Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1519cac-f756-3778-816b-8d423964017f.roa
File:                     e1519cac-f756-3778-816b-8d423964017f.roa (raw, json)
Hash identifier:          lI23420AZiDGg/oEMOj5QFT54KzdCMhLx5NXlkmRao8=
Subject key identifier:   E8:38:EA:A2:D4:18:E8:CF:15:9D:AD:15:60:08:68:27:E2:CB:21:E3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D999FCBC538A38DD4E638A60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1519cac-f756-3778-816b-8d423964017f.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     16625
IP address blocks:        23.205.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:fc:bc:53:8a:38:dd:4e:63:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=3fde1060-a1f3-4bf5-9f59-f244ccd71ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:75:f5:46:66:86:41:45:ca:31:83:80:e6:46:
                    d8:ce:05:1c:28:55:19:e7:d3:3d:86:a9:f9:cc:97:
                    62:f8:d9:2d:3f:59:f5:e8:15:41:31:4d:a4:18:dd:
                    1d:a2:e5:d3:b7:06:55:b1:ff:d0:4a:57:47:ec:cf:
                    7b:4e:6d:1a:53:d8:b1:22:5f:bf:d8:a1:b3:c7:52:
                    e5:ff:8b:79:e0:88:0f:71:39:85:f6:40:26:60:3d:
                    6d:a6:48:70:a3:e9:a1:c3:a4:73:46:b0:07:9b:ee:
                    9f:be:61:c6:e0:3d:0a:20:38:1d:12:38:73:79:1e:
                    12:50:f7:84:85:33:b4:c6:65:97:02:c8:35:ac:fb:
                    8d:2d:6b:a6:4a:00:44:ac:d1:14:53:fe:56:3a:8b:
                    1e:26:c7:43:e5:42:3c:3a:5a:82:73:fb:76:ba:9e:
                    3e:0c:83:9f:f9:91:10:cf:d9:58:65:7e:5d:9a:3f:
                    0b:98:0c:db:5d:43:aa:6e:ad:eb:d4:89:8c:d8:a0:
                    0f:37:e6:a8:94:3b:eb:28:e7:dc:37:e0:47:82:ea:
                    1e:d9:83:a3:0b:c9:32:bc:96:4f:3b:ac:3e:22:6a:
                    e7:66:7a:fe:33:6d:37:19:0a:05:c1:46:b9:84:6b:
                    66:41:e3:8a:51:7d:3f:9e:1b:85:d8:a9:e7:6b:bd:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:EA:A2:D4:18:E8:CF:15:9D:AD:15:60:08:68:27:E2:CB:21:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1519cac-f756-3778-816b-8d423964017f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:81:cd:63:36:0c:9d:27:53:64:c7:c6:c8:95:38:ea:15:
         4a:03:53:eb:0c:8a:5f:7d:1d:77:e7:e6:e5:aa:03:c9:c7:e5:
         30:21:1e:a8:23:ed:c8:21:a0:95:56:b5:9c:18:1f:01:70:c4:
         db:8b:61:d4:90:80:92:40:b2:33:7d:9e:26:a8:bd:be:c7:55:
         16:4d:a5:80:d4:5c:cb:15:07:7c:38:cc:82:6f:32:7c:f5:f4:
         1d:63:fb:04:03:e7:90:a8:1f:e7:7c:af:e6:a4:05:ae:cc:c8:
         e3:c4:00:5a:ec:58:2c:e3:f8:ab:52:50:90:2d:d6:fb:f0:92:
         fc:b1:d3:f1:3a:48:96:22:97:25:a5:08:bd:2a:74:b6:cb:6d:
         41:c9:fc:3d:11:b9:bf:c2:1d:dc:71:84:3a:9a:32:9f:93:22:
         21:5c:ba:bf:21:39:8a:6e:c2:93:85:4d:e6:fe:38:95:ba:33:
         78:2e:aa:b1:fd:a7:9a:93:a7:03:8f:c8:b4:17:9e:f2:e2:ac:
         f5:db:e7:4f:04:48:44:51:14:1d:5a:1e:d5:45:67:9b:99:c6:
         cc:aa:5e:0d:91:f7:52:92:57:ec:f2:69:2d:b1:19:3d:91:00:
         cd:0e:e2:e5:88:03:b5:a4:7a:8f:16:b6:5c:8f:42:fb:2c:b9:
         c4:90:4e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:44 2024 by rpki-client on console-fra.rpki-client.org