Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
File:                     2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa (raw, json)
Hash identifier:          /Hf4tbxb59bVfKsBcgGYue03Kt+8h+0sWV6957WsVkM=
Subject key identifier:   63:42:38:E7:DD:C7:AE:3F:ED:64:72:20:D0:5E:93:FC:1D:09:73:61
Certificate issuer:       /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
Certificate serial:       010D0C9F43285847C8237FD6E48BBEC032345000
Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
Signing time:             Tue 05 Nov 2024 19:53:09 +0000
ROA not before:           Tue 05 Nov 2024 19:53:09 +0000
ROA not after:            Mon 03 Feb 2025 19:53:09 +0000
asID:                     401468
IP address blocks:        23.128.124.0/24 maxlen: 24
                          2602:f9a0::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:23:7f:d6:e4:8b:be:c0:32:34:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
        Validity
            Not Before: Nov  5 19:53:09 2024 GMT
            Not After : Feb  3 19:53:09 2025 GMT
        Subject: CN=5caf070b-debb-458e-b071-e942621e9e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:ca:4d:0d:ae:17:e7:c1:d8:62:82:f1:05:
                    0c:97:05:f2:82:7d:eb:25:b6:ec:06:f0:0b:c7:a7:
                    fd:8a:71:60:2e:b4:f8:1c:7c:da:de:d3:49:65:0a:
                    a4:cd:eb:ad:7f:58:30:3c:b7:8d:18:c6:bb:cb:5f:
                    4e:ce:37:8d:ff:96:79:d5:8a:76:b9:e7:3e:3d:88:
                    78:25:75:08:2f:3a:1a:d7:42:05:8c:2e:82:f2:a4:
                    de:13:29:a2:7a:22:ce:cb:ab:8d:c1:8a:23:3b:6b:
                    e9:36:3d:f7:17:9b:76:13:8d:58:02:31:67:55:25:
                    b1:63:6c:c4:d0:85:6a:6c:3c:5e:a7:e3:85:37:ed:
                    e1:d4:33:1a:46:8b:16:b0:66:ee:62:c2:f0:6a:f5:
                    9c:f3:d0:ea:b3:d3:d0:27:38:5c:3d:7b:f3:29:f6:
                    f5:95:ca:c6:69:ea:31:85:35:06:24:b8:87:0d:d3:
                    53:b3:b6:a1:a7:8e:b8:f7:49:f9:46:4b:f8:d2:e6:
                    32:50:95:96:ea:69:2b:3a:c8:d6:16:9f:99:05:01:
                    5a:66:47:fd:5e:06:45:bf:4d:15:e0:84:1a:f1:5e:
                    2e:02:c9:97:bc:4b:c9:a2:fd:a1:4f:21:f0:48:b6:
                    25:a7:21:79:d7:d3:99:3a:5a:80:7a:09:14:3e:47:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:42:38:E7:DD:C7:AE:3F:ED:64:72:20:D0:5E:93:FC:1D:09:73:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl

            X509v3 Authority Key Identifier:
                keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.124.0/24
                IPv6:
                  2602:f9a0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c2:b2:91:58:c2:4d:ab:5b:9b:03:73:8f:07:81:74:ea:3a:
         8a:73:c6:9a:1a:8a:89:c6:d4:af:6f:4e:1f:42:c1:10:38:13:
         3b:d3:21:bb:be:6b:19:08:c6:47:0b:55:8e:02:b3:df:6d:cc:
         ef:a2:3f:da:d4:7b:da:c9:98:7d:db:b9:ee:f4:71:1b:b2:82:
         83:e0:d4:72:8a:2d:aa:93:47:17:4a:df:a8:8e:5b:e8:b2:78:
         55:fb:d8:cf:88:ff:fc:e4:c3:8b:96:c5:a6:56:f1:30:85:25:
         52:28:1e:10:95:e3:35:b5:9a:b6:0c:2c:85:83:63:a7:66:05:
         70:a6:19:c6:91:4e:67:c3:5b:8b:1d:f4:58:2e:53:75:00:c4:
         12:71:d1:bc:a0:77:84:05:00:67:1b:bc:9c:95:a8:14:6c:fe:
         27:7c:ee:24:b0:68:4b:59:43:22:d8:c5:a4:5e:8a:02:17:0f:
         d7:ec:57:89:5b:4c:d2:97:ed:f7:93:f0:08:b5:8a:86:88:6a:
         53:7c:b0:53:c1:0d:5d:76:73:56:2d:67:8d:a7:a5:e2:46:60:
         ec:31:7a:18:fb:ba:d1:c7:91:15:7c:55:ab:95:c5:33:0d:05:
         89:90:8b:b3:54:73:d7:b9:93:7b:9b:af:b5:a3:e2:d9:54:93:
         b6:d0:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:23 2024 by rpki-client on console-ams.rpki-client.org