Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6cded19-0586-3add-9937-adb225fd17c7.roa
File:                     e6cded19-0586-3add-9937-adb225fd17c7.roa (raw, json)
Hash identifier:          lkYo4+v5GQ5tA7gky5kk5aXTUgciMdsTk1LBV14QOlI=
Subject key identifier:   85:F7:09:1A:AA:BD:13:9B:01:7F:3A:1B:7C:CA:DF:23:7F:FE:71:04
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858475D40D76A1E8F634A3E746B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6cded19-0586-3add-9937-adb225fd17c7.roa
Signing time:             Sat 28 Sep 2024 13:00:41 +0000
ROA not before:           Sat 28 Sep 2024 13:00:41 +0000
ROA not after:            Fri 27 Dec 2024 14:00:41 +0000
asID:                     16625
IP address blocks:        23.37.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:40:d7:6a:1e:8f:63:4a:3e:74:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 28 13:00:41 2024 GMT
            Not After : Dec 27 14:00:41 2024 GMT
        Subject: CN=6735febf-7d45-4e20-bb06-d8d1efecada2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:88:9a:24:56:33:a3:2e:d1:40:b3:a6:12:1b:
                    f6:c7:6b:39:42:34:f2:a6:b6:7c:9c:c6:26:fd:55:
                    6b:2e:b7:c4:eb:ae:e0:00:62:ad:e8:4f:78:6f:2e:
                    c2:57:c0:a0:d7:0d:8b:a2:e8:62:af:e4:c5:bd:a5:
                    05:a5:3a:17:a7:3d:43:57:f5:01:45:9d:09:a3:b9:
                    60:9c:d6:a9:7a:9f:6f:ef:4f:f2:10:96:71:aa:13:
                    d7:c3:83:98:24:26:80:c0:b0:c1:ba:12:b4:d8:12:
                    fc:5b:be:7c:81:39:39:86:1e:c0:4c:d0:7c:d5:86:
                    38:d2:95:c5:c2:ef:75:77:72:ed:c3:81:af:22:02:
                    69:6f:66:58:3e:38:de:ea:27:06:77:dc:e1:0f:94:
                    9b:52:6d:9e:01:05:f4:2c:9f:f1:91:12:8b:5c:6c:
                    bd:b2:4f:b7:8f:f9:e4:71:79:c7:0a:82:84:fd:d2:
                    75:26:44:eb:0c:56:13:e6:c1:49:8e:47:98:f2:55:
                    bf:bf:83:bb:75:5e:7d:0b:c9:e9:7f:ab:58:0f:2d:
                    47:d0:fe:17:37:1f:e3:4a:01:8f:6b:78:93:3c:b9:
                    5a:1e:40:62:32:c9:3a:97:96:05:63:9a:98:f1:27:
                    90:a0:c6:e5:9f:8a:de:18:81:2e:04:bc:2d:c6:15:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F7:09:1A:AA:BD:13:9B:01:7F:3A:1B:7C:CA:DF:23:7F:FE:71:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6cded19-0586-3add-9937-adb225fd17c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.37.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d7:0d:f3:6b:7a:99:0f:e8:8b:74:cf:40:ac:70:45:bf:69:
         f3:79:d7:c9:ec:07:5b:03:32:1f:14:75:a3:da:d4:b8:6e:c5:
         a3:53:47:0a:0e:33:d7:02:f7:29:71:69:6e:c8:cd:59:6d:2b:
         98:4e:e6:e2:f1:36:7f:3d:bf:b5:be:e1:7f:89:b2:23:f0:78:
         d1:c0:ba:cc:14:53:52:1e:79:f0:fb:14:a9:29:53:0e:84:b8:
         4b:f8:aa:ad:43:50:ff:78:cd:25:ed:dc:b0:c3:be:33:70:71:
         e5:a8:69:e1:d5:5f:76:0d:21:b5:52:2b:31:89:c1:7e:0c:e5:
         28:4d:1a:e3:03:91:c7:57:c3:54:68:34:ac:86:ff:21:2c:84:
         b2:71:cf:b1:cd:05:22:52:0f:50:51:1c:07:6f:89:a1:c7:43:
         df:83:82:a9:52:c4:54:41:97:a4:0a:ec:43:72:11:59:9d:c6:
         b4:0b:00:a6:19:17:ac:18:99:58:90:ed:46:8f:f2:34:c9:69:
         c9:2f:65:81:fd:4a:37:1c:3f:96:40:f1:f2:e8:13:6e:b1:5a:
         13:05:75:54:a6:07:7d:ac:f2:12:51:c5:c9:42:14:8d:5b:a2:
         53:3d:3b:32:38:25:df:cc:4d:ba:2e:65:14:9e:6f:b2:1b:e9:
         83:ec:4e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:36 2024 by rpki-client on console-ams.rpki-client.org