Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/c8005e4b-a80f-3b04-9773-08a235437886.roa
File:                     c8005e4b-a80f-3b04-9773-08a235437886.roa (raw, json)
Hash identifier:          z1TIoOKO96R4K6TZM/T89eXP647+I8ue5ZNtu1GYOko=
Subject key identifier:   6B:B8:24:E0:32:CD:28:5E:65:A3:8A:49:3E:31:D1:D0:21:64:45:8E
Certificate issuer:       /CN=77c31fd1-c3ac-425f-9d0e-b9b227466366
Certificate serial:       010D0C9F43285847967BCAE0B82FA284A02EA180
Authority key identifier: F5:4E:60:BA:39:BC:90:C1:05:BE:FC:9C:91:63:40:C5:71:5D:C5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/c8005e4b-a80f-3b04-9773-08a235437886.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     31898
IP address blocks:        23.131.48.0/24 maxlen: 24
                          72.19.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:ca:e0:b8:2f:a2:84:a0:2e:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c31fd1-c3ac-425f-9d0e-b9b227466366
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=eade74f2-2856-4f85-a1ce-5b765a498802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:cc:25:0c:f8:4f:45:c7:e5:50:06:4d:e5:
                    d2:67:3a:36:aa:59:ca:39:83:f2:6c:32:ba:f5:a1:
                    52:07:69:60:76:0a:b1:f3:dc:74:ef:c5:f4:5e:8d:
                    7e:a1:bf:3b:cb:8c:80:a6:4b:46:a4:b5:47:fb:55:
                    7c:33:27:ca:f9:9e:44:c1:84:16:56:6d:94:4a:73:
                    10:47:3c:66:3d:b2:70:1a:f9:dd:b4:b8:62:14:76:
                    09:e1:e3:ef:d4:6c:07:42:a7:b5:02:d5:92:86:f0:
                    cd:c6:09:ff:59:55:11:32:ed:9f:2f:c3:ca:89:64:
                    8b:97:08:e5:aa:ab:e1:16:2f:d2:c6:b0:d9:3c:bd:
                    55:63:4d:c3:11:e2:2b:05:73:1a:70:38:82:d9:69:
                    9b:e1:3c:48:86:66:f1:44:ca:c2:b1:3b:37:b0:bc:
                    88:61:7e:24:42:5e:60:29:d7:8b:a4:b1:a3:83:b7:
                    6a:63:c9:d7:6c:39:45:e7:71:d5:a1:f9:e7:6b:ce:
                    2b:06:df:b2:61:13:94:e6:a3:99:04:8d:94:4a:c9:
                    af:36:68:6a:54:a1:5e:de:b0:5c:7a:1e:78:b9:6e:
                    e7:e6:bd:34:0e:89:05:4b:e6:45:56:72:38:bb:02:
                    59:b3:c7:c3:b6:4e:ec:49:d6:b1:9c:6f:b9:dc:6a:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B8:24:E0:32:CD:28:5E:65:A3:8A:49:3E:31:D1:D0:21:64:45:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/c8005e4b-a80f-3b04-9773-08a235437886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.crl

            X509v3 Authority Key Identifier:
                keyid:F5:4E:60:BA:39:BC:90:C1:05:BE:FC:9C:91:63:40:C5:71:5D:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.48.0/24
                  72.19.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:58:3a:e5:52:4d:f0:b3:9d:d8:9f:43:97:ba:7a:f5:97:45:
         c8:71:4d:57:44:06:89:86:87:95:88:12:4a:e2:61:f4:c2:5f:
         a3:f5:ca:4a:32:7d:e1:a0:ee:47:4f:a6:94:15:94:34:82:53:
         a7:8e:6c:15:70:d2:31:a7:60:e3:04:7d:9e:ed:8b:e5:4d:21:
         7b:91:5f:6d:a3:aa:72:11:ee:80:55:da:e1:94:04:0a:0b:46:
         98:35:ab:c8:6f:f7:ef:9f:1e:57:21:c2:da:f3:51:e0:32:ca:
         56:0d:f0:f9:26:2d:fb:59:11:83:f8:e8:69:d8:3d:d2:e7:fa:
         d5:9d:c3:82:16:44:53:e8:26:34:c6:4e:aa:d4:fc:94:49:f3:
         8e:0c:62:13:f2:e1:83:62:3f:b2:74:3b:bd:7e:5e:46:b6:17:
         6a:51:f1:ed:7e:9d:20:bf:69:e0:5c:18:ab:db:c3:e2:5a:34:
         69:24:14:ac:4d:84:23:70:ad:88:39:9f:06:ca:ef:5f:e0:0a:
         aa:db:54:50:f4:86:3f:15:11:7c:f1:bf:1f:25:09:66:7d:82:
         d8:f8:b7:90:ee:1c:cc:c7:bb:af:ce:4b:1d:27:c2:6c:9c:75:
         3e:40:bd:1a:8f:74:0c:10:57:ad:e4:e2:fa:04:78:84:4b:f3:
         0e:fa:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org