Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8f8571a-1609-3f0e-b767-087775227b51.roa
File:                     e8f8571a-1609-3f0e-b767-087775227b51.roa (raw, json)
Hash identifier:          wRzKU+OqFj/U1IxUQWsF/h62Jz6UOqvd1p46lclH990=
Subject key identifier:   9B:A0:B8:0B:CE:6A:95:E9:A2:9D:27:21:B6:A7:68:ED:46:06:C0:15
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479AABFAC9DA21F4A4D14A1700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8f8571a-1609-3f0e-b767-087775227b51.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     16625
IP address blocks:        23.38.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:fa:c9:da:21:f4:a4:d1:4a:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=307bfba8-c0e8-45d8-bf8c-03bc47993dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:a8:26:02:e3:8a:7e:8b:f4:49:ac:08:09:
                    20:52:8b:1b:71:4a:6e:b1:3a:6b:45:24:08:de:af:
                    19:d9:20:ef:9e:e4:57:50:61:1f:81:c9:60:17:8a:
                    a9:7c:74:50:22:01:31:aa:62:bd:b3:a6:db:de:b5:
                    47:28:bc:dc:8a:96:ba:8b:9b:fa:dd:6b:8b:ed:32:
                    90:61:56:4b:86:14:dc:48:12:9c:dc:5c:01:31:d6:
                    3a:1e:3d:92:39:f0:b8:17:30:78:2d:3d:71:01:02:
                    97:47:43:fa:38:ad:10:12:c3:f9:1d:37:8b:6b:44:
                    0d:79:f8:24:56:72:27:58:e0:96:86:fe:a0:b5:4c:
                    df:74:61:da:8f:4b:a4:bb:b6:a3:b1:b3:82:eb:8c:
                    dc:1d:0a:18:e6:0e:87:23:2b:8b:70:5f:05:30:88:
                    a7:ac:ac:7f:40:bd:f7:24:8b:1f:bf:37:b3:dd:bc:
                    1c:f4:05:9c:31:8c:92:0c:89:8b:b1:4e:16:ec:b5:
                    db:4e:2b:33:5f:96:05:84:23:c3:43:9d:0e:4a:6b:
                    3d:fc:19:c2:15:60:05:3e:ae:d0:7f:fe:cd:a8:32:
                    ed:f6:b9:42:31:31:bc:7a:bb:93:24:0f:18:b7:13:
                    da:d9:4d:eb:75:51:db:ea:5a:66:19:fd:f1:54:29:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:B8:0B:CE:6A:95:E9:A2:9D:27:21:B6:A7:68:ED:46:06:C0:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8f8571a-1609-3f0e-b767-087775227b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:df:0e:e8:1a:b4:bf:f6:a2:a7:d9:2a:71:3a:33:62:90:
         a6:a8:75:73:8d:cd:d3:4c:9d:3d:6e:87:14:f3:07:f3:a2:30:
         eb:aa:a2:5c:43:42:c5:53:d6:b0:4a:69:87:57:ef:a2:f1:9e:
         fd:24:d4:1b:a4:59:a5:44:be:52:d6:c0:15:20:03:11:e1:13:
         76:f1:f3:b9:b6:39:3f:7f:70:08:9c:e9:b1:38:fd:75:15:0e:
         52:b0:d2:b7:58:e2:d0:a1:b3:4e:0a:04:ab:70:2a:26:df:e4:
         38:a1:36:34:ec:6f:98:43:e2:99:3b:da:9b:4a:c3:93:9e:09:
         b1:20:4b:c3:27:89:6b:38:6d:f9:91:04:11:e9:9e:2b:33:f7:
         6e:0c:0a:de:a4:81:58:b0:72:08:3e:2c:2d:f8:9b:fc:b4:63:
         92:71:fe:db:3b:5e:da:bb:b3:e9:e9:0a:d6:85:9b:58:ff:51:
         97:7c:39:b0:fc:e3:83:a6:d1:f9:3c:a3:eb:60:ec:57:02:7c:
         be:54:b2:80:c2:6a:c4:60:bc:90:d3:f4:44:13:e7:20:58:06:
         86:3e:2c:ff:75:5a:f2:a0:36:69:99:98:f1:33:35:ea:17:3b:
         78:72:dc:70:39:26:51:e0:45:4f:4c:c5:42:a3:70:78:7d:4e:
         73:98:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:21:52 2024 by rpki-client on console-fra.rpki-client.org