Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa
File:                     f2d6896d-681b-32c5-9502-74c90202e12a.roa (raw, json)
Hash identifier:          YIo8rrwWqO4DwfKp7w2/RT2lrcv2xcpzOU8oTyJPFP4=
Subject key identifier:   0B:07:69:64:AF:53:A9:62:2D:45:E0:74:8B:AC:3B:90:C1:B2:78:A7
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F432858473095F9451D8E81CD8D2FCB00
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     7794
IP address blocks:        23.248.128.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f9:45:1d:8e:81:cd:8d:2f:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=4fd2e552-b108-461a-8ad8-97263d745207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:b6:48:a5:83:fd:a6:99:77:f3:b0:c3:38:
                    6b:cd:54:98:3b:76:90:19:57:08:32:6b:e4:07:c1:
                    32:9c:e1:2e:13:3f:6f:4a:7c:cc:d6:49:46:bc:49:
                    a7:92:5c:66:ea:6f:ed:e7:36:1c:f8:58:09:65:8f:
                    82:90:f0:a0:fc:8e:d2:cf:ca:57:82:f0:8a:c0:af:
                    5b:81:9c:b8:7c:84:07:2a:dc:15:0a:a3:57:45:d6:
                    5a:2b:00:5b:0d:e2:90:de:c2:42:2e:d8:93:bf:88:
                    64:65:49:f8:7b:87:99:0a:a0:02:de:b2:98:6f:b4:
                    a7:19:12:13:51:7a:ec:ee:b2:b7:b2:60:08:42:cd:
                    8f:b2:ec:6c:99:fc:8b:ee:cd:cc:fd:a0:a9:b4:2a:
                    17:da:e2:a2:7c:f5:92:e0:b2:88:b8:8c:3d:33:e1:
                    03:ae:9d:33:27:0d:8a:0f:16:f0:b3:35:ce:3c:7e:
                    cb:f9:31:32:94:19:c3:a3:e8:f2:11:10:d2:9d:9e:
                    87:55:ca:e0:0e:93:f5:64:d7:9e:16:67:e8:b0:a9:
                    68:8e:4b:09:d4:86:8a:82:42:87:e7:16:33:28:0f:
                    1c:ee:4f:91:0f:78:07:ae:e6:dd:5d:78:d5:11:33:
                    71:a6:16:fa:ba:d2:64:86:d5:c7:2a:aa:98:54:2e:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:07:69:64:AF:53:A9:62:2D:45:E0:74:8B:AC:3B:90:C1:B2:78:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.248.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:6f:5a:fb:4e:3a:67:55:16:0c:14:ac:3b:cf:8f:61:8a:ce:
         60:53:42:49:66:ee:66:6b:eb:e4:8e:07:5b:8f:62:58:49:4a:
         e6:bf:92:ad:ca:04:88:43:b9:e6:29:fd:23:25:f9:8f:8d:df:
         74:4d:8a:80:29:ce:d1:c1:36:ec:1f:73:57:31:77:da:c8:be:
         a2:59:92:c3:3b:7c:d2:88:b3:73:d1:fd:87:9e:a0:45:74:3f:
         0d:95:55:dc:f6:3e:ba:a5:44:6b:35:0c:c0:ba:40:11:fc:b1:
         9b:ce:06:16:5a:16:53:4c:45:e9:0e:9f:90:ac:cb:fa:b8:0d:
         1f:c1:3d:be:01:6f:71:eb:0b:d9:dd:e2:84:65:12:98:d9:bf:
         d4:a3:a6:17:98:6f:e3:6e:d1:5b:9e:7d:2c:43:d5:2e:0c:95:
         68:fb:8f:e1:9e:4f:f6:be:e3:cf:c9:78:71:85:01:84:b3:bc:
         82:0f:e6:ab:30:cb:00:58:b8:56:a6:57:93:9d:73:5a:01:f4:
         fd:6b:fc:0c:99:6a:31:7d:03:1d:53:8a:6a:2b:dd:00:d3:73:
         5f:13:3d:28:24:a6:35:31:88:8e:60:d6:29:4c:94:bf:05:0d:
         ea:e3:95:17:c6:c8:f8:4c:3f:6d:c0:db:b1:eb:75:ba:4f:7e:
         6f:38:79:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:37:59 2024 by rpki-client on console-fra.rpki-client.org