Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa
File:                     942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa (raw, json)
Hash identifier:          kwPOxrmEjwbwV8QYKiSX2rkhwhFZs3EH7MenOtvVeKE=
Subject key identifier:   21:8F:19:8F:5E:EE:57:00:9F:30:87:74:E8:A0:E3:0F:7E:20:67:29
Certificate issuer:       /CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Certificate serial:       010D0C9F43285847AA0688CED85616A93200FE00
Authority key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa
Signing time:             Sat 26 Oct 2024 01:00:31 +0000
ROA not before:           Sat 26 Oct 2024 01:00:31 +0000
ROA not after:            Fri 24 Jan 2025 02:00:31 +0000
asID:                     20119
IP address blocks:        23.151.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:aa:06:88:ce:d8:56:16:a9:32:00:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
        Validity
            Not Before: Oct 26 01:00:31 2024 GMT
            Not After : Jan 24 02:00:31 2025 GMT
        Subject: CN=2b8d713b-631d-4b82-9553-4e0ebe65d240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:63:3b:94:0c:4a:eb:31:50:7d:b9:64:f2:
                    50:7b:fe:b0:66:28:80:e8:42:27:57:fe:6d:08:c5:
                    44:64:63:27:bf:f6:3a:c7:ff:5f:dc:b4:a1:36:0f:
                    da:85:e6:f6:dc:52:30:96:d7:e9:d9:29:ca:ba:cb:
                    11:69:03:c5:ff:08:f4:96:16:e7:f8:9e:18:7e:85:
                    fa:d6:4c:bd:c7:33:61:e2:33:5a:4a:b4:28:25:a6:
                    bf:48:6b:dc:0a:c0:3f:c0:c4:6e:e4:36:88:f1:4c:
                    82:bf:34:d7:b5:e9:49:e1:b8:08:b3:f1:92:8b:70:
                    6a:5f:3b:7c:46:ff:aa:7f:be:65:63:3a:93:01:cf:
                    d3:c5:49:48:99:57:92:08:e9:97:6e:f1:f4:02:83:
                    9c:c6:bc:0b:01:a1:62:e8:ab:4d:89:a1:36:09:9f:
                    27:96:9b:c6:1d:6e:ae:0f:2d:c3:65:9c:b2:9d:79:
                    38:c5:3b:c6:e5:85:cc:49:05:65:f9:06:14:f4:fb:
                    bd:c3:b9:9c:d0:66:30:e5:50:44:67:17:e2:92:6e:
                    51:ba:6e:ea:cd:77:8b:aa:c9:26:cb:d6:0f:27:79:
                    90:8f:8b:a7:c8:f2:8f:c7:18:2b:07:07:02:6b:52:
                    c4:89:3d:c5:ee:d8:be:12:b9:e5:10:32:57:b1:a0:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8F:19:8F:5E:EE:57:00:9F:30:87:74:E8:A0:E3:0F:7E:20:67:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/942fe396-5b28-3c80-8cea-d8d9d4e69df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl

            X509v3 Authority Key Identifier:
                keyid:77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:3b:62:a1:89:77:80:8e:ff:14:e5:cd:77:58:f6:20:55:
         6a:b0:6c:20:40:ff:9a:1e:e9:54:06:fc:94:b2:32:52:37:52:
         f2:e2:39:9d:9b:b7:6d:42:76:f2:93:82:78:cd:8a:b8:36:87:
         9e:c0:83:8f:4e:9d:58:14:1b:03:1d:a7:02:8c:3a:73:e4:a3:
         6d:96:44:47:e4:0a:75:0e:27:2d:be:3b:f4:de:29:3e:17:c3:
         12:b7:da:04:64:14:4d:cf:8f:61:54:eb:39:14:c5:d2:ee:e7:
         0c:55:ca:a1:48:d4:cd:93:8b:bf:1d:6a:f3:42:aa:81:3c:22:
         ed:8c:8c:7b:92:54:29:9a:c2:18:77:2d:3b:46:06:30:e2:f7:
         5f:48:c8:4d:d7:11:54:51:16:f1:4a:d8:42:69:a6:1f:fb:2a:
         f5:66:46:1a:06:cf:a7:b7:d1:bb:97:15:d2:e4:93:2f:7f:ad:
         b2:f5:e0:17:0e:ee:dc:79:47:61:84:6f:18:6b:e6:b9:96:af:
         1c:b4:66:bf:37:3a:cd:ca:78:c8:97:96:5c:84:10:29:6f:ef:
         83:fb:88:a5:4f:3c:96:dc:f1:f5:3f:ec:c4:68:bb:4e:8e:bc:
         8f:a5:42:8a:cb:7e:e3:8c:19:90:b4:06:3c:a6:34:8c:db:d1:
         af:61:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:44 2024 by rpki-client on console-fra.rpki-client.org