Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cee73cdc-d54c-3593-aad7-e6c4c45b89f5.roa
File:                     cee73cdc-d54c-3593-aad7-e6c4c45b89f5.roa (raw, json)
Hash identifier:          N7xt3S7CRgnWsEGz7n5MaZvOIymgCjgNBgj/pmJfEKQ=
Subject key identifier:   4B:1E:0A:85:15:EE:75:29:E0:D5:4D:D3:E8:96:19:53:85:01:02:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858478F8132961A71CD6CED60B400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cee73cdc-d54c-3593-aad7-e6c4c45b89f5.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     16625
IP address blocks:        23.33.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:32:96:1a:71:cd:6c:ed:60:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=8ff97408-2acc-4933-9e80-10bad980fd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:ec:04:73:24:3d:9b:21:91:af:04:b8:51:
                    aa:c5:15:b1:ac:d1:7a:cc:e0:52:9a:39:b1:06:6a:
                    12:b5:00:bf:d0:c3:a6:e1:7d:f7:c0:ff:3c:b7:95:
                    9f:e6:55:ab:dd:a5:de:61:86:27:e4:f2:03:d1:00:
                    19:1b:00:29:2b:5c:f0:ec:01:e3:50:6e:94:97:ba:
                    b7:2f:d8:9a:f5:80:89:8a:1a:12:9d:4d:c9:86:58:
                    c7:4e:9d:ca:ad:af:41:a6:7a:9a:11:be:91:a1:af:
                    06:e6:23:3c:e7:79:48:c5:e5:27:ad:76:c3:fc:aa:
                    7e:44:17:3e:6c:ca:be:c6:ae:fb:79:6f:c4:9f:6e:
                    7f:a0:fd:c5:58:87:d8:10:82:ce:4a:a5:07:e5:cb:
                    07:57:ef:e1:79:66:bb:33:cd:8c:3a:df:1c:99:2d:
                    d8:6a:6a:2e:f1:69:f2:95:df:e6:21:34:f4:bc:c0:
                    7e:74:8b:54:b5:ed:10:ce:1a:88:e5:65:c6:32:dd:
                    8f:e4:2c:99:42:eb:21:49:fd:94:77:a2:34:05:55:
                    02:b9:32:4e:12:74:d2:0c:63:bf:b0:f7:a6:97:16:
                    0c:22:d1:36:f4:8a:46:48:64:9a:b9:cf:48:df:e3:
                    f7:7b:f0:f3:af:6c:e5:b3:9d:6a:fb:b2:64:7b:8f:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1E:0A:85:15:EE:75:29:E0:D5:4D:D3:E8:96:19:53:85:01:02:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cee73cdc-d54c-3593-aad7-e6c4c45b89f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8b:7c:36:46:ff:2e:83:63:c2:6a:c6:0a:2c:86:16:e4:33:
         45:7e:63:75:15:37:8d:cf:e2:52:d6:38:67:83:61:ea:18:de:
         ca:c7:7e:b1:1c:0f:01:08:31:d9:89:38:54:83:e2:70:db:33:
         4e:68:e6:d0:1f:d5:67:c1:a9:0e:fb:54:ff:d6:95:ed:b0:b4:
         96:de:d0:b8:94:94:dc:76:8b:b2:64:66:a9:a4:17:7e:83:20:
         04:56:cd:28:87:bb:27:28:17:1b:a0:d3:64:3a:ce:23:a5:c7:
         d5:74:57:65:5d:43:ba:4f:b0:07:49:c0:39:b1:d5:5f:21:29:
         ae:17:bf:5c:08:61:76:e3:58:17:6c:5c:e8:d8:10:d0:bd:74:
         6c:2f:37:18:d5:1e:aa:89:1f:8f:c0:44:55:65:89:98:b6:f9:
         f3:e8:36:f1:22:9e:0c:a9:31:1d:0e:43:56:78:b1:cb:4b:64:
         39:72:1d:13:d4:98:3b:9a:d8:bf:e6:43:6f:df:02:43:63:04:
         88:c7:8f:82:fa:8b:46:17:d1:34:c4:d6:92:74:a0:1d:df:fa:
         28:d4:42:7f:04:d2:d4:7e:72:88:42:ad:d4:28:b3:b2:8a:ae:
         c0:88:5d:29:6f:ad:a5:6a:a9:55:eb:5e:44:f5:1b:91:8a:e7:
         b6:e6:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:19 2024 by rpki-client on console-ams.rpki-client.org