4c:dd:13:08:66:01:81:26:ca:d7:a6:61:
                    a2:45:4b:97:36:46:9a:33:4b:38:2a:3c:87:f7:78:
                    fa:81:fa:50:ee:07:8a:dc:63:a0:2e:20:57:c0:3b:
                    37:e3:97:94:ef:ba:c6:d1:e9:fc:cd:91:41:b0:0b:
                    c2:c8:a2:cf:7b:9a:28:e3:46:98:ff:39:11:b6:dd:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5B:A1:8C:0B:64:FA:FD:5D:30:8D:0E:E4:C5:8C:3A:92:F6:90:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c65419e9-c52a-3763-a585-91483ffd6f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:2c:ce:e7:41:fd:8c:05:de:33:33:cc:1f:11:9f:d2:ea:
         06:ca:3c:3f:ab:1f:58:c6:1e:1d:9e:f8:07:2f:89:19:5c:3b:
         ea:a9:0f:6d:1e:74:22:87:e9:85:10:b5:d2:a6:8c:11:55:4a:
         3a:8e:fa:b1:57:40:66:af:d6:8f:88:ae:b8:86:13:6a:e7:97:
         98:8e:cb:36:00:db:de:32:79:e9:5c:08:24:dd:4e:93:51:8d:
         c2:24:a1:7c:27:1c:32:7b:10:4e:d4:f9:fe:9e:66:bb:5d:71:
         f1:f1:6e:82:75:ad:b5:aa:2b:45:b6:42:6d:52:16:2f:b1:c7:
         b2:03:f7:a1:00:e2:80:3c:bb:76:3f:12:63:38:3e:07:84:69:
         5c:b8:11:c8:53:50:c8:69:35:78:36:44:40:85:18:1a:c8:5f:
         2f:e7:04:7e:3a:31:c2:2e:8a:dd:6d:b4:9f:96:ad:1c:ff:9b:
         fd:ee:2b:95:53:ae:0b:eb:9d:c0:b4:87:79:6c:50:b6:19:1b:
         5d:37:1e:5b:9c:43:d4:be:59:3f:6f:3e:63:ac:28:ea:17:93:
         ce:ad:ca:35:10:fc:d6:6c:8d:83:3a:97:a1:96:1e:09:6f:13:
         13:5a:29:e2:d4:0a:9d:ee:33:c9:67:bb:a6:db:75:7e:6f:21:
         c0:7a:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:11 2024 by rpki-client on console-ams.rpki-client.org