Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/ff061e09-d341-38c4-8f9a-595215185617.roa
File:                     ff061e09-d341-38c4-8f9a-595215185617.roa (raw, json)
Hash identifier:          w9AOJJz13/8LZKz9EBcsUfKsUwjJ7DGPysjm9GfXXe8=
Subject key identifier:   AC:08:39:FA:EF:B1:13:47:03:7A:69:E8:E7:60:16:84:D5:D5:7E:44
Certificate issuer:       /CN=2826e068-eb57-4472-b533-533d04280096
Certificate serial:       010D0C9F43285847EE8A3012577C1222C934CB00
Authority key identifier: 39:CD:44:1C:9F:0F:B5:CD:12:FF:00:FC:EA:00:1B:BD:E9:12:C0:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/ff061e09-d341-38c4-8f9a-595215185617.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     20367
IP address blocks:        23.158.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/2826e068-eb57-4472-b533-533d04280096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/2826e068-eb57-4472-b533-533d04280096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:30:12:57:7c:12:22:c9:34:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2826e068-eb57-4472-b533-533d04280096
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=0f0b0b2e-9269-4334-bfd3-c0b63c428092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:10:a3:2f:d2:61:87:e1:26:fa:7b:49:97:
                    a2:0d:52:7e:44:35:33:d3:ee:6e:9d:34:d5:78:2c:
                    90:bc:56:eb:27:b0:72:c3:ec:78:ab:ba:2c:a3:03:
                    50:04:c8:a9:90:59:c1:8e:8d:15:35:20:45:83:17:
                    4e:2e:b6:dd:84:e7:b6:a5:ed:86:0d:0b:d8:c3:4b:
                    ee:3d:93:e2:0a:26:69:e7:fb:92:f4:76:8f:e2:4a:
                    97:5d:b9:af:0c:2c:77:a1:03:c0:91:0e:16:21:32:
                    76:dd:77:83:0c:e4:39:b4:bc:b3:c9:6d:b2:f1:78:
                    49:71:94:d5:32:8f:22:35:e8:5e:01:7c:a6:fe:23:
                    20:1a:61:ff:1a:87:04:2c:84:f3:c8:e3:00:f9:3c:
                    d5:be:ca:e8:de:70:98:4f:20:a6:2c:f5:85:cf:7f:
                    1c:67:59:76:1f:7d:62:74:a3:c4:4b:6c:67:06:ca:
                    98:da:07:1d:c7:ee:aa:56:1a:70:ea:42:8b:9d:83:
                    3c:30:5f:fb:ab:cd:81:ae:ce:e5:ac:9e:5f:d9:82:
                    8b:d0:43:70:4f:69:62:a9:6b:1f:31:46:9a:d6:65:
                    2f:25:b2:a2:7b:a8:91:7c:35:32:20:16:17:c4:e6:
                    0f:61:fc:d9:14:b5:a1:74:cc:de:4d:b4:7c:be:ab:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:39:FA:EF:B1:13:47:03:7A:69:E8:E7:60:16:84:D5:D5:7E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/ff061e09-d341-38c4-8f9a-595215185617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096/2826e068-eb57-4472-b533-533d04280096.crl

            X509v3 Authority Key Identifier:
                keyid:39:CD:44:1C:9F:0F:B5:CD:12:FF:00:FC:EA:00:1B:BD:E9:12:C0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2826e068-eb57-4472-b533-533d04280096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:91:c6:fc:d8:be:4d:0f:d5:d9:e0:56:67:2d:43:47:f8:a2:
         c5:e6:e8:85:93:32:9b:2a:ff:dc:f5:9e:93:29:fc:26:cf:39:
         e3:76:25:d5:5e:f5:07:51:d8:b1:c4:d2:d1:6a:99:55:83:85:
         bf:9a:e5:db:c4:fd:2e:86:0f:0a:ce:71:5a:2d:72:c3:a0:41:
         2c:03:e2:28:50:5b:81:44:fa:7a:85:e6:e4:fd:70:41:4f:db:
         8d:ab:ec:87:27:15:0c:be:fc:c2:98:60:e0:5e:aa:92:d7:88:
         30:0f:59:c5:dc:16:7a:44:08:ab:18:c5:3b:a3:b5:2e:35:25:
         d0:10:d8:a1:38:c0:ba:31:ee:d2:1a:cc:36:10:3d:fd:aa:44:
         da:c9:7d:c7:4b:e3:78:52:1d:21:87:54:8d:a7:73:71:a6:6e:
         ae:9a:d3:ec:0c:79:c0:0c:34:a6:c2:60:dc:90:eb:96:6f:8e:
         d0:07:95:53:38:69:33:81:11:d6:38:61:64:49:32:d6:29:17:
         d4:81:a9:24:76:15:fb:6e:43:75:9d:18:eb:3a:f0:25:d2:38:
         b7:a7:eb:07:0f:72:68:39:09:ad:85:82:ee:2f:96:81:3d:b1:
         44:3a:3a:77:25:eb:b9:06:0b:ae:66:96:27:05:77:44:7a:24:
         1d:3a:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:38 2024 by rpki-client on console-fra.rpki-client.org