Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b00f00-5871-30ef-b7d4-09c38abab189.roa
File:                     e2b00f00-5871-30ef-b7d4-09c38abab189.roa (raw, json)
Hash identifier:          EGNFBkjERaQmPVq/BTcbnwzkPf4MlbqUcvSawNJ2wPM=
Subject key identifier:   04:01:77:1F:D9:F4:2F:DC:A6:E5:A0:8B:CC:53:AE:A3:53:C4:8D:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36CBF9D955704E450D0700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b00f00-5871-30ef-b7d4-09c38abab189.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.55.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:cb:f9:d9:55:70:4e:45:0d:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=db388b2e-c14e-4339-b258-87dc9c80a1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:6a:8e:05:14:8e:7f:fb:09:68:b0:7e:6f:
                    12:e7:c7:2e:66:89:93:8e:20:10:78:82:83:ba:f8:
                    18:3e:fe:d3:16:95:60:e6:1a:2d:5e:c0:68:0b:fe:
                    88:6f:b2:59:d0:7f:72:4f:2a:54:dd:cd:76:70:a9:
                    59:8e:aa:83:e4:49:c5:c9:b2:5e:9e:8f:fb:08:5f:
                    24:90:34:13:db:b8:e7:a7:48:69:cd:41:03:49:70:
                    76:a2:6a:ec:33:44:f8:27:b0:3a:60:e9:c7:d8:c7:
                    d4:c6:8b:ba:f5:39:52:17:90:22:cc:ed:fd:e0:84:
                    2c:a5:85:96:66:64:bc:ed:b7:65:d2:f4:6c:b1:2f:
                    6a:0b:c8:71:cd:d5:ed:01:34:18:e2:46:e3:e3:9c:
                    7a:e9:e7:fb:36:8f:67:24:49:db:bb:c8:5d:b2:8e:
                    74:4c:73:33:05:c8:73:27:bd:4c:98:ac:4a:be:30:
                    36:3b:41:45:56:a9:df:7d:50:2c:ee:15:62:26:96:
                    91:c2:ab:24:ed:9c:f4:c5:ac:7e:82:f3:ae:b9:9f:
                    5b:45:43:3e:7c:93:04:bd:90:7c:12:22:b7:ec:9c:
                    c9:1c:f0:18:f6:0d:cf:64:0d:f3:b9:37:c6:f7:85:
                    6c:b3:59:af:a5:06:1a:18:e7:42:3f:f8:7f:23:17:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:01:77:1F:D9:F4:2F:DC:A6:E5:A0:8B:CC:53:AE:A3:53:C4:8D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b00f00-5871-30ef-b7d4-09c38abab189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7a:a9:78:b7:1e:95:8d:38:a4:d4:63:22:58:c9:4a:75:6d:
         e8:e6:f0:fc:c5:31:8a:f6:c6:24:72:0f:07:0d:fc:0e:54:1d:
         4b:d9:20:84:f6:ab:b2:58:e0:06:dd:6f:f0:e9:d2:25:8e:96:
         c3:36:f4:68:fe:e9:5c:ae:8d:69:09:cc:b3:1c:aa:49:4e:cd:
         39:ec:5f:66:df:5c:2f:37:a1:55:83:29:86:ac:6a:d9:7a:e7:
         7a:f1:58:3f:72:83:96:9d:d5:a9:0e:2e:aa:4d:ee:13:05:de:
         28:f8:8d:fd:a9:cc:9e:b7:da:f9:ae:ba:7c:5f:43:ba:c8:b5:
         ad:15:27:9d:8c:15:af:6b:03:60:57:c1:cb:fb:c0:bc:f0:17:
         61:87:86:df:cc:55:17:c7:f9:2f:50:6b:d2:47:48:86:4d:9f:
         c7:35:01:46:f3:dd:62:a0:95:fc:27:69:9d:82:35:32:3b:37:
         d3:e9:1d:64:04:88:90:97:e1:85:db:2b:ae:ef:65:dd:38:38:
         0f:82:a4:ff:bd:1c:c4:a7:50:70:13:f9:f7:3b:fc:e0:1e:d0:
         22:18:37:1c:52:74:3d:15:3e:1c:df:f9:6b:ed:ba:c6:27:f4:
         f0:76:a5:29:f3:38:3a:45:9f:1a:99:74:f4:4a:4d:f8:97:79:
         ad:9e:5f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:35 2024 by rpki-client on console-ams.rpki-client.org