Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa
File:                     1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa (raw, json)
Hash identifier:          ++eMafuTzue0UAAiVtc0PQ1KrB06jWnaX4R7oXsnyIQ=
Subject key identifier:   0E:63:01:28:FD:85:74:3A:A7:3E:6E:3F:AA:66:3E:4B:A1:F3:FE:BF
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858478F812E6B414B608A92E60980
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     30215
IP address blocks:        23.90.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:2e:6b:41:4b:60:8a:92:e6:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=fa58eb14-f34e-421f-894d-0c7b81927881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:7d:04:b8:95:a4:f3:63:4a:90:1d:c6:9c:
                    f0:ef:37:84:e5:c8:85:70:07:80:6b:fe:51:a5:ad:
                    65:52:28:bd:67:49:24:0f:46:e6:65:f4:db:5d:79:
                    37:25:80:80:e5:26:e2:82:51:8e:2b:e0:35:5d:04:
                    51:3f:65:b1:0a:d4:7e:96:4b:b9:2b:b7:31:f9:84:
                    d7:1e:13:79:a1:89:30:10:ff:a9:54:ef:4a:b8:77:
                    cf:39:bc:df:cb:9d:ea:e2:3c:4a:b4:a4:fe:15:4f:
                    c1:38:f5:8d:95:cc:3c:06:40:21:e6:79:a5:9e:ae:
                    fc:e0:ab:0c:77:10:3a:fa:8a:39:4d:49:9e:21:bf:
                    38:9a:84:c6:7f:06:18:02:0f:02:ca:c5:a2:0c:67:
                    0d:44:7e:ec:5e:57:63:45:6c:2e:50:20:97:9f:47:
                    ff:b9:2b:31:9a:07:76:6c:19:ab:31:09:1d:87:b2:
                    59:f4:10:84:a5:69:c5:ea:d0:5e:f0:51:ca:36:4d:
                    5c:0d:53:4e:43:cb:cf:56:fa:01:d7:bf:98:b1:ec:
                    d0:c8:a3:2c:82:4c:04:1c:1a:9f:3f:3a:25:bb:e2:
                    09:c8:70:d6:63:f8:0a:7f:30:4d:db:94:c6:65:b0:
                    bf:9a:00:69:d9:37:e6:dc:20:72:13:4e:6f:2d:91:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:63:01:28:FD:85:74:3A:A7:3E:6E:3F:AA:66:3E:4B:A1:F3:FE:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1c331600-fa0d-30a4-b81a-2fdb37ff195b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f5:27:d3:ab:53:93:b2:13:cc:d2:e7:3c:fe:49:16:8d:b3:
         bb:d1:b4:cc:2c:ae:1d:7b:61:17:54:17:f0:18:fb:68:58:f0:
         5a:6b:c9:07:93:65:15:e2:b4:ec:a7:4b:10:c5:e6:15:12:00:
         01:75:9f:fc:da:8e:08:a3:9a:23:34:cf:19:f4:c7:02:69:26:
         9b:46:09:53:27:6b:00:3a:17:c4:ee:d8:6c:cf:7e:1b:a9:1c:
         25:78:d8:a9:b5:fd:c8:1a:03:69:81:5f:59:f6:a8:50:ba:20:
         c8:0e:ed:61:c5:9b:b8:8b:77:24:2a:f6:48:98:23:b0:f8:37:
         1f:ff:49:30:bd:ec:df:96:f9:0c:a0:a5:3f:19:67:6f:b3:58:
         31:fe:42:2d:82:6a:d6:68:be:45:0b:2a:8b:0d:fb:2c:b0:58:
         12:20:77:2b:4a:b5:a8:cc:15:aa:f0:64:27:44:f6:a9:4d:10:
         57:71:88:a8:52:10:83:a3:8e:0c:10:22:65:ff:3f:f4:28:66:
         84:9b:95:47:f4:df:c3:6d:92:c0:61:4a:bc:30:59:2d:f2:7c:
         40:de:c6:75:fc:7a:63:29:52:91:ce:3e:a7:b9:55:7c:20:aa:
         7e:f6:f7:0d:eb:85:6f:75:68:73:b5:70:1b:f1:30:95:83:66:
         d0:91:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org