Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd3ea417-2eb7-3162-9432-ead86057b6d1.roa
File:                     dd3ea417-2eb7-3162-9432-ead86057b6d1.roa (raw, json)
Hash identifier:          GFvICBCulSiIEhQ3fOLvUqSXcnfoii0292+t2ruaF6A=
Subject key identifier:   B0:F0:98:E5:2B:E3:9F:97:D2:04:22:D4:C1:03:23:93:EA:21:C0:9E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584765A0FE3CA34CDAFC94659580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd3ea417-2eb7-3162-9432-ead86057b6d1.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     20940
IP address blocks:        23.15.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:fe:3c:a3:4c:da:fc:94:65:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=aa8a1b8b-15ca-4e40-ac71-b11867730dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:69:e3:fa:54:e2:6c:a1:3d:74:c5:13:e0:
                    54:9c:cd:91:66:9a:8f:8c:f7:39:3a:e6:24:33:ea:
                    e9:1e:7f:d5:b9:33:5b:12:df:46:ea:37:e4:71:36:
                    8c:f2:e3:b5:e4:3e:72:f5:b7:51:9a:85:7d:20:4f:
                    39:66:1d:d4:4e:2d:02:f8:67:07:35:e8:e9:7a:65:
                    db:88:5c:59:fa:33:09:d2:ae:2b:c8:54:69:1e:86:
                    5f:23:3e:18:ab:13:da:4c:78:be:e9:da:1d:1c:8f:
                    f4:e7:e9:bc:94:27:ac:66:0c:ce:9c:da:3d:30:bb:
                    9e:7b:61:6b:97:ad:35:6a:bc:c7:fe:82:fe:ad:cb:
                    ad:2a:c6:87:79:9f:14:8e:bb:0f:76:92:fb:e1:f7:
                    31:f4:7e:fe:e9:d8:80:f9:c6:ce:3b:cb:88:09:04:
                    ca:a1:16:c1:eb:ef:1f:76:b8:aa:8a:bd:e9:17:ec:
                    5c:8b:dd:1a:d8:4f:88:4d:a5:5f:0c:0d:24:fe:e3:
                    5b:35:a4:2d:42:19:1e:75:4a:fb:b1:80:33:41:b3:
                    25:37:34:ba:9a:dd:26:9a:93:5b:f1:23:15:d5:75:
                    98:ff:80:3c:b9:aa:70:76:29:37:58:fd:43:c1:40:
                    2a:54:85:51:6d:d2:34:9c:cd:74:4b:6d:d0:7a:40:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F0:98:E5:2B:E3:9F:97:D2:04:22:D4:C1:03:23:93:EA:21:C0:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd3ea417-2eb7-3162-9432-ead86057b6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.15.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6b:a0:0e:79:08:aa:e4:ae:31:9d:74:ea:31:8d:02:e4:36:
         fd:23:f9:df:3f:77:54:69:96:44:aa:60:8c:7e:0d:74:3e:cb:
         55:4f:64:e5:02:f5:2a:32:89:7b:95:02:3f:7d:11:8c:2f:e9:
         f0:de:88:61:b5:73:49:d9:75:c0:bd:23:57:93:8c:5c:64:4d:
         0c:ee:6e:68:56:ab:e5:2d:3b:5f:b4:66:98:82:1d:99:10:61:
         ef:de:05:d9:07:42:e3:5e:5e:27:79:ec:86:c3:f5:cc:45:42:
         d6:31:ac:f8:9d:b6:dc:3a:eb:69:20:1e:2c:27:cf:91:93:46:
         b8:89:15:93:98:46:86:3a:2a:e7:ce:31:18:61:dd:7a:d1:85:
         5f:9c:15:1d:97:07:f2:aa:06:7c:1e:48:0a:3a:26:e6:a8:53:
         ca:39:5a:b0:15:56:25:58:1d:a8:b7:8c:ec:62:f5:35:e8:64:
         61:59:ff:d6:c1:f2:f2:79:1e:14:0f:7c:ff:78:67:e8:d9:54:
         53:9b:c4:3b:b5:97:8b:aa:41:4f:ba:eb:2c:05:7f:06:7e:68:
         ef:a8:d5:28:fa:ed:b6:02:9e:a7:14:86:6b:28:c8:6d:46:fb:
         c6:ab:d0:11:2a:90:9e:4c:77:6d:eb:d1:7e:37:d1:5f:65:e3:
         e5:81:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:33 2024 by rpki-client on console-ams.rpki-client.org