Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d15f434a-9e9e-371c-92f1-60bcf1257f0d.roa
File:                     d15f434a-9e9e-371c-92f1-60bcf1257f0d.roa (raw, json)
Hash identifier:          j90CyLwGCDVw3Unbe/IORTM0gopmot+afubk2UsSJXQ=
Subject key identifier:   07:67:48:6E:18:0D:F7:5D:61:F0:2E:D3:B7:25:3B:79:46:72:22:AE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847600BA37854386DC827073180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d15f434a-9e9e-371c-92f1-60bcf1257f0d.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16625
IP address blocks:        23.73.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a3:78:54:38:6d:c8:27:07:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=9dfd5fbe-61fb-407d-87e0-4eeba8777525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:ce:b8:03:97:ee:8a:b7:41:70:f3:a6:11:
                    68:e0:1c:11:5f:02:e9:4f:3a:d3:ba:82:26:e7:d8:
                    b8:b6:70:e6:15:89:ef:9b:8b:62:88:56:9a:4e:87:
                    d2:b0:68:0a:5f:cd:bb:43:db:f9:d4:bb:0e:27:2c:
                    96:c9:ec:31:4d:9c:79:61:2f:4a:e6:18:e9:c8:1b:
                    66:f5:fb:f2:2f:98:ef:f8:57:ca:b2:5e:6a:1d:dc:
                    4a:f5:61:8c:16:23:97:ac:8d:e9:a7:f7:bb:c2:f9:
                    e8:32:32:f2:41:b6:d1:f8:6a:72:a9:42:5d:72:f1:
                    71:a3:ca:81:7c:a4:50:81:3c:bd:40:41:5c:f3:07:
                    cb:78:bf:a8:24:54:3b:6a:d2:1d:42:56:11:aa:48:
                    8b:15:a0:d2:9a:48:6a:91:36:13:c1:ed:55:5f:74:
                    a8:d4:14:d9:32:05:d2:c8:81:ac:79:5d:eb:12:10:
                    38:bd:eb:cf:eb:62:f6:88:1a:a2:c9:8c:41:49:cf:
                    5e:56:6e:4d:b1:e5:85:a1:19:27:97:bc:44:6e:cb:
                    94:f4:a8:74:91:fc:45:9b:43:13:dc:06:41:00:10:
                    eb:b5:b1:df:50:6b:64:dc:a8:67:83:4d:4b:07:c3:
                    78:62:2e:b6:7c:20:3a:06:9b:70:74:b8:88:58:cb:
                    89:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:48:6E:18:0D:F7:5D:61:F0:2E:D3:B7:25:3B:79:46:72:22:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d15f434a-9e9e-371c-92f1-60bcf1257f0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.73.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:62:6b:88:e6:72:9f:36:17:a6:7e:f5:0b:44:c0:84:7a:
         82:ea:e0:1a:64:12:85:e3:58:77:eb:16:2a:af:87:e8:c7:bf:
         c8:cd:7e:45:67:99:31:12:b8:d1:de:4d:b3:ef:5f:7b:0a:ff:
         69:a5:0a:30:4e:6e:31:5f:7e:1c:31:fd:49:ef:94:c3:75:90:
         65:4d:97:38:0d:4f:84:cc:ce:b9:1c:70:48:f1:b9:89:fc:ac:
         db:9d:70:4c:52:09:89:84:96:dc:2c:01:c1:d0:7b:9c:a4:3b:
         63:c0:a5:28:43:e5:80:8e:17:c9:e5:1c:90:b9:af:4a:26:29:
         96:d2:ba:da:6f:ca:eb:ac:99:f5:9a:1c:93:39:6e:50:93:ce:
         ea:aa:59:b1:a0:eb:4f:f0:60:3b:e5:5e:8a:ab:bd:c5:b9:83:
         d6:47:20:b6:3e:a6:33:33:3b:5d:ff:28:a4:dc:06:c1:15:52:
         82:80:f8:9d:65:88:7b:2d:55:0b:e8:c5:36:db:c2:bb:ba:ac:
         35:71:3f:a8:30:8c:4b:5f:a5:59:d9:f9:2a:77:d1:3f:72:d8:
         17:e1:fd:51:b1:f4:58:c9:44:87:c4:50:88:2e:17:75:32:3e:
         98:6b:22:4c:2d:e7:12:a9:dd:3a:53:3b:44:98:92:26:f9:b1:
         04:58:27:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:37 2024 by rpki-client on console-fra.rpki-client.org