Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7bc53e15-f637-3483-afc1-2123922938d5.roa
File:                     7bc53e15-f637-3483-afc1-2123922938d5.roa (raw, json)
Hash identifier:          BwaaXIcH3+W5aAVYPjwshqHyYd6mrxQV8LDO7s8PFgM=
Subject key identifier:   7A:15:AF:55:40:4A:52:AE:8C:F4:1D:0A:63:2B:7E:6D:2B:E8:8B:64
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F43285847299B1DF7B41D3E8B7354C680
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7bc53e15-f637-3483-afc1-2123922938d5.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     62707
IP address blocks:        23.166.224.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:1d:f7:b4:1d:3e:8b:73:54:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=39da2a58-1844-4a84-a808-c635c5d5562a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:f9:aa:ea:64:46:2d:67:31:43:95:3c:88:
                    9f:31:a2:f6:d7:96:7f:94:74:69:80:26:bb:df:11:
                    a7:a1:07:da:07:2a:76:c3:49:49:3b:e3:a2:9c:cc:
                    60:cd:44:ed:1c:d8:81:17:23:25:be:79:f1:24:55:
                    5f:4e:ac:cb:02:32:8e:bd:b1:f5:0a:77:7a:0b:dd:
                    ff:de:ee:44:3b:12:a0:bf:3f:cf:d3:8b:ac:81:c0:
                    fb:da:a2:a6:2e:e6:b3:6b:8b:94:18:1b:d2:57:45:
                    93:68:d6:1b:e1:66:3e:a3:33:f6:87:1d:84:10:f6:
                    67:9b:4c:20:1e:b1:f8:ed:88:b1:b5:56:35:ed:eb:
                    6b:c1:b8:5d:08:bf:76:61:10:7e:2e:9f:7c:16:6a:
                    8e:06:cd:c0:e9:b9:1c:c7:00:62:48:7c:35:bd:3f:
                    1e:13:1d:31:44:eb:b5:72:6e:90:77:bb:2c:d3:44:
                    30:5c:7f:92:16:ae:1b:e7:9b:d2:a9:07:ab:79:42:
                    c2:7c:59:d8:66:9a:b0:1a:e6:a8:70:f6:11:41:1f:
                    5c:0c:bf:67:3b:76:1a:58:05:06:3f:b5:5d:be:f1:
                    76:17:e9:f5:24:99:f0:f5:4c:77:3d:69:f2:ce:e9:
                    f7:de:79:b3:88:0b:61:b2:08:fe:04:e2:2c:df:9c:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:15:AF:55:40:4A:52:AE:8C:F4:1D:0A:63:2B:7E:6D:2B:E8:8B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7bc53e15-f637-3483-afc1-2123922938d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:52:f6:63:05:53:5c:7f:75:6f:7b:cd:1c:93:8a:c2:f2:
         cb:d3:bc:25:19:32:b8:a9:8c:85:59:7d:dd:22:bc:64:7e:60:
         c1:c4:4e:f4:18:5d:de:53:4a:c2:98:f3:5a:7c:99:d5:a2:bf:
         58:93:4b:88:38:40:29:6a:41:f1:75:ae:60:f8:b3:ea:dc:16:
         c2:6b:b4:ad:d7:00:9f:68:85:d6:cb:87:8f:79:4b:34:2d:a5:
         e4:0d:f1:61:35:2b:0f:87:9c:a2:a9:7b:a3:ac:24:66:cd:5b:
         c9:2a:76:5a:68:ba:35:6c:70:05:53:7a:14:5a:68:6d:06:cb:
         d1:e8:e6:0e:e1:f2:5e:d0:a3:e3:60:81:4d:b7:7b:48:38:56:
         f1:41:8f:47:bf:32:c5:66:7c:a9:e6:4c:4a:21:3d:8a:43:26:
         26:bf:1b:81:71:5d:60:97:df:87:cc:d3:48:26:25:76:56:02:
         bf:3f:8a:a1:6d:4e:55:4b:7a:ff:80:a9:4f:60:76:3f:14:8f:
         3d:26:44:38:ac:62:4a:f1:f9:19:55:6f:da:f7:54:30:bf:ec:
         c6:0a:32:fb:2b:02:f7:b7:d4:b6:e4:51:6a:c0:70:9c:e2:06:
         8e:c7:e4:6e:a7:19:18:6b:90:f6:8a:ba:fd:f0:30:37:e7:4c:
         ff:46:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:05:05 2024 by rpki-client on console-fra.rpki-client.org