Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/79d50f22-3431-3294-9576-851a087acf8c.roa
File:                     79d50f22-3431-3294-9576-851a087acf8c.roa (raw, json)
Hash identifier:          0AMZBXIyZUPQ05Pq/MhGzieG07aNAajhHF9BcJZpPzw=
Subject key identifier:   24:9C:2B:08:2E:A8:DA:EF:EA:F1:55:CC:0B:B4:6B:B2:0C:26:36:62
Certificate issuer:       /CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe
Certificate serial:       010D0C9F432858477EC1110098F18BD872305090
Authority key identifier: 49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/79d50f22-3431-3294-9576-851a087acf8c.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     21557
IP address blocks:        23.128.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:11:00:98:f1:8b:d8:72:30:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=17e667b3-e0ca-4602-86ab-1636d1e3dac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:63:d7:76:bd:ce:1d:a1:ca:33:78:87:17:
                    00:fc:4a:97:c3:df:56:e1:80:e3:27:a2:9e:68:4a:
                    cf:15:56:06:1c:63:a9:a1:16:ab:a7:fb:c0:be:ae:
                    1c:d8:cb:aa:4e:be:12:28:fa:38:0b:bc:e4:71:14:
                    5d:54:d9:73:f2:3c:54:74:5c:06:27:7d:5f:6b:ed:
                    1f:8d:eb:b1:7c:8c:84:af:92:17:ed:39:80:83:1f:
                    25:c3:66:af:0e:94:e1:c1:c3:75:b5:19:1d:37:f8:
                    cd:9e:f0:e5:3f:07:72:58:79:b8:6a:c1:46:f2:19:
                    32:07:8c:33:09:0a:be:3b:20:81:e9:61:63:f1:c5:
                    a5:38:6e:d9:26:f0:71:ee:61:6c:83:e9:3b:6b:b7:
                    01:f9:8a:08:02:e7:c5:3a:33:f1:09:14:fa:fb:79:
                    3f:f6:30:a3:a0:01:15:e8:97:7a:b7:b4:76:1c:e9:
                    1f:dd:09:9c:53:3b:00:4b:86:4f:78:eb:aa:1f:16:
                    cf:b9:ff:ca:60:d8:ea:b6:9f:9f:f4:c3:09:64:0c:
                    42:83:4f:37:54:f8:b8:fb:31:13:76:d6:48:cd:26:
                    5a:03:a5:81:a0:97:14:e5:1a:21:c1:e8:0d:a8:e4:
                    82:7c:af:34:a3:2c:50:f3:68:68:e0:7c:18:c7:3e:
                    47:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9C:2B:08:2E:A8:DA:EF:EA:F1:55:CC:0B:B4:6B:B2:0C:26:36:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/79d50f22-3431-3294-9576-851a087acf8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl

            X509v3 Authority Key Identifier:
                keyid:49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:cf:90:1a:0f:0c:c0:8d:fd:11:17:fc:55:4b:0e:2c:9d:bd:
         20:21:ed:41:6f:e3:63:87:89:69:68:08:13:a7:f7:1d:7d:0c:
         bc:0e:b6:8f:80:c9:59:c7:af:86:26:44:de:e9:c1:90:1b:0d:
         59:f4:93:2a:63:50:15:4e:7d:b3:c5:4b:f3:1a:fc:9e:97:c7:
         37:18:e6:56:06:94:af:2b:d5:6d:31:db:1b:62:c8:30:b2:f6:
         28:9f:cb:aa:2a:c6:9a:29:a1:91:7c:16:2c:fa:a8:d8:61:06:
         3a:a4:15:88:f2:40:c4:1c:24:21:21:2a:f4:37:9e:7c:2e:c7:
         68:e0:90:04:23:82:79:c4:54:08:ca:50:b5:37:30:75:a6:53:
         e6:22:bf:5f:41:2c:17:85:cd:11:c8:4f:82:18:76:6a:bf:eb:
         4b:17:56:3c:24:e9:1e:9e:d5:09:4c:74:fd:06:75:25:b7:e9:
         a0:4e:67:c3:d7:d8:c4:cb:4e:28:bc:d4:9a:cc:2e:8a:10:71:
         a7:f1:a2:c8:cc:84:f7:41:85:2b:35:31:84:e3:ed:3d:56:39:
         27:72:71:1d:b7:3a:6b:c7:dd:44:ce:0b:6a:d8:3b:4c:be:dc:
         ba:7e:f0:a6:9d:b6:d5:c5:26:ce:f1:b7:64:c4:9b:b0:74:61:
         cf:ae:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org