Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/373356e7-dce4-35d9-af44-51f6844e979e.roa
File:                     373356e7-dce4-35d9-af44-51f6844e979e.roa (raw, json)
Hash identifier:          NUpSMuc4OovhvpKMYb3DxZ4gqHkDtCaV3YEDfsfsbCs=
Subject key identifier:   9F:A6:C0:8D:9F:5A:30:E6:C9:D6:F4:76:C9:D3:F7:9E:8A:13:D7:CF
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F43285847DCBB47A37509BD070B922300
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/373356e7-dce4-35d9-af44-51f6844e979e.roa
Signing time:             Wed 13 Nov 2024 04:55:08 +0000
ROA not before:           Wed 13 Nov 2024 04:55:08 +0000
ROA not after:            Tue 11 Feb 2025 04:55:08 +0000
asID:                     40934
IP address blocks:        23.249.54.0/24 maxlen: 24
                          23.249.57.0/24 maxlen: 24
                          66.35.20.0/24 maxlen: 24
                          66.35.21.0/24 maxlen: 24
                          66.35.22.0/24 maxlen: 24
                          66.35.30.0/24 maxlen: 24
                          96.45.43.0/24 maxlen: 24
                          173.243.131.0/24 maxlen: 24
                          209.40.108.0/24 maxlen: 24
                          209.40.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:bb:47:a3:75:09:bd:07:0b:92:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Nov 13 04:55:08 2024 GMT
            Not After : Feb 11 04:55:08 2025 GMT
        Subject: CN=cd69f52b-9773-460d-9219-5efeb484eade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:18:8a:50:91:9d:13:70:0a:e3:08:32:5b:
                    fc:cc:89:d5:46:78:b1:87:17:1a:41:56:6f:c1:a8:
                    08:6a:5c:c7:65:2c:72:0d:ee:03:91:d4:69:f2:18:
                    d0:61:ce:d9:77:15:3c:da:4d:79:d0:d6:b5:19:21:
                    17:02:2d:82:98:73:71:e7:fe:2a:c5:6b:ac:91:22:
                    5e:d3:f6:b1:5c:ff:29:fb:47:89:6f:69:b1:79:5d:
                    49:25:0a:00:25:76:f6:2a:61:43:34:73:12:b5:d0:
                    a6:30:4a:2c:d8:02:70:0b:eb:6b:ae:68:3b:0e:c9:
                    c6:02:e8:89:de:4d:11:a8:ea:28:ac:23:a0:0d:f0:
                    57:60:1a:85:d5:13:d5:01:90:e4:36:c4:91:95:71:
                    bd:23:f1:a8:3a:9f:a4:d6:dd:74:c9:5d:48:bf:a2:
                    7f:09:49:f1:23:78:b5:fa:b2:56:75:b5:7b:44:c6:
                    a4:eb:18:78:c7:33:3c:7e:b2:ed:aa:e4:14:48:7f:
                    96:83:fa:bb:7e:10:f8:e9:70:59:38:be:8a:6f:09:
                    22:d4:47:38:f1:1e:13:4a:e5:ba:24:a8:44:7e:24:
                    b8:4d:63:64:b8:49:38:9d:bf:da:cc:67:ca:d3:28:
                    95:de:dc:e5:71:fd:f6:2b:bb:8e:75:30:09:4f:c6:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A6:C0:8D:9F:5A:30:E6:C9:D6:F4:76:C9:D3:F7:9E:8A:13:D7:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/373356e7-dce4-35d9-af44-51f6844e979e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.54.0/24
                  23.249.57.0/24
                  66.35.20.0-66.35.22.255
                  66.35.30.0/24
                  96.45.43.0/24
                  173.243.131.0/24
                  209.40.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6b:78:b4:c7:a7:f4:cf:26:1f:ff:1b:0b:90:93:17:fd:43:
         e6:4e:17:0a:b5:21:17:a7:98:9f:28:1f:c3:51:1c:67:c7:bc:
         b9:f1:20:32:32:96:35:ac:73:c4:bf:d8:2b:e6:e3:65:db:6f:
         ec:e8:23:e3:e8:9d:34:05:fb:74:63:64:07:9e:84:6b:bc:69:
         14:ed:01:20:b5:91:73:1b:2a:8f:16:f4:cc:e3:46:23:d3:9b:
         19:7f:c9:fe:aa:10:ed:04:5a:da:f5:86:e9:60:3f:f6:28:f2:
         ed:9d:b1:79:04:06:5a:cb:f3:f2:97:75:78:29:2a:f9:ac:a7:
         4f:36:55:10:ed:e9:3a:5f:1b:2e:de:31:f0:fc:0d:ac:79:40:
         85:64:65:eb:84:87:67:8d:60:df:6e:f8:0b:7e:a0:28:64:5d:
         a6:26:f4:0b:94:5c:23:05:73:7e:8b:15:2a:30:c7:2c:2b:fc:
         b4:bb:73:cd:bf:2f:84:ae:b7:eb:69:e7:68:00:f2:0d:e3:d0:
         8a:68:12:82:d6:c1:3c:23:32:47:1f:05:e3:43:d1:a2:40:ec:
         e8:95:57:74:79:d6:5f:5f:bc:e2:f0:81:3c:8c:b4:20:74:c9:
         18:6c:28:eb:da:42:f4:ff:a4:c8:b4:17:4d:e2:82:73:f5:b9:
         e8:c7:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org