Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/84dfd579-e58b-3593-9305-01e86221a3c6.roa
File:                     84dfd579-e58b-3593-9305-01e86221a3c6.roa (raw, json)
Hash identifier:          GQE5I8no4mITWZQm/A2X5268RkxpZnqmrkxBWuiBjnM=
Subject key identifier:   9C:DF:93:B5:3D:4A:FA:2C:02:1A:0D:F4:BE:66:B6:FA:68:6A:43:2B
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584782F103B10C9541CB91E92500
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/84dfd579-e58b-3593-9305-01e86221a3c6.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     205455
IP address blocks:        23.154.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:03:b1:0c:95:41:cb:91:e9:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=beb1b4d2-6a97-4318-aaf6-73a58ca42a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:b7:b3:b2:6f:88:72:d9:4c:92:45:f9:d3:
                    e2:61:4f:da:bb:a3:3f:dd:b9:d2:e0:a7:c4:0d:a1:
                    af:14:03:92:2d:50:17:31:b3:26:d2:56:e0:f5:ec:
                    b6:df:a0:8d:9f:9b:8d:37:3e:eb:e5:d6:00:6a:16:
                    5c:49:0a:e8:1a:77:71:97:b2:83:ce:c0:28:d5:b8:
                    cf:fd:43:67:05:23:7f:07:af:6d:9b:2a:d0:82:2f:
                    36:7e:6e:a4:34:ce:aa:18:7e:e0:a9:cf:85:06:10:
                    48:80:76:e8:b6:a9:77:b3:12:cb:2d:f0:0a:de:c3:
                    91:34:6b:8d:07:16:4d:d0:38:92:ec:1c:b5:07:b7:
                    d6:81:dd:a8:2e:dd:bb:a4:90:03:d1:e5:92:7d:3d:
                    33:c5:79:18:53:e5:d0:f4:4b:ed:9c:df:98:86:43:
                    a8:d5:e0:62:b4:d1:8d:d3:a2:76:35:80:0d:f1:02:
                    fa:83:40:3c:8b:9e:5e:7a:57:ca:9c:70:98:93:42:
                    91:7e:89:0e:a6:3c:3a:0b:ba:ab:14:b7:85:d7:a7:
                    2d:01:e8:fe:f1:40:ed:4a:60:81:3c:1d:1f:7f:2d:
                    7b:a8:94:e3:ab:63:e8:b3:b8:28:a8:bf:66:bd:dd:
                    55:f3:2e:d7:04:56:dd:14:14:37:ab:54:42:5d:8a:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DF:93:B5:3D:4A:FA:2C:02:1A:0D:F4:BE:66:B6:FA:68:6A:43:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/84dfd579-e58b-3593-9305-01e86221a3c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:00:b1:22:46:a0:e2:af:5a:2f:6a:e7:b4:a2:f8:06:68:79:
         db:8d:d4:bd:0e:e1:ee:0e:6b:91:8c:2a:be:a3:a0:97:c4:59:
         d8:5f:85:83:11:e2:30:42:d6:c2:4c:f9:80:cb:75:e0:f8:3e:
         07:9f:ca:c0:88:7d:b3:98:40:4b:5a:0d:b6:72:fc:eb:04:43:
         47:71:49:2f:b4:6c:f1:81:32:dc:9e:1f:10:14:aa:1c:09:e7:
         33:66:94:16:c9:84:7c:4e:a2:4b:d2:b5:f6:85:35:27:9e:67:
         32:63:f5:e3:de:77:b6:fb:ba:83:b3:3a:c8:3f:d5:11:21:94:
         b0:c6:3c:c0:89:72:fc:09:63:69:ef:71:78:9f:6f:07:59:4e:
         7c:9b:a5:c4:57:b1:80:e2:7c:e3:a7:fd:26:36:91:2f:32:bb:
         bd:d7:24:3d:41:db:f7:ca:f1:4c:3b:80:48:60:15:4f:a1:e3:
         e4:ec:b7:3a:95:30:39:b1:2d:42:15:d8:ee:f1:b2:93:fa:28:
         e4:63:a5:8b:c3:db:44:87:8f:66:93:a1:f8:ab:80:fd:49:80:
         0e:e5:a2:3c:b6:13:59:a0:b5:32:aa:12:c6:79:90:24:1f:c2:
         41:91:d2:4c:32:fe:a7:3e:10:3c:82:b3:7d:ab:59:42:32:98:
         c8:7b:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:43 2024 by rpki-client on console-fra.rpki-client.org