Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b9dd16-927d-339a-a0f7-1067ea3bc7ff.roa
File:                     e2b9dd16-927d-339a-a0f7-1067ea3bc7ff.roa (raw, json)
Hash identifier:          IcptUb3CImdAKgDXwtK8yJxPnYdUlihXCx8eZIFtsOc=
Subject key identifier:   BC:96:96:19:A4:9A:C0:97:EA:13:1F:74:29:7C:06:38:FF:FD:BB:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D99A076204E2647B599F0FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b9dd16-927d-339a-a0f7-1067ea3bc7ff.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     9498
IP address blocks:        23.206.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:9a:07:62:04:e2:64:7b:59:9f:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=22a12b69-392e-4614-a210-f6d450e333dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:80:71:5b:34:1f:99:c5:44:9c:66:e9:13:
                    4b:84:4d:13:b1:a8:4d:b1:a8:67:9e:b6:6f:df:20:
                    90:94:ce:a2:a2:6e:79:a9:c0:0c:b0:e3:3d:a8:4a:
                    f3:8a:db:3c:7d:8d:d9:f1:07:0d:e3:ff:69:2e:97:
                    39:44:14:a0:c9:39:2a:ea:74:f9:23:c4:8b:45:c5:
                    69:1b:2c:b2:c5:5e:66:67:89:3b:c4:21:13:75:68:
                    ed:2b:0e:77:42:9f:88:31:ce:f1:88:1f:13:3e:bf:
                    95:d1:4d:c0:d2:41:47:8f:07:25:93:a0:ca:90:80:
                    40:60:90:92:34:9d:90:c6:38:86:11:01:00:84:a8:
                    1c:b8:c7:ce:62:a2:f4:19:1d:5b:c6:10:bb:cd:9a:
                    ff:be:0c:b2:20:ea:5c:b5:e8:d7:ac:73:90:72:a1:
                    48:9d:a3:06:b6:d2:8d:b3:e5:26:bb:8b:a4:b5:45:
                    a8:0a:6a:a8:ed:9b:0d:af:f3:4f:39:27:61:1b:16:
                    1b:af:3f:95:4c:23:b1:7c:ba:3e:2d:ef:32:b7:3e:
                    d1:6b:81:53:48:fb:43:9d:6e:3c:a8:85:de:36:9a:
                    24:30:a7:aa:03:c5:2a:f1:06:b6:74:6c:20:b8:7a:
                    91:c1:fb:c9:99:6a:e4:5d:e3:c6:31:b7:73:61:a6:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:96:96:19:A4:9A:C0:97:EA:13:1F:74:29:7C:06:38:FF:FD:BB:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2b9dd16-927d-339a-a0f7-1067ea3bc7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:07:01:b7:04:fa:05:1d:c2:bc:fa:cc:76:11:43:f4:f1:
         42:8a:5d:2a:6e:0e:36:04:89:d1:bf:30:2b:0a:7f:d7:67:40:
         d4:f9:ce:79:f7:28:7d:59:58:77:ab:39:63:7d:73:40:bc:b1:
         bf:30:be:fb:b9:aa:c6:76:de:c4:df:9c:35:dc:66:88:39:85:
         92:63:71:24:1a:b5:6f:98:a2:ef:0d:50:e4:56:88:ff:41:53:
         8a:09:68:55:21:4d:6c:fd:fc:49:e8:5b:8b:95:6c:7d:17:77:
         70:17:01:05:f5:54:0e:42:63:08:76:7e:6f:0c:4d:2a:01:cb:
         b9:d7:74:4f:15:80:45:4a:80:2a:4e:80:aa:32:2a:b1:bd:44:
         0b:56:66:82:85:71:ff:b2:ad:fd:0b:58:a0:7b:3b:04:c5:cf:
         34:cf:91:33:8c:ef:42:91:43:b8:ed:c7:bc:2e:c1:e1:67:20:
         e1:ee:1c:42:d8:25:38:10:dc:94:61:9e:90:ff:08:22:58:47:
         ff:81:db:fc:5b:24:e8:8e:55:78:9a:4a:e3:88:de:b6:e6:89:
         53:20:03:e7:f3:25:a7:47:56:6e:67:68:d8:34:57:12:ed:29:
         64:49:e8:31:54:71:ed:05:89:f4:48:ed:0b:03:fd:3e:20:3a:
         2a:0b:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:13:34 2024 by rpki-client on console-fra.rpki-client.org