Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/277201b5-0e55-3f61-95f0-78d34a5cbec9.roa
File:                     277201b5-0e55-3f61-95f0-78d34a5cbec9.roa (raw, json)
Hash identifier:          91KyHxAH40Y9mtw1H4AsZH7wF4byLvkzVhTzLH411S0=
Subject key identifier:   D3:31:0C:44:43:EB:61:03:93:94:7B:15:0D:CC:9A:05:EC:AA:E9:AC
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F432858477230E63DC5062BBCC7BBC900
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/277201b5-0e55-3f61-95f0-78d34a5cbec9.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        23.179.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e6:3d:c5:06:2b:bc:c7:bb:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=dd24de2a-9543-4866-ace2-a47da8f58fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:61:bf:8c:a2:b1:9d:8e:1c:17:e5:5c:b5:2b:
                    be:ea:82:14:0f:91:3e:d7:de:50:13:b5:eb:2e:5d:
                    b0:63:21:92:d0:0d:4e:2b:be:e0:ff:78:bb:93:a3:
                    ee:89:26:f5:e3:67:9c:04:dd:4a:b8:ad:9f:c5:eb:
                    9d:d5:62:66:30:ac:36:ea:cf:db:16:62:c4:b6:2b:
                    c8:52:82:17:4a:2d:96:2a:6e:8e:8b:c1:d4:e2:60:
                    38:d8:09:4b:a6:c9:58:df:20:e1:da:e5:d3:11:76:
                    5a:87:cc:0b:10:03:8d:0c:54:49:80:b8:7e:e4:9b:
                    58:c8:d8:50:7e:fa:0f:f4:3a:e6:24:65:a6:fa:d0:
                    2a:af:c8:53:dd:c0:20:90:c9:bb:a1:22:09:09:2d:
                    83:14:a5:c2:c3:73:99:dd:2c:23:fd:a1:b9:33:da:
                    b6:fd:b2:65:5a:56:80:35:03:0e:b5:9e:6c:22:db:
                    8c:e2:2d:d0:67:0f:43:59:9c:23:20:5b:c6:38:ec:
                    f9:5b:de:b0:9e:4a:69:0f:92:c7:67:8f:b9:90:cb:
                    20:c3:27:82:42:94:01:e9:51:63:d2:e8:3b:61:2d:
                    09:43:eb:bb:11:42:37:df:b6:1f:3d:f0:74:95:dd:
                    f9:c3:d2:27:90:fe:4c:40:f6:24:17:92:61:00:c0:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:31:0C:44:43:EB:61:03:93:94:7B:15:0D:CC:9A:05:EC:AA:E9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/277201b5-0e55-3f61-95f0-78d34a5cbec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d6:0b:6b:60:ae:54:0f:b3:fd:b2:93:18:08:51:34:8b:a0:
         c4:d6:98:0a:36:43:01:da:3a:14:82:46:95:cd:25:9f:a3:b8:
         66:92:f3:c0:92:64:d8:d3:3e:9a:0e:8b:f1:c4:b1:e3:0a:02:
         2d:94:76:ee:67:73:31:eb:b3:1d:fe:5f:69:b3:66:eb:72:4c:
         3c:e2:dc:44:8b:d4:32:77:cc:96:e2:cd:8a:53:0f:0e:b6:25:
         cc:24:4e:ae:40:8f:1a:ea:3a:fe:16:ec:6a:78:a4:ba:73:03:
         8a:c2:83:1b:fc:37:bf:5f:6b:6b:99:40:34:44:d4:d1:1e:9d:
         4f:c1:be:2b:69:02:b1:b4:e4:5f:ea:3f:56:2e:4d:57:21:22:
         0b:52:31:a9:47:52:c9:dc:23:fa:5e:25:69:b8:86:9e:6b:b8:
         a6:8c:95:8c:28:4a:ef:3c:da:33:1b:cb:39:9e:9a:ab:09:0c:
         b7:bf:07:53:49:36:5c:ec:fa:49:78:67:8d:ef:dd:f6:46:61:
         cf:a9:af:64:d8:9f:c3:ab:71:2a:ad:61:e0:35:92:05:be:75:
         70:ff:a4:a9:97:4f:9b:39:cd:d3:93:16:46:6f:17:03:2d:7f:
         5c:7e:5a:88:39:7c:c6:fb:dd:64:66:56:dc:90:8f:b6:ea:c7:
         57:40:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:14:59 2024 by rpki-client on console-ams.rpki-client.org