Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df65a4eb-c510-35fc-a5a7-3cae9953ff62.roa
File:                     df65a4eb-c510-35fc-a5a7-3cae9953ff62.roa (raw, json)
Hash identifier:          R8WfW/UbjTIAeb1AbBRxkPpSC/uoTpHkYQ/lsAZmptw=
Subject key identifier:   B2:B0:8A:D0:1F:D8:6E:FC:A6:B1:9F:CC:CD:77:26:D3:5E:70:95:E9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DF2F5C42367C2B3058265880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df65a4eb-c510-35fc-a5a7-3cae9953ff62.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.215.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:5c:42:36:7c:2b:30:58:26:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=3d89c1e2-5940-4e63-b03f-3f1de36efcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:d1:cb:d3:a9:cf:91:dc:f2:2f:92:45:d8:
                    62:04:e9:d5:a8:0c:a9:94:f5:da:0b:12:a8:0a:ec:
                    94:e2:62:38:75:44:1a:e0:f3:03:d1:98:ac:27:6e:
                    23:ff:7c:73:f1:81:12:48:ad:6d:1b:64:88:b0:3b:
                    eb:de:7e:0c:a8:69:54:ba:f9:50:9e:55:6b:9f:08:
                    e5:ac:4f:e2:12:41:e7:09:36:19:e1:c0:e2:e6:4a:
                    0f:30:f0:71:57:41:41:86:26:ef:73:1d:03:3e:fc:
                    3b:05:84:2a:95:44:dd:fd:03:c8:01:18:2c:b8:2f:
                    2c:91:c1:86:09:a5:7b:fc:7c:ee:96:48:88:6e:6d:
                    1e:59:e2:f8:95:89:b9:21:24:43:20:37:1c:77:61:
                    65:e3:3d:11:dc:e2:40:b3:ad:88:a8:43:9a:90:8b:
                    ee:f9:8a:f3:cf:fe:26:c8:85:27:eb:d3:d0:9b:04:
                    ac:e2:bf:eb:96:9b:d8:c3:81:8f:37:3e:d5:08:2f:
                    ca:91:88:48:97:b9:85:99:94:ee:c0:3c:bf:78:44:
                    9c:e3:f4:b3:66:17:6a:c0:fb:5a:ea:18:e9:70:b7:
                    18:43:d0:5c:6e:64:e3:e3:70:6d:0a:9d:de:84:9d:
                    6d:9f:17:ee:ca:eb:02:0d:b6:64:44:97:ec:c4:5f:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B0:8A:D0:1F:D8:6E:FC:A6:B1:9F:CC:CD:77:26:D3:5E:70:95:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df65a4eb-c510-35fc-a5a7-3cae9953ff62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:87:c2:0b:35:9f:b7:bd:bc:98:ea:fe:f4:aa:03:ec:66:98:
         7e:6c:f5:81:f2:48:d7:55:66:12:63:db:36:92:cf:4c:c1:e5:
         f7:84:b3:8e:78:4e:a6:d5:89:bc:41:71:45:eb:5e:66:9f:e1:
         07:2a:e2:fa:cd:5f:b8:28:9d:3d:de:0c:c0:83:3b:b5:bd:74:
         20:a4:83:3f:32:e3:15:91:1e:58:ab:a9:65:70:50:5f:39:2f:
         8b:68:28:d2:b4:b4:63:07:f9:d5:de:a2:ca:5c:b1:48:c9:a4:
         7e:f8:90:1b:c6:05:97:e3:e8:c0:d8:79:dc:b1:ed:fa:7b:64:
         6e:d4:22:3e:6e:04:64:0e:20:2c:c3:6a:82:4d:43:7f:d9:46:
         a7:db:f8:93:41:84:69:b5:94:df:59:ab:55:cf:d0:83:c7:cd:
         dc:96:0f:c9:be:62:c7:a2:0a:54:32:9a:99:69:f2:1a:74:53:
         b2:d3:56:49:54:c0:ee:8a:64:af:33:30:62:89:c8:56:8a:d4:
         1d:1a:e0:fe:03:e3:ec:f9:56:7e:5a:70:e4:22:8a:06:e6:49:
         65:62:a7:fe:1f:87:b0:3e:71:cb:09:39:cc:17:14:19:24:a3:
         5f:51:98:d1:4f:d4:35:ab:8f:7e:15:14:52:54:4b:4b:09:8b:
         a9:bb:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:34 2024 by rpki-client on console-ams.rpki-client.org