Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa
File:                     fb010d6b-7d25-3356-9204-7877f12fc870.roa (raw, json)
Hash identifier:          WdhO1y2Gg4DtcGKZo6XZSq5I494XNpu0fd8U/2Cck0g=
Subject key identifier:   EF:52:78:0D:BE:DC:BC:F0:11:E7:56:66:1F:99:16:C6:48:88:A3:60
Certificate issuer:       /CN=2e0f6e77-78a4-4730-aa9b-3b5e019fed27
Certificate serial:       010D0C9F432858477661067F1DCBCAF5C9F32280
Authority key identifier: 43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     893
IP address blocks:        23.137.88.0/24 maxlen: 24
                          2602:fb61::/40 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:06:7f:1d:cb:ca:f5:c9:f3:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0f6e77-78a4-4730-aa9b-3b5e019fed27
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=badf8cf4-6b9d-4bb0-bc29-48d1097db544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:59:70:b2:20:c6:8f:29:91:82:2a:1d:23:
                    a2:f6:e5:3a:71:ad:4d:75:8e:31:94:16:69:97:80:
                    c9:ba:c2:42:13:44:a4:7f:91:13:dd:cf:d4:54:0c:
                    7f:c7:31:09:e7:c2:37:c7:0b:a9:a3:eb:3b:85:e9:
                    87:d5:83:e5:7e:97:20:2e:57:50:a3:c4:b6:82:39:
                    0e:8b:71:e6:9c:84:49:6e:c2:12:47:07:43:ef:38:
                    ad:d9:29:47:db:14:4b:b2:b7:e6:b8:b4:92:47:78:
                    d6:47:26:31:e1:dc:a8:80:d9:e2:4f:04:7c:c9:cd:
                    c6:37:24:6a:40:e8:6c:89:0d:b4:21:93:e0:74:69:
                    64:e8:c9:e5:1f:e0:d3:29:74:c1:f6:02:a1:b9:dc:
                    5b:3a:70:3f:6a:03:fb:bc:d8:10:e9:5b:08:5c:ef:
                    25:d7:3e:8b:f6:25:c0:83:aa:fd:d7:f6:c6:9d:70:
                    d4:ae:a9:87:90:2f:87:15:66:2a:de:1f:62:7f:a5:
                    fb:41:a2:00:70:07:59:14:76:8f:08:9b:be:87:9b:
                    70:ac:33:2e:82:45:c9:1d:92:b2:1d:e0:a4:84:98:
                    99:f8:11:4d:7f:95:40:ca:ef:39:e8:a8:77:77:29:
                    0a:ef:9b:ec:0a:cb:57:44:38:62:db:05:9d:06:19:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:52:78:0D:BE:DC:BC:F0:11:E7:56:66:1F:99:16:C6:48:88:A3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.crl

            X509v3 Authority Key Identifier:
                keyid:43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.88.0/24
                IPv6:
                  2602:fb61::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a6:f6:62:7b:fe:51:09:58:3a:64:90:2b:35:d8:1e:18:41:
         8b:eb:b6:48:c7:26:c9:34:d1:97:bb:cd:26:68:33:a3:01:6f:
         ab:6c:da:b4:bb:63:4f:51:2e:70:4b:5b:0f:6f:57:3e:ff:33:
         cb:c2:14:58:ac:1d:75:a5:9e:13:77:d4:8c:2e:a0:40:f3:1a:
         7e:f5:9b:ea:bd:da:a5:8a:f5:58:74:29:a7:18:34:04:3e:b5:
         51:01:aa:0d:00:ff:82:40:c7:3c:02:c8:bd:fb:6d:25:2d:ed:
         63:4d:d2:28:fb:45:6e:27:bf:ce:bf:74:f7:65:34:c9:5a:48:
         3d:d0:36:c5:df:93:80:fb:a1:a3:e9:14:6a:d5:f1:dc:37:bd:
         85:3f:bb:7a:c2:ad:bb:ee:30:c2:71:14:d3:44:ee:99:90:a9:
         d9:b9:cb:bd:d7:98:db:0e:87:24:78:e3:24:59:09:4b:c2:15:
         de:73:2a:32:34:e3:d9:9d:65:19:9d:b9:59:79:ec:94:c8:1c:
         64:ec:6f:40:20:bd:12:04:44:3f:8b:a9:53:86:c4:95:20:a1:
         a9:5b:c6:30:e3:82:fd:00:4a:54:78:75:20:eb:bf:f2:6a:7a:
         9f:e7:d7:a2:fe:9c:22:96:5e:d5:94:62:08:35:38:7d:cb:ad:
         7f:43:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:39 2024 by rpki-client on console-fra.rpki-client.org