Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa
File:                     8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa (raw, json)
Hash identifier:          B6APr69BS7qhIcSjzPIOwwMLErdjL85CAlXlnTo5oro=
Subject key identifier:   44:21:8C:D1:6E:B1:79:61:0F:B8:3A:19:36:24:E9:A1:3F:5C:46:1C
Certificate issuer:       /CN=0c061d8c-3838-415d-8bbc-20962c789d81
Certificate serial:       010D0C9F43285846ED956F337A02B91B2C24B900
Authority key identifier: 65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa
Signing time:             Mon 19 Aug 2024 13:00:40 +0000
ROA not before:           Mon 19 Aug 2024 13:00:40 +0000
ROA not after:            Sun 17 Nov 2024 14:00:40 +0000
asID:                     61228
IP address blocks:        23.141.88.0/24 maxlen: 24
                          2602:fb0d::/44 maxlen: 48
                          2602:fb0d:99::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ed:95:6f:33:7a:02:b9:1b:2c:24:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c061d8c-3838-415d-8bbc-20962c789d81
        Validity
            Not Before: Aug 19 13:00:40 2024 GMT
            Not After : Nov 17 14:00:40 2024 GMT
        Subject: CN=157ae447-13ea-405c-af91-1cca0022c5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:02:33:31:70:db:27:53:53:ac:a6:6e:b9:
                    16:fe:d5:42:87:3f:9d:04:bf:ef:15:92:e1:9a:17:
                    89:5b:c0:0b:b1:83:a5:29:49:c4:5e:45:51:6b:26:
                    7d:3b:42:ed:ef:24:d0:6a:0c:25:18:ed:38:b6:ed:
                    a2:36:69:52:38:18:bc:5b:31:83:73:18:47:03:b3:
                    6e:a3:a3:b3:11:53:d9:b4:31:e5:8d:9a:b5:6b:ed:
                    6c:99:4f:b9:4f:aa:fc:8e:77:bc:0b:e2:c3:4e:98:
                    b4:b8:d8:90:5a:b7:02:0b:ac:98:b2:9b:3d:29:3e:
                    0d:4c:c9:41:95:2b:0f:58:ac:11:21:fb:ed:49:28:
                    42:c9:35:cc:08:1a:3f:9b:03:3f:ad:09:74:7f:c2:
                    50:b4:d9:47:0a:20:ba:9f:5e:2a:7e:b0:29:5f:63:
                    55:2a:3c:2c:1e:5f:0c:b6:72:8f:b6:9d:90:28:57:
                    b4:97:86:72:85:e2:16:b1:39:43:0b:8d:a3:4c:a7:
                    70:4a:6b:60:d1:0b:63:c8:72:66:82:39:c2:4d:c2:
                    3b:f9:93:f7:43:20:33:71:27:a9:e1:df:97:70:aa:
                    30:f6:70:99:0f:52:e5:37:28:b8:dd:8b:e4:b9:66:
                    50:85:33:c5:5c:be:97:cc:22:24:71:59:2c:b2:6f:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:21:8C:D1:6E:B1:79:61:0F:B8:3A:19:36:24:E9:A1:3F:5C:46:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl

            X509v3 Authority Key Identifier:
                keyid:65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.88.0/24
                IPv6:
                  2602:fb0d::/44
                  2602:fb0d:99::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f8:41:08:73:2b:8d:f4:44:7c:47:a8:d9:f2:a7:08:33:5b:
         8c:84:2b:87:ea:f6:d0:e8:34:14:ab:d0:66:99:c1:17:22:f9:
         d3:3e:9b:d3:3f:ab:5c:d9:7c:f2:eb:89:10:60:5d:7b:1e:39:
         3a:bb:ee:1a:c2:15:0c:76:f0:5a:15:92:ec:46:2b:57:36:12:
         02:dc:d3:bb:f7:5e:52:64:66:85:ba:af:4d:e4:45:5f:d5:cb:
         8b:3b:00:21:d7:cf:50:cb:5c:88:65:5d:51:29:8f:d9:e2:15:
         34:74:c1:d3:66:5e:e3:82:a5:4e:48:d2:36:97:c0:2d:9e:8f:
         c3:4f:ca:18:ef:7d:f7:39:08:6e:ab:5f:d0:8f:52:5a:e6:9c:
         78:f0:80:3d:58:78:c6:1b:43:c2:05:14:25:16:aa:a5:fc:32:
         e3:cd:bf:04:eb:78:99:10:51:4e:1b:de:f2:31:95:ce:b8:80:
         7b:c5:4d:25:f8:7d:2c:a7:47:ac:97:f5:23:59:f0:3a:fb:c2:
         b8:5a:02:e7:a7:26:0a:cf:f6:59:5e:16:44:7c:f7:e0:82:66:
         ef:58:61:53:81:13:32:af:2a:47:0c:ef:11:43:19:11:ad:d5:
         b8:c6:b1:f4:74:91:7b:91:75:2b:60:ad:30:0c:b6:c2:d4:ef:
         80:ea:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:01 2024 by rpki-client on console-fra.rpki-client.org