Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/00ff5b10-3236-3a84-91a3-8270433ea799.roa
File:                     00ff5b10-3236-3a84-91a3-8270433ea799.roa (raw, json)
Hash identifier:          9evDgQMbuEHeTRzFs8+jtuakaen4EBOi23pkdNiKRN4=
Subject key identifier:   E5:36:93:FA:AA:58:71:63:84:FD:4E:84:39:F9:CA:6D:5C:3A:F6:60
Certificate issuer:       /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial:       010D0C9F4328584730DA3663FD6777D2C2D09AC0
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/00ff5b10-3236-3a84-91a3-8270433ea799.roa
Signing time:             Thu 12 Sep 2024 15:18:25 +0000
ROA not before:           Thu 12 Sep 2024 15:18:25 +0000
ROA not after:            Wed 11 Dec 2024 16:18:25 +0000
asID:                     21658
IP address blocks:        23.175.40.0/24 maxlen: 24
                          149.112.109.0/24 maxlen: 24
                          2602:f926::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:da:36:63:fd:67:77:d2:c2:d0:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
        Validity
            Not Before: Sep 12 15:18:25 2024 GMT
            Not After : Dec 11 16:18:25 2024 GMT
        Subject: CN=b3ed230e-bd56-4abb-92d6-e09bf513e875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:47:e1:46:6b:d9:3e:3e:4c:c9:6f:0a:bd:
                    ae:09:4f:aa:fe:da:06:d4:46:07:41:28:37:8b:01:
                    8a:41:f4:a5:0e:3b:43:04:e6:38:a1:bc:0c:c9:0b:
                    0e:e4:29:b8:bd:58:7f:0f:3e:4f:11:a2:82:df:9f:
                    f6:aa:82:58:9f:f5:3d:4b:8c:e8:75:59:2c:a8:2c:
                    d9:81:ff:3c:42:6e:db:f6:65:56:f8:68:9d:c8:68:
                    5d:ca:a1:c9:1c:3d:f4:02:3d:42:99:5a:8f:e3:76:
                    93:93:26:31:ec:d3:7e:ac:a9:18:24:68:7d:15:ae:
                    c8:97:eb:4d:85:53:3a:e7:de:b6:3c:27:16:f9:be:
                    0a:b5:59:e8:b1:ef:23:a7:0d:14:96:d1:8f:9d:63:
                    b8:b6:b1:de:39:69:ca:1a:18:f8:f6:7a:fb:83:96:
                    ba:85:b3:7a:b3:25:cb:7b:51:36:9e:11:16:99:11:
                    2f:02:6d:b3:b6:f1:c4:04:41:7f:ae:78:17:86:d3:
                    9a:fa:6e:31:07:5f:d8:de:6b:59:2d:1a:ac:b3:8a:
                    c8:a4:04:09:50:90:10:3a:d9:7d:6b:71:97:79:04:
                    75:ae:8d:72:3a:8f:31:20:e9:99:0d:3e:d5:bb:29:
                    bf:4c:3e:00:8f:7e:5a:1f:ae:8d:7c:43:34:3a:4d:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:36:93:FA:AA:58:71:63:84:FD:4E:84:39:F9:CA:6D:5C:3A:F6:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/00ff5b10-3236-3a84-91a3-8270433ea799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl

            X509v3 Authority Key Identifier:
                keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.40.0/24
                  149.112.109.0/24
                IPv6:
                  2602:f926::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:9c:00:84:39:63:0f:35:53:44:15:78:a6:0b:11:96:99:93:
         36:a5:88:62:30:b0:23:29:b1:c3:ef:c9:0c:0c:6a:04:74:e7:
         6e:81:de:10:28:41:4d:91:06:22:d9:26:8b:43:6e:47:95:51:
         d4:0c:c3:f3:91:5c:59:43:26:f4:bd:36:45:48:df:b0:34:52:
         64:80:d5:04:3a:73:91:07:fe:f5:6c:e5:34:1a:0b:c0:ef:32:
         8c:5f:dd:a8:d9:96:90:98:6a:99:f4:36:f0:f0:56:31:57:3d:
         4e:fa:1d:ce:3c:ff:bd:99:99:a1:6e:53:c5:f2:d5:34:e1:82:
         fe:e1:3d:6c:d3:c9:54:b5:1d:46:69:fb:f5:7c:45:9e:21:1d:
         b8:f9:9c:92:8c:8a:ac:48:6b:58:6e:87:fd:99:83:c1:a7:2a:
         40:0f:2c:7a:d0:7a:d2:5f:10:d9:27:46:e0:4a:41:40:d4:27:
         ae:58:81:30:e7:c7:b7:25:b7:fe:32:c3:b9:2e:cb:fa:24:a1:
         da:2a:4c:00:aa:a1:ac:eb:c8:28:a3:08:49:96:75:4c:25:44:
         5a:b0:30:43:e7:34:42:45:d9:9b:ae:e7:5f:f5:63:eb:33:c3:
         d5:85:b4:71:a5:ca:f8:64:68:62:f8:3f:32:32:c0:63:57:83:
         96:ff:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:31:04 2024 by rpki-client on console-fra.rpki-client.org