Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa
File:                     8ec81666-b29e-37f5-93fa-ec08312dd538.roa (raw, json)
Hash identifier:          nMQjQRvzV/arCf3ryYaf73Jv5ZNrzPf8lhqQfi3lwwg=
Subject key identifier:   FC:BA:4A:A7:CC:01:04:ED:6D:E2:C0:C6:85:15:37:89:46:B6:47:59
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858475910B822ADC7F2F2623A6D40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     21866
IP address blocks:        23.239.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b8:22:ad:c7:f2:f2:62:3a:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=dc80f0b4-480e-44a8-bea6-85cfddca8eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:bf:73:40:83:bf:aa:35:9b:16:b4:b1:09:
                    78:a9:c4:4f:48:82:9e:6f:20:64:42:9f:a0:0e:82:
                    8b:65:25:03:b5:90:db:e5:a4:0d:11:e5:f7:85:6a:
                    3e:53:af:89:d3:bd:a0:5b:c4:f7:ab:75:f2:a6:1b:
                    55:5a:04:d2:83:35:44:a5:dc:64:92:57:56:1c:d7:
                    5e:88:25:b0:70:0d:0d:41:52:17:8b:78:6c:5b:af:
                    b3:d6:f5:cb:13:3f:92:56:f6:5a:c7:69:cc:a8:83:
                    ad:fb:e5:50:ce:a8:7d:79:15:ff:18:53:a3:59:a9:
                    7e:4e:0e:ba:7f:06:92:1b:c1:25:df:05:ca:4b:a1:
                    b9:8e:37:34:eb:a4:ee:6e:65:28:5f:c4:44:e0:4b:
                    e8:ff:f6:76:53:32:68:e8:1e:49:b5:84:cb:eb:9a:
                    d4:d0:8b:09:cf:7d:ce:9b:18:c8:1d:bc:f1:c7:cb:
                    0b:b4:db:6c:03:45:2e:f5:91:a2:b9:fa:a2:e3:10:
                    9b:77:7b:5c:53:45:f5:68:fa:24:94:29:ec:16:4f:
                    60:a4:e7:f1:19:c6:6f:02:e2:29:92:bc:bc:29:0d:
                    42:b4:c2:f2:8b:00:c8:33:a2:63:12:e1:5c:08:a4:
                    a2:40:34:a1:99:c3:03:ab:b3:80:34:3e:1f:bf:5c:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BA:4A:A7:CC:01:04:ED:6D:E2:C0:C6:85:15:37:89:46:B6:47:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:13:5c:ce:fd:1a:2d:3e:7d:82:0a:7a:5b:ba:62:13:bb:f0:
         6e:fc:3b:8c:9d:34:e9:06:84:15:d8:f9:c8:ad:cd:d2:ad:c0:
         e0:b7:e8:e1:5b:36:71:7c:35:9b:e6:11:7b:f0:f8:0c:23:f1:
         3a:02:d0:5c:fd:c2:2f:76:8a:8b:e9:da:0e:0a:7c:a8:45:83:
         41:5f:c7:e4:2f:00:1b:e7:d5:84:87:53:06:32:dd:e1:f6:5e:
         50:10:af:f7:8f:1a:c9:d8:67:40:08:d7:1f:64:24:c2:eb:01:
         29:c9:4f:94:b6:0c:ce:3b:c1:62:bb:9c:40:7f:46:9c:2a:bf:
         db:55:78:f2:3b:39:8c:d2:35:d2:cf:5d:5b:74:0e:1b:9d:0f:
         57:98:02:b9:f1:50:9e:28:ef:74:2b:d2:9f:94:7d:96:75:c7:
         e6:78:e6:1c:3a:04:98:95:d6:e2:11:93:80:72:82:f6:12:ef:
         be:67:4b:01:e1:bf:cf:2e:e0:3d:51:4e:52:6b:8c:77:6a:d5:
         ac:f2:f1:0d:32:06:ae:f0:0c:33:48:2d:42:c2:e4:0b:1e:8e:
         5f:5c:03:b1:3e:6a:3c:d0:bc:59:38:7d:1f:d9:82:ac:16:a6:
         ea:a5:54:cb:7d:ae:d0:10:7d:20:73:fa:e1:53:cf:e5:3b:da:
         a1:d0:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:49 2024 by rpki-client on console-fra.rpki-client.org