Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
File:                     e38b7540-8d02-3428-8b61-2305b0a7237b.roa (raw, json)
Hash identifier:          pc5x4jhqmcc7sCCFOS/gMWuyUuWZdj7eIZbz5l+0yO0=
Subject key identifier:   1B:C1:2C:58:FA:48:55:4C:5B:1B:9E:9B:B9:E0:77:84:55:C1:0E:B2
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F43285847C5CAB39132CE47608BC01140
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa
Signing time:             Mon 04 Nov 2024 23:42:37 +0000
ROA not before:           Mon 04 Nov 2024 23:42:37 +0000
ROA not after:            Sun 02 Feb 2025 23:42:37 +0000
asID:                     40934
IP address blocks:        23.249.55.0/24 maxlen: 24
                          96.45.39.0/24 maxlen: 24
                          96.45.40.0/24 maxlen: 24
                          96.45.41.0/24 maxlen: 24
                          209.40.103.0/24 maxlen: 24
                          209.40.110.0/24 maxlen: 24
                          209.40.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:ca:b3:91:32:ce:47:60:8b:c0:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Nov  4 23:42:37 2024 GMT
            Not After : Feb  2 23:42:37 2025 GMT
        Subject: CN=03f11854-16f7-4a73-8c2c-aacb60eb9ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:eb:9a:f2:d2:0a:4e:4a:7a:c4:63:e8:4b:
                    74:e9:d7:13:5d:5f:27:9c:3a:a9:86:11:de:55:52:
                    6e:e4:28:c9:eb:2b:48:5b:1c:d3:f5:bc:33:24:e8:
                    ff:e3:5e:be:89:52:03:25:43:09:0a:b1:82:d4:bf:
                    c3:37:d7:fe:d7:3b:59:73:01:11:b7:07:dc:d8:1c:
                    64:5d:3a:a7:6b:8a:54:e3:dc:a3:16:6b:7b:46:4f:
                    b0:c6:9e:1b:4a:6e:f2:cb:d5:85:a1:5e:fa:08:77:
                    f7:db:6a:1f:76:5c:e6:89:e2:2a:a3:31:72:b4:ec:
                    10:8f:81:0d:ae:42:9d:46:a5:73:08:34:b5:3f:1e:
                    a7:74:f7:17:d2:19:94:9f:a9:08:30:29:5e:64:fa:
                    af:d1:4a:78:5f:dd:d1:e3:ac:dd:2a:ce:cb:40:dd:
                    3b:45:6e:9d:30:16:f0:9b:a2:e1:48:54:d9:13:68:
                    54:ff:8f:dc:03:92:d6:77:16:61:c4:f3:4b:70:a6:
                    90:fc:26:70:7c:ff:f1:f6:70:a8:f2:a7:d5:25:7a:
                    9e:61:26:48:28:f7:2e:9b:05:cf:7a:cb:a0:e9:fd:
                    6b:7f:0e:e7:59:96:71:ba:48:67:f8:34:4e:8b:02:
                    d3:4f:f5:18:19:79:c6:e9:41:88:a7:a8:9a:54:a1:
                    cd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C1:2C:58:FA:48:55:4C:5B:1B:9E:9B:B9:E0:77:84:55:C1:0E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e38b7540-8d02-3428-8b61-2305b0a7237b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.55.0/24
                  96.45.39.0-96.45.41.255
                  209.40.103.0/24
                  209.40.110.0/24
                  209.40.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:8c:75:1c:5d:51:cd:04:c9:bd:17:ef:b7:b3:7f:80:b4:
         f7:8f:85:83:ad:e5:16:bf:4f:81:56:3d:7a:96:8b:9c:bf:3d:
         8a:4e:90:a0:6c:46:62:d9:15:5b:4c:10:76:76:d2:40:c9:56:
         7e:8b:77:ea:52:90:c4:31:f0:5e:e7:a3:16:8c:27:95:48:50:
         3c:17:69:4d:84:cd:80:09:e0:08:5d:bb:f0:fe:96:00:69:96:
         31:b1:b4:9e:58:85:37:0e:b9:3e:41:64:7d:53:4b:72:9d:13:
         65:c1:33:41:57:d0:59:ed:fd:ee:d9:67:b0:aa:4f:ae:ec:c1:
         03:e9:b2:24:61:0a:36:a7:77:43:71:06:a5:52:50:c9:a2:07:
         00:61:c9:1b:27:0e:4a:8c:a8:d6:09:8b:cc:d8:19:5b:ba:6b:
         e6:93:f5:bc:83:5a:f1:b3:8e:fc:11:49:da:b9:8e:57:74:80:
         cf:08:7f:a2:52:79:8a:c7:07:44:c4:cd:cc:bf:c1:39:2a:ce:
         67:91:0b:73:3e:22:44:ee:f7:78:fa:1b:69:b2:15:e6:b9:1e:
         50:89:6d:f2:05:83:a2:12:0f:04:79:fc:13:c1:b7:7a:da:0b:
         2d:e3:29:83:6a:74:70:c6:70:7a:5e:9c:0f:6b:43:87:bf:cd:
         d8:3f:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org