Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/6578b62d-2c2a-3685-bdcd-bf624417a492.roa
File:                     6578b62d-2c2a-3685-bdcd-bf624417a492.roa (raw, json)
Hash identifier:          Ps2tx27ZWMzJDM/ZPuQxBfzxnlYdmonfo/JbJY4ZfDo=
Subject key identifier:   53:A6:B9:82:B7:C3:8C:55:42:B6:34:45:6F:76:9F:75:63:F3:B7:DE
Certificate issuer:       /CN=d84b0325-0327-4cbf-bc76-4e79de05793d
Certificate serial:       010D0C9F43285847E35F68F177DDBEC08D226C80
Authority key identifier: AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/6578b62d-2c2a-3685-bdcd-bf624417a492.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     395044
IP address blocks:        23.145.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:68:f1:77:dd:be:c0:8d:22:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d84b0325-0327-4cbf-bc76-4e79de05793d
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=0f3fd6c5-d70f-4491-8376-ea46e4c78aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:88:79:7b:c3:28:a2:91:b0:23:04:8a:9a:
                    fa:20:da:e1:c1:1c:a7:01:0a:2e:03:a8:6d:e5:3a:
                    c6:85:e9:ef:2a:d5:5d:49:6d:c4:74:0c:4a:87:b6:
                    3d:5b:00:ad:0d:94:90:46:19:61:10:d4:25:92:7f:
                    59:18:4a:ae:7e:d4:94:aa:24:18:ba:f5:e0:17:e3:
                    f8:c3:94:e1:d0:27:76:28:c3:f6:14:60:c3:c7:16:
                    0b:0b:ab:87:04:4d:25:bd:95:1b:fe:0f:1f:1f:60:
                    81:28:57:27:c5:1a:ca:ba:b2:ba:aa:91:ae:6a:c9:
                    a5:dc:af:e0:d4:6f:4d:b7:0b:51:69:d6:0a:f6:95:
                    d1:a6:8a:56:ce:41:a9:a0:1f:a3:1d:0e:b0:bf:6d:
                    ba:15:8a:90:73:14:6e:9b:c8:9c:ac:b5:88:d1:a9:
                    14:a9:bc:63:59:b7:ae:52:d5:02:15:47:11:f2:85:
                    7e:34:57:f6:86:9e:be:47:0b:f6:43:4a:d3:40:9c:
                    2b:eb:b6:a1:a4:ca:a7:40:19:cc:8d:af:62:9e:5b:
                    0b:1c:f1:24:64:fc:44:40:39:c8:20:a2:60:90:91:
                    d9:27:99:70:00:64:63:7d:c0:9f:ef:63:27:3d:c5:
                    e2:b9:bd:b1:df:80:39:02:11:d9:34:01:f4:5b:51:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A6:B9:82:B7:C3:8C:55:42:B6:34:45:6F:76:9F:75:63:F3:B7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/6578b62d-2c2a-3685-bdcd-bf624417a492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d/d84b0325-0327-4cbf-bc76-4e79de05793d.crl

            X509v3 Authority Key Identifier:
                keyid:AE:BD:82:3F:DD:27:A9:91:64:E3:69:C5:34:1D:25:CB:60:90:A3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d84b0325-0327-4cbf-bc76-4e79de05793d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:02:03:42:4c:86:ca:f7:14:3c:88:a1:ba:5b:f7:bb:eb:56:
         77:02:8d:99:e6:00:22:7a:41:17:8e:cc:0b:16:10:67:d7:c2:
         c1:4b:ba:33:fe:36:44:cd:df:ad:33:85:7f:56:99:94:f3:08:
         7a:8b:28:6c:3c:3b:38:95:c0:38:59:6d:b8:f4:bc:58:82:ef:
         b7:c2:cc:55:6f:f5:f9:e0:2c:db:7c:88:13:38:c8:2a:da:42:
         6f:43:3b:45:4c:39:2c:9d:ef:9e:cb:3f:67:6a:1c:02:7e:88:
         7e:5b:12:d0:ee:b9:af:6b:b2:89:66:2e:1d:8a:0c:35:4b:f9:
         ec:c3:19:3c:cf:1d:71:17:15:90:1c:5e:01:ee:4d:c9:18:31:
         3d:54:cd:8f:f7:c1:2c:7b:05:73:80:41:15:b8:0a:ae:63:59:
         83:b6:b2:7f:ab:91:8e:7f:e6:16:ec:c1:6b:eb:a3:d0:7b:63:
         6c:af:ca:d0:7f:cd:ef:04:e3:13:86:bd:27:1e:07:11:c2:df:
         46:e3:be:71:b8:25:9a:4c:81:6d:32:28:fe:b7:6e:fd:4e:5f:
         03:82:c0:d8:19:b9:d9:57:8d:da:98:77:5d:21:03:98:80:b6:
         9d:60:5c:2a:3b:f0:ac:89:e1:07:cd:8e:19:db:f0:f8:b2:0f:
         75:d4:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org