Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db112001-6bcd-3b29-801a-ae66b001b69d.roa
File:                     db112001-6bcd-3b29-801a-ae66b001b69d.roa (raw, json)
Hash identifier:          aGSXH3MoPTHq73wPIMepbyPaC4h81q776XP9p9Jm8eM=
Subject key identifier:   CA:E1:C9:EF:87:DC:4F:E6:5B:C0:C6:7F:2E:AA:B5:02:C6:F9:C4:23
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D99A043F2868FE6B59DF7440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db112001-6bcd-3b29-801a-ae66b001b69d.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     35994
IP address blocks:        23.205.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:9a:04:3f:28:68:fe:6b:59:df:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=8cc9d6f8-5f0b-4d0e-b050-cb67b527b838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:bb:0d:9f:ca:2e:fa:03:c3:31:55:0b:b8:
                    ae:15:ee:f6:27:b2:76:6f:a2:89:5e:1e:3a:71:3c:
                    9f:ff:0b:eb:5b:86:d6:a2:7d:35:ca:e3:96:5f:e4:
                    7b:79:de:21:03:56:5c:dc:98:92:2a:7f:2f:69:ac:
                    da:87:23:a3:fd:a0:dd:19:5d:af:0c:05:a0:35:4f:
                    4f:55:43:69:00:1a:a1:c6:ad:db:93:48:19:f0:25:
                    bd:f1:31:67:1d:41:79:90:24:2a:f1:f0:61:e3:1e:
                    05:95:dc:fe:2d:28:40:d1:0d:a9:b6:43:b0:d3:6f:
                    5c:48:05:58:21:8d:86:7f:28:d1:48:b6:b1:ff:70:
                    23:7f:2c:8d:2b:5e:9f:f4:3a:1a:94:f7:8d:5a:d9:
                    34:2e:71:b6:d0:c9:70:ff:44:c6:96:06:5a:22:a2:
                    a9:9c:a9:8c:2e:7c:24:ca:e5:f9:34:99:f6:89:90:
                    75:63:7b:bf:cd:9e:98:e6:a9:4c:4e:5b:00:42:35:
                    f3:1c:d3:ab:48:21:a1:77:04:90:dd:e9:2e:e1:70:
                    6d:44:03:74:5f:93:6e:f5:64:e8:31:3a:2a:f9:20:
                    bc:8c:61:27:e2:ce:93:ba:d9:56:8f:e9:db:ce:7c:
                    fb:59:1e:ac:94:f9:18:8a:8d:88:e7:48:20:50:d6:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E1:C9:EF:87:DC:4F:E6:5B:C0:C6:7F:2E:AA:B5:02:C6:F9:C4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db112001-6bcd-3b29-801a-ae66b001b69d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:16:5e:37:a1:8c:de:e5:98:62:6a:18:b1:f4:95:80:55:
         ad:56:f5:bc:e4:89:87:d7:18:86:b6:6e:5d:d8:ef:72:32:69:
         62:e3:1b:67:7d:26:2d:a5:13:c1:50:aa:36:1f:ea:5a:08:d9:
         1b:92:33:26:77:d2:fc:34:33:41:3a:e7:83:35:70:78:12:b8:
         62:99:b0:50:dc:32:1f:af:ed:e2:ec:60:66:45:da:76:56:c6:
         dc:d7:0b:20:dc:69:a5:79:2e:2d:9a:7f:96:02:dc:69:3d:ff:
         e3:54:c5:c9:21:99:b5:7d:74:58:a3:d6:bd:38:85:d4:2a:11:
         9d:7f:6c:6c:2f:ca:23:2c:0e:fe:1a:af:e7:2a:19:a1:64:36:
         54:1d:d6:5d:36:ae:b6:6b:7c:46:08:24:d4:ce:92:5e:1a:2b:
         2c:e3:82:c4:a1:3f:31:a5:03:04:36:96:24:68:c1:7e:dc:a7:
         7a:01:6c:19:cd:52:b4:90:25:c3:26:00:60:cd:5f:5e:54:b7:
         ee:ef:89:54:c2:4d:35:d3:be:a8:29:d6:27:9f:3f:a2:4f:73:
         ba:22:ef:96:7e:0a:89:5f:55:78:85:ce:79:64:01:c7:51:d7:
         ee:e3:b4:4d:6b:07:f0:f9:c1:03:1b:26:3d:41:8b:7b:1d:09:
         bd:5c:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:41 2024 by rpki-client on console-fra.rpki-client.org