Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dccd61d9-e582-3e8d-9738-50d158bca623.roa
File:                     dccd61d9-e582-3e8d-9738-50d158bca623.roa (raw, json)
Hash identifier:          siCmljFr344YQ5ZCxYvgfXeKdt08DMhryPDF4CdZGQY=
Subject key identifier:   71:FB:6A:32:39:38:4E:B5:D9:18:F4:9E:2C:C9:0C:6A:78:47:D8:B8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584898D61D50D0CA7612061CAC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dccd61d9-e582-3e8d-9738-50d158bca623.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.192.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:1d:50:d0:ca:76:12:06:1c:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=508af638-5f82-48ef-8d98-ecab939191ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:82:4f:7d:e8:22:f4:ad:c5:c8:a5:96:28:
                    65:9f:0f:92:9b:43:bf:ef:44:f6:97:7d:ee:bb:45:
                    97:c7:bf:22:19:65:a9:22:68:05:16:1c:50:4f:cc:
                    25:3b:e6:2a:99:23:5a:bb:f5:52:25:33:e2:d2:e5:
                    f2:2d:c2:8f:88:da:05:2f:7b:29:33:f4:52:1b:36:
                    81:a0:7e:f0:5a:aa:e8:e7:c7:95:a2:69:71:18:74:
                    67:19:c2:12:bb:33:8e:d4:de:12:b8:d5:48:75:b5:
                    e4:41:00:00:16:a2:aa:65:32:c6:40:14:de:07:2d:
                    74:4d:9e:e0:98:fd:b9:f9:f6:de:76:b7:8a:37:ce:
                    71:a1:9f:0b:60:3f:34:d3:13:9e:2d:ff:c8:7c:47:
                    ca:a3:d2:2d:f3:16:e4:ec:23:66:bf:c4:16:43:98:
                    53:1c:40:66:3e:2d:f9:84:02:44:27:9b:1a:5f:b2:
                    ba:0d:51:bc:92:36:e2:d5:4a:6a:d7:96:aa:0c:bd:
                    44:ce:ec:a5:0b:66:5c:53:49:fa:ae:23:0f:04:1f:
                    9f:48:a4:d6:6f:bc:21:d6:c7:cb:10:58:be:83:d9:
                    62:5c:d4:82:bc:54:b0:7f:4c:d5:57:ff:32:5a:ed:
                    e3:2b:49:22:f2:f2:77:68:02:22:5f:75:eb:9c:ed:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:6A:32:39:38:4E:B5:D9:18:F4:9E:2C:C9:0C:6A:78:47:D8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dccd61d9-e582-3e8d-9738-50d158bca623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:46:ee:1f:ee:9a:2b:57:38:cc:d8:ce:51:d5:a4:0d:fd:
         9f:00:3b:05:9b:02:f6:67:29:83:b3:1b:b3:9a:57:22:b2:f3:
         0a:2e:aa:41:c5:29:a0:64:66:64:dc:7c:5d:d7:bb:03:b4:1f:
         01:6b:68:50:91:60:d8:53:f2:35:30:53:3b:58:b4:5b:0e:7c:
         0a:e8:d7:cc:4a:b0:4f:90:25:5f:bb:90:f0:63:95:c0:af:c7:
         93:23:7f:de:dc:54:43:0b:8c:69:e9:2d:ff:32:e8:1a:9f:21:
         32:1d:9f:f4:40:b1:9f:56:4a:a5:4d:2a:62:77:c0:36:9c:be:
         95:1b:95:d5:1f:b5:95:21:f8:c2:44:61:35:5e:7e:f3:6a:00:
         4d:65:ba:77:da:8e:24:0f:a2:b3:7a:fb:c2:c0:87:75:e0:47:
         d2:3c:c4:f0:43:b9:ae:49:e4:da:29:05:21:3d:53:76:75:a3:
         47:96:c4:29:3b:c3:02:6a:41:8a:40:67:6a:a2:b9:5c:76:1d:
         ab:8a:1a:55:2b:8c:e5:59:fe:28:4d:4d:54:b8:42:b2:b3:14:
         21:93:06:3b:88:34:78:68:8c:fd:3f:e6:13:93:c5:2c:33:9f:
         bc:42:8a:8c:44:11:7b:72:f3:32:66:a8:85:96:1b:29:30:40:
         25:dd:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:59 2025 by rpki-client