Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf3c4520-056e-3ea4-890f-898e84a88044.roa
File:                     cf3c4520-056e-3ea4-890f-898e84a88044.roa (raw, json)
Hash identifier:          pMeF/reCa3Y+W8QWnhEgPfCxhi7OREpMQBYueMCCLfA=
Subject key identifier:   7F:BB:42:08:F3:B8:18:84:FA:42:62:9A:3A:B9:23:2C:D9:C6:23:8A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584845159F42CE8650881C0AAD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf3c4520-056e-3ea4-890f-898e84a88044.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.3.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:9f:42:ce:86:50:88:1c:0a:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=f9adf705-48cd-4dda-b758-2efa5c71eab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:d6:96:12:89:b1:0b:72:27:f6:72:45:c7:
                    20:e1:36:7d:44:78:70:f2:21:ab:df:7b:ea:6d:ef:
                    8f:94:d7:df:09:c9:89:1a:61:32:ed:3e:e5:49:2a:
                    44:04:d5:99:11:32:1b:6d:38:fa:13:98:74:7c:3a:
                    04:33:fd:8f:7e:e8:d8:39:39:54:da:bb:29:82:93:
                    5c:aa:35:85:28:1e:13:ac:b1:5a:75:dc:72:ab:75:
                    f8:33:51:83:47:0a:b0:a4:b3:5b:d0:02:95:1a:3b:
                    90:0d:1c:71:8a:d9:40:0f:e7:7b:13:79:d3:2c:f8:
                    7c:6b:92:52:34:bf:d8:de:d5:ec:c9:e4:b2:ee:e7:
                    64:cc:33:ca:f1:1c:b8:a2:d6:2f:00:bd:f7:83:fd:
                    cb:a3:f0:25:3a:e6:86:5e:5e:dc:f5:00:a1:12:94:
                    b5:a4:74:7c:3b:9b:6d:0b:53:55:42:cb:8e:02:25:
                    b2:53:4b:0d:18:17:06:5f:b9:3b:9a:56:8f:c9:61:
                    1a:68:2e:cb:9e:20:3e:f8:10:b6:d5:2f:b1:32:b3:
                    b6:7c:e6:46:7e:89:60:df:2e:e9:34:83:6c:a1:8a:
                    d1:33:0d:4b:ae:40:54:ed:be:8c:0f:37:a8:c2:b9:
                    f6:8b:6e:16:c5:27:2b:1d:76:d8:b0:e6:df:42:fa:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BB:42:08:F3:B8:18:84:FA:42:62:9A:3A:B9:23:2C:D9:C6:23:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf3c4520-056e-3ea4-890f-898e84a88044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.3.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:00:e4:1d:f4:e9:7a:fc:52:fb:fc:c6:df:a5:99:15:b2:86:
         7d:4b:e0:f6:d3:ec:9a:62:f0:cf:10:db:87:b8:56:ca:ae:e0:
         b0:8a:88:25:c0:b4:31:7d:a5:08:69:74:2c:e7:f9:a4:f7:d7:
         54:10:c3:2e:27:47:ae:28:34:0b:12:6f:f6:c6:8c:c8:c7:17:
         29:7a:ce:a6:18:1e:14:be:4f:4a:62:e9:8e:e6:70:1f:9d:5f:
         89:fc:f7:94:1b:77:58:46:e4:ef:70:b1:d7:37:8e:d8:53:35:
         d9:f5:66:c8:07:66:1b:b0:01:c5:b1:f1:ce:9d:62:ac:65:0b:
         d4:9b:f1:64:53:8f:d0:57:6e:bc:ed:16:4c:d1:88:4e:50:75:
         0a:73:3e:50:29:6e:f6:ee:f5:09:83:cb:c3:fb:3a:bc:25:ee:
         5a:7c:f1:0c:c3:6f:18:f2:74:48:23:d8:4c:10:d1:23:fe:94:
         70:f8:d0:70:7d:38:f4:38:5e:44:f6:34:e7:7d:19:38:ba:4b:
         47:d7:c3:e7:de:d2:d0:35:81:40:a1:67:3a:9a:86:67:29:a6:
         c1:8b:c9:9a:4b:b3:62:a3:53:30:10:75:f7:50:46:be:9f:f0:
         b4:d1:57:ec:ef:58:5f:2f:42:2f:12:68:3f:c4:5a:cb:8d:65:
         2d:a8:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:31 2025 by rpki-client