Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbd2c005-1ed8-3585-b980-5114134ad389.roa
File:                     cbd2c005-1ed8-3585-b980-5114134ad389.roa (raw, json)
Hash identifier:          rrQ9+5cCTjAj6cDE9eQvIW/yvILJ39mfykT+07LMQJk=
Subject key identifier:   0F:AB:CA:9A:6C:79:7E:8D:BF:81:52:56:67:FC:95:4A:48:B9:10:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847B66A4A8E32F543C7FF4BB600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbd2c005-1ed8-3585-b980-5114134ad389.roa
Signing time:             Wed 30 Oct 2024 11:31:14 +0000
ROA not before:           Wed 30 Oct 2024 11:31:14 +0000
ROA not after:            Tue 28 Jan 2025 12:31:14 +0000
asID:                     20940
IP address blocks:        23.196.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:6a:4a:8e:32:f5:43:c7:ff:4b:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 30 11:31:14 2024 GMT
            Not After : Jan 28 12:31:14 2025 GMT
        Subject: CN=92d5c511-1d18-45ec-b608-12d0132e856e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:02:62:83:30:e6:ae:b4:50:db:57:e4:c1:
                    b6:91:5b:ea:30:1d:70:f2:7b:af:31:6a:a3:92:fe:
                    51:89:01:ff:88:8b:e1:1e:82:42:0e:f8:d3:24:d3:
                    f4:8c:fc:ff:2a:e6:32:6f:10:9c:82:f9:23:39:59:
                    dc:48:26:be:f9:d4:b2:ec:e3:a2:5c:22:4d:bf:e2:
                    3a:56:b2:94:58:e3:27:da:1b:aa:c8:f0:ed:91:ff:
                    b1:f6:b3:3b:b2:49:66:ff:51:61:d5:2b:0b:0b:c9:
                    da:64:9f:3d:30:87:b4:d7:b6:6e:58:41:c4:86:b0:
                    e6:37:0c:44:54:9b:37:44:6c:4d:26:96:9c:99:57:
                    e4:de:ce:16:fd:b4:af:d3:95:55:c1:6f:6a:73:53:
                    54:35:65:30:06:05:ce:33:19:54:99:ee:7b:d8:c7:
                    32:0b:d4:79:8e:47:62:76:ca:47:d4:87:8c:62:a8:
                    3f:e3:15:d3:a1:94:df:8d:c4:02:b1:dd:0c:ec:94:
                    a0:20:36:78:83:f7:d4:ec:5d:83:f0:96:f8:a9:2f:
                    15:65:33:31:1b:48:e9:e7:5d:cc:46:48:f8:35:c1:
                    e6:79:be:31:79:c7:c5:0c:4c:18:8d:9d:f2:cd:c6:
                    03:7c:78:15:71:32:b1:55:e0:67:26:28:61:50:7b:
                    da:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:CA:9A:6C:79:7E:8D:BF:81:52:56:67:FC:95:4A:48:B9:10:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbd2c005-1ed8-3585-b980-5114134ad389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.196.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f7:0a:bf:24:30:c0:32:e0:15:f6:d7:fa:25:1e:93:dc:33:
         36:67:82:a6:a0:1b:9b:98:57:37:33:8b:d5:03:a4:6f:0f:92:
         90:25:18:cf:26:cb:fe:fe:68:c7:7f:57:26:58:be:f2:79:51:
         02:a3:cf:3e:68:61:a5:58:5c:24:2c:a8:c7:cc:61:30:a2:79:
         81:83:21:10:4d:84:78:f5:63:8c:1c:bf:70:d0:61:3e:43:92:
         2d:32:08:8c:a2:1a:dd:ce:6f:03:a8:82:c9:4c:fb:c6:72:7b:
         49:e0:46:0d:e3:c9:8c:85:09:04:f7:ec:fd:41:06:28:cd:7c:
         b4:76:3c:a8:36:98:3e:43:0a:38:95:1d:25:28:e5:7b:7a:51:
         4f:1a:ed:cb:15:02:b2:8f:f4:c3:5d:f4:8c:52:6b:0b:f9:7f:
         26:7b:06:1a:fb:c5:bb:cc:93:b0:64:0f:d2:d6:41:ad:b0:42:
         93:fd:bd:90:1c:48:5c:e9:1e:02:83:6f:06:93:7d:0a:70:01:
         6d:c2:6e:3c:25:03:76:26:f3:29:cf:20:bf:69:5e:6c:a8:f5:
         e9:a8:b2:e4:68:7e:f7:69:ef:ab:24:5a:65:60:37:f6:b6:45:
         33:2c:c9:97:91:52:e4:cb:a2:78:6c:02:d3:25:34:16:3c:f3:
         e9:7a:55:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:26 2024 by rpki-client on console-ams.rpki-client.org