Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa
File:                     31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa (raw, json)
Hash identifier:          u65DQ9chkreuXwVbsKD5KuOKcA+8ilfMRYEniKs+2jo=
Subject key identifier:   27:7F:72:CB:39:8D:CA:94:E1:3B:14:5E:49:80:10:AC:FB:0B:74:5B
Certificate issuer:       /CN=dbb1226f-fd99-41be-a461-4cbad0381988
Certificate serial:       010D0C9F4328584762D662B98C901BEFB5B3A800
Authority key identifier: DF:51:B7:F5:5D:AD:FC:71:1E:63:10:E7:83:2C:53:B1:B5:75:31:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     396997
IP address blocks:        23.155.96.0/24 maxlen: 24
                          2620:54:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/dbb1226f-fd99-41be-a461-4cbad0381988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/dbb1226f-fd99-41be-a461-4cbad0381988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:62:b9:8c:90:1b:ef:b5:b3:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb1226f-fd99-41be-a461-4cbad0381988
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=b92e4774-3657-4d30-9599-312c15434943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:c2:f2:ce:fe:d9:4e:d3:b0:f6:4b:76:45:
                    29:ca:73:b8:39:68:e5:ef:f4:0f:1a:ef:a4:2e:94:
                    fd:d5:80:98:a5:c7:80:69:9e:5a:8c:94:88:5d:01:
                    f0:2c:55:64:ff:77:5a:c8:5d:db:84:c4:4d:b1:13:
                    94:cf:6e:ae:11:be:72:ad:80:a7:f1:70:8a:34:fb:
                    b8:65:15:48:48:f2:a5:09:d2:d0:29:78:05:f8:0c:
                    6b:f4:7f:5d:48:1d:76:85:c7:82:e5:cc:5d:79:c7:
                    c0:24:d8:d4:71:a4:a1:f3:a0:3f:8b:24:3c:10:f1:
                    2a:d1:e2:e8:a2:b7:5e:38:45:be:9b:52:e6:bf:a3:
                    a6:18:38:3a:cc:57:44:33:1c:40:aa:7d:6c:1f:1d:
                    74:b1:65:bc:a3:78:e8:ad:2a:5b:0a:43:e5:06:af:
                    0e:09:f7:50:0c:99:fa:d5:6b:84:ef:b9:41:cf:05:
                    6a:26:93:fc:6d:d8:07:17:9f:b8:48:37:d2:b0:f3:
                    32:9d:98:29:88:45:d1:f7:54:18:19:e9:68:fb:6f:
                    b2:d4:37:b3:f4:2c:45:d0:a3:aa:42:13:38:14:25:
                    d3:35:87:df:65:36:d4:76:6c:2e:94:8a:e3:ad:68:
                    c1:68:7a:95:8e:76:cf:86:e2:0f:f0:60:24:44:87:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7F:72:CB:39:8D:CA:94:E1:3B:14:5E:49:80:10:AC:FB:0B:74:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/dbb1226f-fd99-41be-a461-4cbad0381988.crl

            X509v3 Authority Key Identifier:
                keyid:DF:51:B7:F5:5D:AD:FC:71:1E:63:10:E7:83:2C:53:B1:B5:75:31:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.96.0/24
                IPv6:
                  2620:54:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ef:19:ea:25:fa:86:98:d5:54:76:9e:2e:03:a4:99:ca:37:
         b3:5b:c3:24:6b:05:ed:d4:37:9b:d1:25:cc:7f:52:ed:0a:2c:
         f5:01:a6:99:d0:86:0e:28:c1:03:ec:9c:b3:77:02:95:32:18:
         89:f6:61:9c:74:01:a4:d0:ef:e6:1e:ef:00:8b:0e:45:26:2c:
         ce:de:1e:6e:ef:7b:1c:71:f0:60:26:52:74:65:7b:be:9d:2b:
         74:8e:98:42:e0:18:f6:e2:9e:84:cf:92:8f:d9:75:0d:a8:ac:
         ea:cd:3a:83:aa:a0:85:33:f8:55:b7:03:23:c0:c5:fe:1f:62:
         77:a7:8d:99:34:b8:0b:e0:02:df:2b:0c:a7:7b:f5:44:69:63:
         ff:d8:14:fc:8d:e3:57:24:40:97:37:64:a1:39:0f:74:a5:2a:
         06:ca:a5:95:97:df:44:0a:e9:ff:ba:0d:8b:c6:c0:20:15:50:
         0f:7c:e5:6d:33:e3:ec:59:30:c0:1b:bf:67:0b:d6:72:ff:1b:
         e5:14:2d:dd:e5:c7:f7:17:92:74:8b:41:df:2b:2c:6c:6f:9e:
         b6:a6:58:cc:62:c0:e1:48:52:ba:ad:4c:fc:b4:d7:e7:d2:70:
         bc:15:1c:b1:37:c8:a8:33:a4:14:be:8f:62:76:cc:8e:83:a2:
         db:c3:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:59 2024 by rpki-client on console-fra.rpki-client.org