Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9b480007-28de-3693-8014-6e88c53ac67b.roa
File:                     9b480007-28de-3693-8014-6e88c53ac67b.roa (raw, json)
Hash identifier:          gpez+ZNVHg23UcEeXgixeWPUTo8+pplwsaX5WfcUTYo=
Subject key identifier:   78:C5:60:24:AC:FF:21:7C:EE:2C:73:0E:1B:D8:5E:AF:A1:24:01:54
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584792E3423D4DEE254EC369DF80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9b480007-28de-3693-8014-6e88c53ac67b.roa
Signing time:             Thu 17 Oct 2024 18:05:52 +0000
ROA not before:           Thu 17 Oct 2024 18:05:52 +0000
ROA not after:            Wed 15 Jan 2025 19:05:52 +0000
asID:                     25645
IP address blocks:        23.148.80.0/24 maxlen: 24
                          66.118.240.0/22 maxlen: 24
                          69.64.116.0/22 maxlen: 24
                          2605:88c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:e3:42:3d:4d:ee:25:4e:c3:69:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Oct 17 18:05:52 2024 GMT
            Not After : Jan 15 19:05:52 2025 GMT
        Subject: CN=dca2c4d1-0cf8-4ae6-8f10-1c966ddf4f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:99:8e:00:4f:42:f3:f8:fa:37:3d:a5:4d:
                    c4:ce:97:75:3d:45:c8:93:21:a3:81:f7:c1:57:21:
                    58:f2:b7:df:67:df:80:92:3e:76:f8:4a:de:7c:fc:
                    91:a5:66:bc:b3:95:16:f9:47:2b:fd:07:0a:a7:d8:
                    27:14:e4:b6:37:42:63:c9:93:b4:f7:27:ef:a2:5f:
                    82:cb:72:c1:85:7b:c8:fc:17:fb:46:19:3a:9d:60:
                    93:d4:ce:9c:50:72:ed:52:86:1a:28:67:94:c6:b9:
                    a9:fe:a8:fe:a2:b0:c4:e3:47:c8:54:67:b6:e2:f6:
                    bd:ce:bd:f3:2a:84:2a:fa:b1:b4:5c:6f:d9:69:db:
                    e6:12:49:2c:75:99:cd:ee:91:bd:aa:40:37:48:43:
                    a2:f1:e1:9e:32:c5:f7:05:06:e6:a4:eb:54:e5:fc:
                    01:8b:84:b3:d4:2f:91:db:e8:7a:3f:a9:4b:43:d0:
                    ee:9f:26:84:98:c7:3f:6e:14:00:f5:bf:6f:35:7f:
                    99:f2:66:0b:a1:c5:a8:4c:86:d6:67:58:ff:18:2d:
                    55:2e:c1:46:68:82:a2:e1:cf:75:30:5f:ba:d0:33:
                    80:80:cb:c8:ae:a4:67:89:95:cb:7e:c0:d4:03:a9:
                    94:9e:54:57:6f:32:a7:f1:2f:80:f2:6f:3b:91:b6:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C5:60:24:AC:FF:21:7C:EE:2C:73:0E:1B:D8:5E:AF:A1:24:01:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9b480007-28de-3693-8014-6e88c53ac67b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.80.0/24
                  66.118.240.0/22
                  69.64.116.0/22
                IPv6:
                  2605:88c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:46:ea:f2:ab:63:3f:6e:84:91:32:fc:60:5e:4b:5d:0b:4e:
         bd:ca:34:38:79:48:e2:a2:03:89:da:75:5b:55:96:7e:9b:f3:
         d6:3a:39:fa:ce:fb:e4:c0:ad:a6:46:c4:1d:3f:4c:09:81:86:
         ff:14:61:30:62:27:b8:7c:39:9f:1a:82:79:84:00:97:fd:ef:
         b8:20:31:42:e4:a4:13:05:cd:e7:70:a2:07:1c:98:4a:0f:42:
         d8:8f:c7:74:fa:29:9e:78:f4:b1:9d:b6:a3:07:8d:e9:f3:c9:
         93:af:0e:46:54:2f:59:03:9e:ac:ac:00:92:b2:f1:1a:ff:cc:
         a4:f4:33:2f:50:26:cd:06:e0:fe:29:62:11:6b:10:94:06:bc:
         48:29:3d:b6:46:af:06:96:52:9a:fb:3c:91:73:9c:28:d4:ab:
         ed:52:68:14:92:9f:cd:e8:f8:dd:d6:6e:b3:5e:ab:d0:eb:23:
         76:28:d9:24:60:a7:70:4c:ef:b5:37:bc:0a:bd:c3:c2:a7:dc:
         07:f5:9d:43:0a:5a:20:93:85:c0:00:10:21:9d:37:a5:05:da:
         d9:ba:60:70:79:c0:ac:4f:ad:c8:4d:3f:30:06:89:0f:b8:b2:
         c4:00:af:4b:3a:d7:70:15:4b:d8:28:1b:41:14:fc:e3:9e:ab:
         8c:fe:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:02 2024 by rpki-client on console-ams.rpki-client.org