Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eadee9b5-5d7a-30c5-8a29-371e9325a08a.roa
File:                     eadee9b5-5d7a-30c5-8a29-371e9325a08a.roa (raw, json)
Hash identifier:          MDylvq+Bzym1xYMZ97i3MkiprqUh43rnW6fx3GLyZcs=
Subject key identifier:   5A:D4:4B:1A:11:E1:1D:F1:85:FE:EC:EC:74:CF:05:23:53:38:D8:BC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36D31F73BE985753024000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eadee9b5-5d7a-30c5-8a29-371e9325a08a.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     35994
IP address blocks:        23.59.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:d3:1f:73:be:98:57:53:02:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=c196881f-0f8a-4dc7-b0b7-16d871596a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:5d:3a:4a:82:f2:16:69:ab:80:ec:9e:62:
                    5b:f8:7e:32:24:e8:43:da:92:4f:86:34:c2:e3:d4:
                    d1:f3:d2:d5:0a:b6:62:71:1c:4c:aa:63:60:48:4a:
                    aa:6e:ef:b5:44:7f:3d:58:b6:73:4c:14:98:eb:c2:
                    9f:34:84:2f:af:e8:42:ed:78:e0:ac:c6:45:c8:d6:
                    95:e3:e2:9b:44:94:8f:f5:a0:67:38:8f:05:0b:51:
                    cb:ef:5c:2d:41:0a:cf:18:17:0c:d5:a3:a6:14:da:
                    d5:0b:7e:c4:60:a6:2e:ca:b2:56:18:47:be:38:47:
                    2d:02:66:89:0b:fe:3f:03:f4:d1:f3:da:63:57:72:
                    83:f9:4d:1e:88:6e:9d:75:c1:61:6c:93:2c:55:d5:
                    49:6a:08:58:b4:fa:3d:23:38:71:b1:ff:1a:83:fb:
                    e5:04:ee:ba:b9:64:f9:ce:8e:43:2b:91:ab:a0:59:
                    73:38:95:7a:87:91:c5:7c:6c:ff:62:fe:c4:50:8c:
                    12:ad:22:10:06:73:39:14:7c:08:93:c7:be:32:7a:
                    60:2a:12:78:ee:39:0c:4e:74:4a:f7:a4:9b:f9:bb:
                    94:50:b4:2d:33:b6:05:e3:30:28:c2:0a:b6:ea:2a:
                    7b:07:46:56:dd:04:a2:26:03:6e:9f:30:06:7f:d0:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D4:4B:1A:11:E1:1D:F1:85:FE:EC:EC:74:CF:05:23:53:38:D8:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eadee9b5-5d7a-30c5-8a29-371e9325a08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:01:9e:d2:a2:44:d3:f7:2e:fd:a6:02:6b:b0:96:f0:c2:
         62:1b:8c:df:ca:fa:4a:03:ff:33:a5:22:7c:51:79:96:8e:fa:
         6a:09:a8:ad:ea:1a:3c:73:c0:1c:e2:b4:1f:90:97:87:2e:cf:
         67:83:ca:d6:9f:4c:78:b3:6e:8a:86:d3:7a:24:2b:20:ab:8e:
         da:3f:c3:03:75:f5:99:1a:6e:98:2c:a0:56:8f:74:a7:00:7f:
         13:19:cd:23:3e:dc:5f:14:11:fd:ec:48:d0:e4:84:91:75:76:
         36:e9:da:e2:aa:7c:c9:26:df:bd:2e:8c:6b:68:4c:a4:23:fa:
         c8:c8:8d:97:50:77:10:0f:67:93:7c:5a:ed:e5:c0:93:27:d9:
         22:82:15:f8:59:b9:e1:72:ee:c7:e0:9c:e4:1d:a6:f4:6f:33:
         c1:18:9f:81:21:ad:b3:34:5e:cf:a8:8e:ff:8d:85:8d:38:6f:
         f8:48:bf:fe:72:6c:b3:b6:69:d1:53:04:46:c8:71:b0:fb:3c:
         94:36:e6:07:a3:0f:5e:2d:50:bf:10:a4:54:e2:40:60:5d:16:
         c0:fb:d3:a0:2b:da:59:15:1f:51:81:66:be:ba:f5:5f:65:d8:
         26:e2:01:e7:63:32:1d:f7:a2:9d:d7:11:60:8e:a2:0b:33:e1:
         87:53:95:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:38 2024 by rpki-client on console-ams.rpki-client.org