Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/3244d21c-35ef-3ccc-94cb-5f38f8d8809a.roa
File:                     3244d21c-35ef-3ccc-94cb-5f38f8d8809a.roa (raw, json)
Hash identifier:          Ix7ziijF7KvtZAKgaVTupgvhF47yE7VF3syzaH3vWPE=
Subject key identifier:   A0:89:6E:9B:F8:24:77:CB:3B:F6:F0:D9:D0:2F:DE:76:43:C8:AB:AB
Certificate issuer:       /CN=b3684cc2-61f3-48ab-a840-5ed39d70b96e
Certificate serial:       010D0C9F432858477660FB0BFE554B0E311AD080
Authority key identifier: DE:65:2F:B4:D2:D7:DF:9F:4E:E4:6B:0E:F9:33:72:E5:2B:09:A5:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/3244d21c-35ef-3ccc-94cb-5f38f8d8809a.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     206203
IP address blocks:        23.135.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/b3684cc2-61f3-48ab-a840-5ed39d70b96e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/b3684cc2-61f3-48ab-a840-5ed39d70b96e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:fb:0b:fe:55:4b:0e:31:1a:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3684cc2-61f3-48ab-a840-5ed39d70b96e
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=bdea0692-a847-49d7-acae-7f38951cbaa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:4a:70:86:a1:86:74:de:45:70:5b:0f:3a:
                    37:34:ef:79:63:75:84:96:c4:ee:d0:bc:02:6d:1a:
                    3d:bc:24:b7:82:3d:9b:a9:c1:95:bb:0d:38:ed:8f:
                    8e:57:e9:10:e5:89:9d:33:57:14:69:97:09:0d:c8:
                    dc:03:5f:8d:15:a0:58:ac:46:89:77:0b:f0:ca:07:
                    2f:6f:c8:5b:d9:3c:3f:1d:b2:03:bc:d6:60:23:da:
                    be:7c:61:a1:1e:70:7d:73:44:fb:4f:48:f1:9e:42:
                    50:f6:02:e1:d1:39:9c:e3:41:6e:6a:37:e7:fd:4a:
                    90:b7:c1:dc:8a:5b:8b:e3:e8:2e:fd:12:98:c3:53:
                    0e:48:31:d2:f7:94:0b:1c:16:1a:48:01:db:a0:30:
                    18:bf:28:41:f7:b7:47:ed:06:62:70:2c:57:de:82:
                    ba:16:8e:98:50:fc:ec:4a:e7:32:cf:ca:42:82:b6:
                    53:14:69:27:30:ee:96:85:e6:d7:78:85:8a:cd:70:
                    e5:1e:0a:ce:15:15:50:a3:b7:7b:b2:c7:e9:57:28:
                    c4:58:79:30:d8:41:86:a0:15:e1:b1:f9:37:fd:5f:
                    d8:be:7d:b1:f2:c4:73:35:03:52:c2:ea:0d:58:12:
                    bf:ce:c7:0a:16:dd:dd:d4:99:fe:7a:30:8e:70:8c:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:89:6E:9B:F8:24:77:CB:3B:F6:F0:D9:D0:2F:DE:76:43:C8:AB:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/3244d21c-35ef-3ccc-94cb-5f38f8d8809a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e/b3684cc2-61f3-48ab-a840-5ed39d70b96e.crl

            X509v3 Authority Key Identifier:
                keyid:DE:65:2F:B4:D2:D7:DF:9F:4E:E4:6B:0E:F9:33:72:E5:2B:09:A5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3684cc2-61f3-48ab-a840-5ed39d70b96e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c8:e4:6d:8f:43:ea:85:af:3b:1f:f3:32:ed:74:84:bd:c7:
         97:e1:44:90:c8:65:9d:8d:38:e2:92:1b:34:a9:ed:03:ce:c4:
         5f:65:1b:27:a8:90:64:b8:d4:94:97:68:16:7e:ba:76:12:9d:
         a0:19:fd:6e:f1:70:50:6a:29:53:b3:38:b0:c2:2f:cf:52:a1:
         9c:e7:8b:96:4b:21:62:85:76:4d:05:b1:08:4f:f1:93:91:2b:
         12:fd:d0:d3:81:a9:68:b2:c3:21:7a:09:12:c8:6a:de:ee:44:
         91:f6:20:ff:b4:45:d2:b3:7a:dc:c5:21:fe:52:e5:67:99:ca:
         1f:fb:66:06:b8:cf:28:54:98:fc:1b:d3:5b:7d:3d:ed:35:99:
         cb:3c:6e:f4:be:43:b8:60:ab:dd:ea:23:25:46:aa:1b:99:22:
         fb:49:00:51:fd:4c:2d:63:4b:fd:05:ea:fe:7a:34:a2:1c:53:
         e8:37:e6:79:8f:97:26:58:3c:d0:fa:f1:f9:ca:02:57:ea:b5:
         80:92:8f:80:8d:86:44:9b:2a:9f:55:3f:cb:08:d7:65:57:bf:
         3d:92:05:6f:a7:6e:72:e4:b6:b4:a7:5b:86:11:87:a7:9c:30:
         7a:d9:c1:f5:87:2f:33:5e:77:84:30:ad:8f:5d:1a:37:07:08:
         7b:13:09:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:14 2024 by rpki-client on console-fra.rpki-client.org