Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/92d66eb8-87d0-3516-b034-8a4520c54d26.roa
File:                     92d66eb8-87d0-3516-b034-8a4520c54d26.roa (raw, json)
Hash identifier:          xVpOPVabiPIott5WV/CaKHly5dHbROiXoiRtlQp6Rtw=
Subject key identifier:   00:00:ED:E2:F3:EF:15:90:CD:74:94:0C:04:88:BC:E5:40:DA:32:5B
Certificate issuer:       /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
Certificate serial:       010D0C9F4328584769D0DF6952952DDFF4330C40
Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/92d66eb8-87d0-3516-b034-8a4520c54d26.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     203020
IP address blocks:        23.129.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:df:69:52:95:2d:df:f4:33:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=bae89d52-4e73-48be-9b11-31ddd6a7103d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:bc:a6:54:1a:20:58:bd:96:e8:1a:32:f4:
                    dd:0b:aa:c3:9c:be:94:09:04:c4:7e:78:19:af:c8:
                    23:07:b0:dc:a4:4c:a0:db:93:8f:34:89:d3:2a:e3:
                    ac:f4:ec:2b:93:f4:54:b8:1d:a7:ad:5b:44:94:fe:
                    3e:42:7a:bc:34:87:d8:fd:c0:35:66:d6:f3:88:3b:
                    df:d5:6c:19:e1:68:fd:b7:9e:ba:76:b9:d5:7f:8d:
                    42:74:4f:16:39:62:4a:ff:ab:ec:21:ed:78:96:1e:
                    ad:ef:8a:7d:0b:57:64:d3:29:35:4e:84:45:a3:12:
                    c9:1b:81:0e:72:13:63:82:86:24:8b:a7:d0:46:32:
                    de:a1:e8:da:8b:fd:ef:bb:0a:d0:f5:9a:41:36:4e:
                    69:bd:da:82:66:2f:7e:0a:94:9a:eb:41:d1:40:a8:
                    3f:89:a6:b5:60:39:71:f0:61:3e:98:75:8b:ee:21:
                    09:75:7c:75:d9:f2:7c:f0:e8:21:44:47:f0:d9:b7:
                    fd:aa:c5:9b:be:a9:af:e6:45:0f:d1:f7:a5:a9:ea:
                    4f:27:ff:7f:10:9d:7f:2f:48:96:e0:a5:85:11:b4:
                    05:bb:81:95:17:dd:04:5e:7e:6d:0c:25:b3:5a:4e:
                    51:d7:04:f6:7c:b3:a5:4f:53:da:05:2a:e0:64:d0:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:00:ED:E2:F3:EF:15:90:CD:74:94:0C:04:88:BC:E5:40:DA:32:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/92d66eb8-87d0-3516-b034-8a4520c54d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl

            X509v3 Authority Key Identifier:
                keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:f3:d4:1f:80:ec:a6:a2:89:e4:d0:8a:bf:33:a2:4c:8e:
         30:ea:7c:8a:be:ef:cf:df:cf:24:49:eb:f8:11:d7:96:33:8b:
         09:82:dd:da:4a:ee:04:0c:50:25:9f:de:12:5f:dd:50:d9:86:
         8b:5c:51:1b:4c:e2:4b:20:e3:cd:0b:03:2e:3c:42:58:ef:c9:
         2f:dc:fb:f3:0b:0e:d1:ee:29:81:ab:6b:80:5a:9b:48:cc:41:
         da:8d:d0:99:c1:9a:0e:18:53:68:26:d5:e6:96:9a:c7:03:8b:
         e7:c1:68:8e:34:99:c1:a8:a3:68:aa:b0:38:eb:03:7b:4d:8a:
         6f:ac:d6:d4:ef:26:85:3d:bc:f9:3e:e6:1e:20:a2:9a:76:5e:
         b4:d5:75:5f:14:87:83:34:ec:e2:21:6d:56:60:6b:90:5b:7e:
         73:24:04:cb:e7:81:91:41:d6:f0:f8:03:0d:73:5b:8a:d5:44:
         4a:3f:17:0d:4c:e0:cb:ec:20:3c:80:05:32:95:f4:6c:3b:9f:
         86:4c:8c:44:20:ff:14:99:b4:f4:2b:3c:57:e7:9a:76:bf:46:
         6b:25:e6:3c:a9:38:6f:2a:f2:5f:95:9c:c1:80:3a:b8:71:d1:
         9f:a7:87:58:64:53:a4:88:b4:54:4f:60:26:f3:11:7c:0a:49:
         6b:62:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:16 2024 by rpki-client on console-fra.rpki-client.org