Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/9e76a303-95a7-3d3b-a141-5197331f408a.roa
File:                     9e76a303-95a7-3d3b-a141-5197331f408a.roa (raw, json)
Hash identifier:          Ckf1f0wYiqjSP2k6w+kjwKkbHQRCnCUc8Xw74C+lhhY=
Subject key identifier:   DF:66:7F:B0:A8:54:F7:24:EB:A6:85:C5:C9:02:CF:43:76:7F:C1:FB
Certificate issuer:       /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
Certificate serial:       010D0C9F43285847C823BEE58DA70D73E41C8C80
Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/9e76a303-95a7-3d3b-a141-5197331f408a.roa
Signing time:             Tue 05 Nov 2024 19:53:39 +0000
ROA not before:           Tue 05 Nov 2024 19:53:39 +0000
ROA not after:            Mon 03 Feb 2025 19:53:39 +0000
asID:                     54686
IP address blocks:        23.128.124.0/24 maxlen: 24
                          2602:f9a0::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:23:be:e5:8d:a7:0d:73:e4:1c:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
        Validity
            Not Before: Nov  5 19:53:39 2024 GMT
            Not After : Feb  3 19:53:39 2025 GMT
        Subject: CN=fd3eeb87-1b17-44f7-89ed-c0ac9e7a7e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:38:b3:86:b5:f9:a7:d8:07:0d:13:3b:da:
                    20:60:4d:6b:29:07:39:22:74:f2:91:70:13:07:8a:
                    81:0c:72:5d:99:5c:cb:58:ef:33:6e:45:b4:0f:83:
                    4a:63:9c:83:8c:3f:a0:50:01:74:95:bd:8b:c5:d2:
                    ee:c5:df:1a:bc:3b:28:be:c3:a5:a5:82:23:58:ca:
                    7e:54:36:3d:5a:36:f9:db:4c:25:6b:1f:18:06:9c:
                    4f:a6:53:cb:29:d3:f4:03:fa:20:68:78:aa:27:82:
                    f2:61:ab:b5:4c:eb:3e:c6:54:b4:e9:3f:e6:f3:a1:
                    06:1f:6f:2f:a8:34:bf:3e:0f:d1:26:49:6e:8f:7c:
                    dc:b5:98:70:4c:c1:39:f6:19:b7:db:dc:02:b2:28:
                    a7:d6:33:7c:02:09:9d:5e:20:b0:15:92:c2:37:be:
                    9a:38:f5:ff:5b:90:f3:f0:36:fa:13:2d:55:88:21:
                    c8:43:99:02:db:0a:e8:31:6e:10:57:eb:63:f5:28:
                    9b:23:9e:d5:3e:ff:a6:04:22:02:a5:12:26:6b:2a:
                    08:09:1a:e9:73:27:62:41:6b:51:de:79:fd:c8:e6:
                    c3:93:d3:ca:2d:69:d1:65:b8:fa:19:79:84:72:f7:
                    d4:cc:c0:49:7a:28:80:ba:6d:a9:a8:7c:4c:57:8b:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:66:7F:B0:A8:54:F7:24:EB:A6:85:C5:C9:02:CF:43:76:7F:C1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/9e76a303-95a7-3d3b-a141-5197331f408a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl

            X509v3 Authority Key Identifier:
                keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.124.0/24
                IPv6:
                  2602:f9a0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cd:4a:1c:ff:0f:b8:d3:2a:db:02:2f:a8:ce:4e:13:b6:76:
         00:ee:53:86:9c:59:75:bd:82:e9:ce:66:0d:f1:16:55:2a:c9:
         06:f0:4e:30:51:40:51:77:fa:26:b5:49:80:01:fc:d6:5a:26:
         ea:a1:75:17:93:6f:9c:8c:ff:89:ec:e7:72:8d:d4:08:d0:29:
         f1:54:97:84:d0:0f:72:25:c8:57:8c:55:cb:5e:eb:65:c2:db:
         66:f7:3b:29:e9:69:5a:ae:22:76:fb:58:2b:68:04:06:9f:2c:
         09:af:31:3f:b0:df:bb:b6:32:87:1a:10:9b:a4:36:cd:08:f0:
         c8:3f:1d:ae:7d:69:13:21:59:53:1a:da:41:c4:8c:fe:d3:fa:
         74:cb:96:3a:3b:12:ac:0f:8e:88:84:85:16:0c:b3:1c:e8:7e:
         f3:5f:3f:ac:6e:9e:42:c5:31:c0:ec:a1:ae:c3:2b:ea:e1:a1:
         ef:b1:ea:c3:ee:3d:da:14:a6:28:70:65:af:b9:47:17:a0:0e:
         e5:15:b5:e0:a2:c2:88:00:ab:cb:de:a3:d9:ad:00:ab:24:c9:
         c1:7b:5b:f4:3b:9d:7f:d0:88:31:48:c1:5c:c7:d7:48:9a:d0:
         4e:0a:66:a9:16:fb:1e:79:12:b2:db:96:05:42:63:04:39:88:
         36:9a:ef:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:18 2024 by rpki-client on console-fra.rpki-client.org