Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec894fa0-ab6c-3824-a764-55b346867980.roa
File:                     ec894fa0-ab6c-3824-a764-55b346867980.roa (raw, json)
Hash identifier:          kX4u2tTkZ+tJipeZi0kbp3ADKcpSTkIXTPKICaqOkM0=
Subject key identifier:   5A:4F:49:29:B3:8B:40:60:29:B2:11:33:B1:06:2A:99:D2:44:8F:53
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847A471382722969F68E6383380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec894fa0-ab6c-3824-a764-55b346867980.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        23.51.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:38:27:22:96:9f:68:e6:38:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=f6da6f42-f111-4279-b998-7cee95ad858b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:8a:75:3d:06:6e:81:5b:a4:10:7d:6f:c2:
                    95:92:94:39:df:b2:41:df:12:e5:3e:90:4b:7c:0b:
                    99:bc:49:ae:50:a2:b6:56:0a:d0:d1:f0:77:af:e8:
                    15:a3:c2:6d:ee:a6:ec:bc:48:d2:13:9a:07:dd:42:
                    67:cd:a3:0b:4a:c7:fe:43:c9:ea:2d:9c:14:6f:4d:
                    a3:23:2c:70:f6:82:5d:39:74:1c:28:6a:e2:2e:3c:
                    37:9f:24:b9:08:7c:67:b0:5f:59:ff:56:cd:80:eb:
                    0f:6c:00:01:30:b5:69:8e:8a:16:43:d4:d1:ee:f3:
                    2d:da:4e:83:c9:50:ff:5a:0f:5d:bb:69:90:34:ad:
                    b6:c1:8c:7e:9d:c8:84:89:52:32:42:52:8c:11:f6:
                    8a:0d:af:6f:3f:4e:11:cb:e5:bd:0f:62:9a:6b:70:
                    7c:cf:65:6c:2d:ac:1f:3f:ef:68:3b:51:ed:ea:61:
                    e8:4c:12:f2:2b:79:83:a8:aa:ab:61:f5:46:2a:8c:
                    d1:43:4e:44:e7:3d:73:d2:aa:38:07:d9:06:13:b1:
                    a3:65:1e:6c:19:62:95:c9:5b:48:cb:0c:1d:a4:68:
                    0b:f0:5d:7e:a8:91:76:79:df:51:2f:7c:9e:9d:f3:
                    72:aa:f7:ad:1b:a1:8b:f4:bb:fa:bf:35:81:3b:e5:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4F:49:29:B3:8B:40:60:29:B2:11:33:B1:06:2A:99:D2:44:8F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec894fa0-ab6c-3824-a764-55b346867980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.51.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:3f:04:ff:07:a5:43:f8:ed:16:3e:5c:46:24:0d:77:61:
         e5:42:3f:7f:40:b9:73:b3:f1:d7:a9:81:11:83:58:77:cb:d5:
         46:d0:9f:3b:a4:8d:87:aa:8c:64:32:2e:fd:27:9a:89:40:c4:
         c9:41:d4:54:65:2f:bf:fc:67:d1:31:fa:6d:64:6a:62:45:cb:
         3b:a0:fa:5f:12:83:5c:7c:99:d6:43:aa:ba:9c:fe:c0:5a:3a:
         b6:1a:7d:e5:91:8f:44:96:63:4e:36:6c:d7:a1:14:d2:7e:52:
         dd:10:61:e6:8d:56:7c:e5:bf:4a:dd:b7:9e:b2:0a:0f:7d:c5:
         56:95:c9:f0:67:16:b5:f7:95:21:7e:32:39:e5:44:21:c4:b9:
         db:6c:e4:b7:14:89:e0:8f:6d:11:74:20:dd:b7:df:58:c3:8b:
         09:f3:e2:95:29:d3:72:20:23:29:cb:90:24:7e:44:a1:ca:7e:
         09:08:5d:12:15:a7:49:e6:79:0d:0c:d0:28:66:2b:81:ab:48:
         94:dc:ed:c4:33:10:40:98:99:a2:88:1a:c0:f4:1c:ab:11:f2:
         e3:31:ad:4f:a9:fd:5c:c2:52:85:1d:80:e1:b8:55:ce:af:9f:
         20:5d:a1:0f:cd:0d:9d:3f:38:f1:ce:69:3a:f2:fe:98:a0:ba:
         72:d9:ac:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:21:54 2024 by rpki-client on console-fra.rpki-client.org