Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/0f8069e4-fcf4-3fed-8d08-706747fddde5.roa
File:                     0f8069e4-fcf4-3fed-8d08-706747fddde5.roa (raw, json)
Hash identifier:          MPk0HVD3gORMDtZKstsNqLHFwCwyBCSEkOgBo7sA1c4=
Subject key identifier:   DE:B8:B2:FB:DD:BF:89:16:1B:00:69:20:F2:71:8B:64:59:D4:78:E0
Certificate issuer:       /CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c
Certificate serial:       010D0C9F4328584774FB94542A20AAA7D9398C00
Authority key identifier: FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/0f8069e4-fcf4-3fed-8d08-706747fddde5.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     64256
IP address blocks:        23.162.128.0/24 maxlen: 24
                          2602:fef5::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:94:54:2a:20:aa:a7:d9:39:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=271403f9-1068-41a3-9c3e-88253461fc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:92:2c:97:07:cb:63:b8:3c:bf:62:88:76:
                    a3:d2:65:ef:a3:8f:85:7e:00:eb:78:11:04:38:7f:
                    74:34:4e:fb:11:30:22:02:58:a1:81:d3:92:65:51:
                    c4:f7:ca:3c:24:20:f8:38:7f:67:81:79:e7:72:44:
                    a3:57:23:6f:40:e2:6b:14:20:20:c7:55:19:fc:bb:
                    a8:a0:5c:f0:c4:32:0f:03:88:40:48:d7:f0:a3:e9:
                    61:cf:55:51:af:4c:9c:de:22:c5:cb:7c:a7:77:89:
                    a6:1a:56:a2:b3:d5:15:77:8f:21:98:b9:d7:05:f2:
                    e2:0c:be:b2:e4:36:25:78:8a:a8:db:08:17:05:a8:
                    41:8b:23:23:a6:9c:30:cd:ae:6a:2f:07:8d:c5:15:
                    81:44:65:fc:be:23:7c:00:42:f3:55:d3:4e:9e:da:
                    91:dd:4b:46:10:b7:47:24:ef:11:b7:ce:f1:e5:67:
                    42:8c:1d:10:27:af:2b:e4:e4:80:c7:11:ce:9f:e1:
                    a1:b5:29:d6:b1:6d:02:7c:d8:b2:fa:5e:72:6f:8a:
                    81:b6:72:e7:e8:2c:89:d1:bb:dc:0d:fb:4a:11:f6:
                    3a:3f:03:e8:95:5c:9d:33:50:54:7e:1f:9e:b8:f8:
                    c8:9f:1f:6b:5a:b1:06:82:ef:a7:d4:05:36:6a:ae:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B8:B2:FB:DD:BF:89:16:1B:00:69:20:F2:71:8B:64:59:D4:78:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/0f8069e4-fcf4-3fed-8d08-706747fddde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.128.0/24
                IPv6:
                  2602:fef5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:91:4b:3f:6a:53:22:56:92:6f:ee:19:86:72:8a:1a:88:
         e3:9c:07:06:cc:56:05:23:3f:57:ba:f1:1a:f3:6b:89:0d:f1:
         26:7e:bb:87:a0:93:8f:51:77:a1:fa:27:f6:63:ca:09:a0:f8:
         b3:5d:f0:83:bf:12:2b:08:48:f1:3e:94:fe:c4:7d:9e:57:a5:
         3a:e0:16:b0:67:86:b8:4a:3e:f2:f1:53:74:3e:92:70:76:44:
         8d:ab:e1:df:eb:9a:d7:f9:bf:09:7b:27:9c:fa:e7:e6:12:67:
         09:db:fc:51:8c:e2:6a:24:bd:76:ba:37:06:cc:b1:8e:ba:df:
         ac:12:a9:47:21:39:16:bd:13:a1:6a:00:fb:06:36:d5:68:00:
         4a:cb:e3:d5:23:bb:03:c5:2d:66:77:6d:a5:e1:4c:e9:e8:d1:
         32:54:db:13:3a:16:45:5e:47:9e:99:22:36:96:0c:0a:b5:23:
         43:6f:6f:9e:c8:88:6f:ba:0a:3a:d6:5d:4e:fc:1a:a1:ed:cd:
         c3:b9:56:bc:a6:b4:49:6b:c2:70:9f:9a:da:66:d1:af:53:bd:
         c8:89:af:7d:e9:ba:74:1d:86:a4:46:b2:8e:5a:98:75:f9:d8:
         d8:0e:18:f7:07:fa:5a:c5:0c:e0:07:23:5a:3c:aa:6a:af:99:
         ae:da:a1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:22 2024 by rpki-client on console-ams.rpki-client.org