Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fee4b887-2d00-31be-80e1-0611d3ffe779.roa
File:                     fee4b887-2d00-31be-80e1-0611d3ffe779.roa (raw, json)
Hash identifier:          GggQYEqb6O/62y3GYXd7Njx7sl2X2pVUAEcVlrwFrUM=
Subject key identifier:   69:FE:95:F5:9F:4D:60:A2:2E:BC:26:74:8B:81:96:49:38:A5:FC:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36DB84590436F864A24F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fee4b887-2d00-31be-80e1-0611d3ffe779.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.55.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:db:84:59:04:36:f8:64:a2:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=4c45a939-a277-462f-9846-d89560407a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:70:03:85:3c:af:05:bf:62:49:4e:6f:b1:
                    8e:8f:d4:c2:76:57:50:e9:c0:84:8b:c4:c3:a4:43:
                    98:a2:64:c6:c0:29:ab:33:1a:37:a9:8b:bd:65:cf:
                    df:b3:2e:37:be:b6:16:86:89:c7:9c:8e:c7:db:11:
                    26:7c:8c:1a:98:4e:62:fb:46:2d:fc:3f:a4:8f:af:
                    f6:09:99:96:e2:68:0f:81:79:98:ce:9f:f2:d4:9f:
                    1c:19:ba:bb:b8:53:c6:bb:5b:25:10:76:df:96:6d:
                    bf:94:7e:cf:22:21:35:01:de:29:32:f8:1d:21:45:
                    a6:ec:9c:8a:ee:24:24:ca:f1:7d:59:1e:4b:21:42:
                    a5:71:11:04:2c:18:00:19:3f:3f:82:13:e0:dc:4a:
                    21:3e:2f:c0:8f:90:d3:78:34:9c:cc:7e:cd:08:cf:
                    1f:8a:53:46:52:0f:4a:db:17:2b:f0:f2:01:d7:67:
                    a2:ac:09:bd:0d:de:4f:13:42:97:b4:1e:24:6d:e9:
                    76:47:c3:88:f7:9a:82:48:98:80:f1:69:00:33:ff:
                    08:f7:2d:b4:ef:ba:f5:91:f4:bf:4b:60:bb:a6:a7:
                    ee:33:9a:4c:1c:71:88:20:fe:6b:8e:d5:60:bc:07:
                    74:94:e6:e4:39:34:bf:21:7a:48:58:f1:dc:11:50:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FE:95:F5:9F:4D:60:A2:2E:BC:26:74:8B:81:96:49:38:A5:FC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fee4b887-2d00-31be-80e1-0611d3ffe779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:d5:f4:05:3e:c0:16:7b:8c:3b:bb:27:51:e9:37:e1:46:
         95:bd:1b:6f:c4:91:a9:a7:5f:ce:ad:48:6c:5b:45:9a:66:cb:
         44:3e:50:55:e7:7a:94:b4:42:42:5c:20:1d:bc:b2:ba:60:ff:
         46:7d:f0:e8:e0:58:78:51:cb:9b:95:0e:c4:4c:1f:e6:4e:b3:
         55:0a:6d:06:b0:cf:1c:2a:93:df:f4:dc:14:91:34:cd:da:67:
         fb:37:f9:af:48:9a:31:9e:80:19:10:39:81:06:0e:df:e0:f1:
         0d:2c:9c:f1:fa:77:31:70:4e:ee:37:b0:53:5b:3a:db:51:4e:
         bf:6f:02:ed:cc:75:b9:61:f5:09:ce:e3:64:84:b2:66:7e:9f:
         d9:71:f5:14:5a:db:7d:17:af:ad:19:62:e7:5a:2b:38:1d:be:
         4d:86:e8:fd:7b:b3:25:1c:ed:2b:6e:4a:3a:13:87:2d:3c:97:
         82:d7:20:10:1e:75:74:57:b4:5f:c6:85:6c:1c:a2:2e:82:a7:
         d1:db:d8:c4:e0:ea:e1:63:2b:85:b7:ef:28:7b:d9:15:94:09:
         19:e6:d8:99:88:9e:ee:3c:16:cf:94:27:cf:da:46:77:8d:64:
         53:de:2d:d8:6d:17:a3:6c:80:6d:51:a8:14:dd:e1:22:6d:4b:
         39:7a:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:50 2024 by rpki-client on console-ams.rpki-client.org