Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/b396882a-2f5e-36ca-be3d-03bb63ca1127.roa
File:                     b396882a-2f5e-36ca-be3d-03bb63ca1127.roa (raw, json)
Hash identifier:          5MvhqqI42aU/g8jqgwcLOV27NYTwDzJy43ruoj/pbqA=
Subject key identifier:   DF:6F:A3:94:7B:77:D7:D3:3D:A4:88:25:9E:DB:D5:74:0E:08:3A:22
Certificate issuer:       /CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
Certificate serial:       010D0C9F43285847C344902A565DAC53C1776880
Authority key identifier: E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/b396882a-2f5e-36ca-be3d-03bb63ca1127.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     40864
IP address blocks:        23.144.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:90:2a:56:5d:ac:53:c1:77:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=d54382c7-5a35-4e45-a75d-f6c6dac12b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:17:94:98:02:9d:27:83:2f:4c:ad:ea:db:
                    bb:9d:e4:ad:29:75:db:ea:eb:a7:dc:50:c0:c0:69:
                    9f:1c:27:fa:91:2b:08:0d:27:f8:80:7a:aa:16:73:
                    0b:dd:a7:fa:ed:7e:32:a2:93:03:2d:0e:f2:fe:a8:
                    57:49:94:ca:af:59:93:3c:49:05:9b:ca:1c:05:fb:
                    1d:f1:c5:f0:41:8e:87:68:20:14:78:9d:69:e0:7b:
                    2d:9c:d3:0e:e6:48:01:de:17:9d:48:ec:bf:8b:72:
                    8c:13:42:b5:98:b5:f1:c0:11:23:b4:3f:fe:c3:c3:
                    b9:5c:a4:e8:b1:3f:84:ee:74:d1:ae:b0:14:39:e5:
                    53:6d:e8:f0:4a:82:ed:93:59:d7:04:52:83:75:4f:
                    36:26:7b:1b:00:89:62:65:48:95:94:d0:db:f9:52:
                    b6:44:d1:88:74:1d:dc:9c:a1:0f:9c:b3:31:3e:b4:
                    dc:fc:2a:9d:00:fe:68:6f:d7:26:f3:5c:54:49:75:
                    58:b1:21:7d:f8:19:f1:30:02:83:15:6f:20:ed:38:
                    e3:a9:09:37:b6:f1:bd:29:b5:32:3d:ed:6d:d6:28:
                    ad:bb:03:1c:94:5a:1e:8b:f6:71:3c:34:c7:4d:98:
                    b2:6e:20:21:66:70:31:0a:51:96:5c:d4:60:4f:54:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6F:A3:94:7B:77:D7:D3:3D:A4:88:25:9E:DB:D5:74:0E:08:3A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/b396882a-2f5e-36ca-be3d-03bb63ca1127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:86:c5:07:70:7f:63:60:49:99:68:d4:57:06:80:c2:59:40:
         21:3b:69:2f:22:04:30:35:57:1c:8a:1c:7d:9d:37:8c:8f:cd:
         c5:87:20:cc:7e:77:bd:93:ae:a2:c8:a3:03:d7:00:2c:21:17:
         f4:4a:5c:37:18:13:08:6a:0d:52:a1:45:f4:63:12:ce:a6:08:
         33:cb:5e:ba:b8:3b:32:fa:a7:b8:45:48:3f:4a:14:d6:ca:39:
         fa:76:04:c1:a5:06:63:02:76:ff:c3:e6:1d:4a:0c:3c:34:d0:
         94:a2:8d:fe:ef:e1:b5:f1:e5:6b:ac:16:0b:bb:a2:72:02:74:
         aa:fd:4e:b4:f5:a8:8f:65:d2:7c:0a:20:a4:c6:87:77:48:91:
         9e:a9:70:06:57:d3:8c:e4:67:1a:10:f5:92:8e:6c:5a:4f:0f:
         d1:86:fe:b3:c0:61:45:37:e1:13:03:7e:c5:52:38:34:8f:ff:
         8f:86:5b:23:bc:7b:d0:df:7a:45:ed:06:6d:5c:23:28:7f:c0:
         a3:0d:00:e7:4d:69:18:19:1a:bc:eb:0b:16:5a:8e:2b:66:6a:
         15:55:55:c6:e0:09:d6:7e:a4:1a:50:82:ce:30:54:58:e2:e5:
         c4:66:0b:75:f6:3d:0f:35:9d:c8:d5:bd:2f:af:e6:63:d1:ea:
         cb:ad:4b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:56 2024 by rpki-client on console-fra.rpki-client.org