Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa
File:                     7c20deec-1152-3c56-8ea4-d899a929dad8.roa (raw, json)
Hash identifier:          84gbQ4ss8XGdLncfIt1vL99mspXFimYTtQi3Lfyk2D0=
Subject key identifier:   83:A1:EE:22:C6:C8:F2:B2:6C:92:E6:C0:65:D2:FC:84:16:BD:B6:49
Certificate issuer:       /CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9
Certificate serial:       010D0C9F43285847537B602F6070F7C77D206120
Authority key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     398193
IP address blocks:        23.165.112.0/24 maxlen: 24
                          148.59.95.0/24 maxlen: 24
                          2602:fd18::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:60:2f:60:70:f7:c7:7d:20:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=c6225d0d-f3fe-4c91-8f1a-ebc9ad7a741c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:16:24:99:ff:74:a0:08:48:9e:39:d3:0a:0e:
                    5b:7b:8a:cb:23:94:06:9e:bb:68:87:c7:34:d4:85:
                    d5:36:99:71:70:17:f9:bb:c0:25:48:02:43:09:39:
                    d2:09:d4:67:65:a1:82:74:08:ef:db:23:d3:0c:3a:
                    e3:92:f1:35:63:e1:df:2e:57:dd:71:98:03:80:52:
                    7f:15:39:a6:18:70:79:9d:e2:7c:60:d3:62:07:b2:
                    a3:81:bb:39:ad:af:5e:3c:79:68:06:6a:05:c2:cd:
                    a2:df:7b:ca:7e:ab:5e:6e:8e:17:f9:87:8a:9e:57:
                    ce:21:99:3a:86:5b:ff:36:6a:49:19:8d:3a:b4:c9:
                    0f:78:14:bf:dd:27:a9:aa:bf:6b:25:28:b9:77:4a:
                    1b:8a:81:fa:1c:d8:61:17:94:47:37:e2:19:e3:e3:
                    32:68:db:36:7b:40:16:0c:1d:80:41:43:c0:70:4f:
                    29:30:89:fb:d9:13:c8:82:4c:29:3a:d8:8e:15:fa:
                    53:ca:f0:83:4a:b5:58:af:f4:0d:50:db:14:aa:d5:
                    b6:df:22:40:1e:0c:3c:5d:ef:9c:27:bb:da:0f:a2:
                    1e:1e:b9:7a:83:ff:ba:76:bd:15:f4:07:ad:2d:be:
                    74:3c:1c:60:00:ea:9e:1d:6c:3b:8c:29:80:fb:d6:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:EE:22:C6:C8:F2:B2:6C:92:E6:C0:65:D2:FC:84:16:BD:B6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/7c20deec-1152-3c56-8ea4-d899a929dad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl

            X509v3 Authority Key Identifier:
                keyid:35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.112.0/24
                  148.59.95.0/24
                IPv6:
                  2602:fd18::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:08:6c:97:67:d1:eb:cb:28:80:fc:80:44:8d:be:3e:e0:
         d6:a8:88:c2:0b:90:14:75:f1:89:fa:7f:a2:3c:b6:65:1f:ba:
         1c:f2:b3:d2:fa:87:df:22:ec:90:4b:72:99:e8:c5:61:c9:d8:
         68:8a:50:06:2a:3a:b0:80:c8:29:0e:66:6e:41:c5:8a:26:1c:
         97:35:6e:c3:63:f3:14:67:7e:bc:2b:74:98:ee:5d:27:e6:e6:
         cf:1c:41:33:23:b5:a2:e2:0c:33:a0:f6:93:4e:1c:e4:43:a6:
         4f:58:c6:2e:2a:ba:a8:11:26:a7:2c:1d:3d:26:23:0e:e4:0c:
         8d:eb:0c:09:0c:15:ca:84:cd:42:73:f3:4e:92:1f:af:fb:ba:
         a6:d7:eb:77:8d:55:ee:5d:16:e0:ca:06:6e:df:fd:9d:c2:e9:
         5a:39:07:e3:34:b2:d6:9f:a2:53:61:26:20:6f:e0:91:9e:1b:
         33:81:74:87:95:8d:56:21:4c:69:76:c6:1b:ff:fd:e8:c8:cf:
         9c:a0:86:ba:d1:7c:e5:15:04:46:f2:fd:ce:d4:68:29:c1:d7:
         bb:12:b9:61:c4:a9:e2:76:78:4e:9a:c4:a0:e1:01:a3:3d:e0:
         15:e9:f1:2c:a6:eb:1a:d8:a2:e4:05:e7:5f:e8:30:3e:1b:e0:
         16:f3:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:28 2024 by rpki-client on console-fra.rpki-client.org