Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b59c8657-f4fb-3bf2-9c5d-bf4f880074aa.roa
File:                     b59c8657-f4fb-3bf2-9c5d-bf4f880074aa.roa (raw, json)
Hash identifier:          vxtRgIROzoEkwaiPyw2Bqk3YWoEo31Sjw8HIbGKam4k=
Subject key identifier:   88:AB:F5:10:2C:84:31:73:3F:3B:51:FB:B4:50:16:9B:E5:1F:E5:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DD2127D2BA137D3C949C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b59c8657-f4fb-3bf2-9c5d-bf4f880074aa.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        76.23.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:d2:12:7d:2b:a1:37:d3:c9:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=bf3ef81f-0de5-466c-ab06-239a2cabc167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:93:62:32:af:f9:38:63:fd:dd:cd:e1:20:
                    e5:1b:0e:0c:20:89:92:e6:ed:98:6a:5b:81:70:17:
                    f0:ff:2d:48:f2:d0:8f:57:fe:00:85:e1:67:6f:63:
                    86:90:20:03:c2:9a:21:a7:be:be:08:ad:e5:e9:13:
                    75:bf:8d:c3:8b:3e:8a:e3:ec:fa:d7:61:68:fe:3f:
                    2f:46:8f:20:c1:04:1f:81:0d:a6:04:2f:3e:c2:ba:
                    db:7c:c1:c4:3b:34:aa:41:b9:c6:1b:35:c1:21:30:
                    b2:44:85:b2:9a:99:61:f9:d6:68:28:a4:67:0d:24:
                    6d:1f:a8:39:70:55:a9:f6:7b:c4:d9:c5:b4:9d:64:
                    af:07:0b:c5:d5:49:87:e8:df:52:9a:95:2e:03:c0:
                    72:ef:b7:67:d6:23:f4:5d:30:b3:75:d4:28:bc:27:
                    e8:c3:34:b5:0b:3b:1c:db:7b:de:63:46:91:5d:ef:
                    7f:0e:96:ed:82:e5:f6:95:dd:a7:18:3b:d7:69:1e:
                    56:2b:bc:fc:77:d5:28:6a:bf:e8:15:83:d9:86:68:
                    83:c5:32:ae:97:6a:95:31:8b:21:8a:4c:4e:fe:73:
                    18:21:b8:05:d0:f9:c4:a3:f0:95:fb:ee:c8:9f:53:
                    bc:4a:e3:93:f7:a8:e0:3b:61:bc:46:c7:b9:6d:89:
                    04:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AB:F5:10:2C:84:31:73:3F:3B:51:FB:B4:50:16:9B:E5:1F:E5:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b59c8657-f4fb-3bf2-9c5d-bf4f880074aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.23.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:92:42:26:5b:b7:42:69:ff:3b:ac:76:d7:2f:e8:88:d8:
         c6:9e:62:cd:3d:c2:8d:ec:66:14:23:c8:c4:4b:fe:ec:65:4c:
         2d:5f:4e:4a:37:e5:63:1e:c8:bf:ef:7c:74:f1:1e:f8:b1:24:
         3a:28:f5:1d:72:44:c7:65:ca:1d:ab:c8:18:af:55:73:80:a3:
         36:1c:ad:fe:07:ab:b1:b3:e7:85:68:a5:82:0c:5f:ae:de:ba:
         c6:37:52:92:c5:df:4b:ae:7c:ff:c7:a4:ec:27:8b:5d:7f:fc:
         62:1f:6a:11:11:1e:a6:41:a5:91:d5:27:c1:05:a8:4b:cf:20:
         6a:7d:6a:a4:05:e9:ac:b7:04:29:09:c8:af:d0:ef:57:bd:39:
         f1:04:81:32:69:e8:15:bc:06:bd:90:d7:c7:7b:41:3c:60:f5:
         bd:74:f5:2c:aa:37:10:f3:95:dd:49:c8:e3:2e:b5:59:f5:55:
         71:84:6d:6c:94:37:98:ce:7b:d2:11:74:26:9b:89:5f:ce:bb:
         41:1a:ef:71:90:16:5b:e0:48:24:7d:80:1b:77:a5:38:f9:60:
         84:0b:8d:5b:3b:4b:60:5d:24:0b:e8:3a:92:40:cf:c0:90:b4:
         d3:dc:23:f9:2c:c0:31:e6:46:5d:7d:d6:81:62:7b:6d:65:19:
         c1:b5:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:10:55 2024 by rpki-client on console-ams.rpki-client.org