Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa
File:                     c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa (raw, json)
Hash identifier:          mGQs8xSRHaeei7gjRkwfm5BJ+NnW2++PKZaH07ODG0o=
Subject key identifier:   D2:51:73:33:57:C0:33:DE:34:50:5C:E0:0D:D2:24:6B:92:6A:0B:89
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F432858477230F72C63CC698DBBBD1640
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     396982
IP address blocks:        23.174.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f7:2c:63:cc:69:8d:bb:bd:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=02ba006b-d9b3-4a02-ba75-a59efcd8c170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:ac:d2:5d:34:4b:48:43:21:30:6b:1f:e9:
                    d4:c7:01:a8:67:ee:d8:b5:e4:44:1f:8c:96:fe:0e:
                    90:67:c7:f9:c1:bd:91:bc:df:1f:ec:39:04:07:fc:
                    5c:4c:75:a4:f2:a9:01:87:0f:e7:03:e5:e2:ec:14:
                    12:a7:e2:02:c9:08:4b:e3:05:f7:fa:75:ea:60:88:
                    26:ac:bb:fd:4f:79:66:9f:65:bc:1b:14:a7:48:b3:
                    e9:69:ed:22:ec:5c:ad:73:cf:31:15:88:44:24:14:
                    7c:52:bd:e5:58:cc:29:82:da:ce:17:e2:4d:16:08:
                    03:99:8e:fd:d8:e1:15:62:24:14:d8:fc:45:29:3b:
                    82:e8:37:f9:15:6f:4b:3c:fe:97:27:7e:35:69:58:
                    a0:58:3c:2a:c3:b0:fe:1d:44:24:71:ea:a1:73:dc:
                    a2:f4:37:bf:4b:fe:4b:ef:46:9e:3d:53:df:4c:6c:
                    32:dd:d0:a9:5a:29:d2:b1:69:a0:50:4b:a0:a1:8a:
                    b7:c7:4b:fc:40:ff:bd:87:93:eb:28:fb:8d:40:9e:
                    02:be:a6:38:d5:3c:1b:06:37:2e:46:28:e7:f5:2f:
                    1a:86:34:6a:52:f1:31:7b:88:39:8f:ce:7a:35:ce:
                    a0:ec:36:41:0b:82:b4:71:5b:73:8f:5d:34:e5:6a:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:51:73:33:57:C0:33:DE:34:50:5C:E0:0D:D2:24:6B:92:6A:0B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:b0:ec:d6:f7:44:68:d9:c8:9c:71:20:29:67:5a:01:88:
         77:f7:de:bc:ec:db:ac:7d:aa:a8:25:98:1b:89:0e:7d:fd:c8:
         8a:2e:6c:2a:f0:8c:ed:42:b7:d8:a3:fc:7d:86:b6:16:6f:8d:
         fe:b2:a4:7f:14:d5:a7:b9:f5:0b:b2:7e:6e:e7:0e:fd:27:1d:
         72:0a:d8:6c:94:0a:73:78:01:82:67:ca:ef:db:31:a2:d7:9e:
         62:0f:e7:bc:69:98:9b:5a:67:63:4b:1a:76:4b:51:30:e0:d2:
         37:57:0f:cc:bc:6a:24:ce:d8:d3:ee:d5:ea:fb:12:e8:79:a1:
         7d:02:b9:f7:9d:29:bb:94:49:df:cd:2b:06:0f:33:8a:90:d1:
         a2:71:db:13:46:06:4d:4e:ed:4a:12:cd:5e:ea:c2:cc:25:cd:
         a4:f4:65:85:88:95:e0:42:5c:bc:f9:58:1c:3f:da:26:1a:27:
         6e:e2:6b:8a:79:0d:da:c1:b6:0c:3e:7e:aa:3d:1f:aa:0e:90:
         30:7e:d5:35:81:2c:a3:11:63:71:a8:a6:03:c3:5e:d8:15:01:
         2e:ce:22:47:ec:68:cb:0f:1e:73:23:1e:97:e5:06:c6:1a:6a:
         19:b2:76:21:b1:b0:86:c7:35:79:e7:f7:3e:e1:0b:50:3c:d0:
         8f:a0:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:40 2024 by rpki-client on console-fra.rpki-client.org