Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa
File:                     2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa (raw, json)
Hash identifier:          hT0vdtcusoyINYOogQXP50OGlXfUuqTXp3r7ur3Q6gU=
Subject key identifier:   2E:5D:7C:52:84:B8:C3:5F:F1:73:7C:5F:B8:BA:59:D0:DD:35:EF:08
Certificate issuer:       /CN=5039f611-54f3-4a44-9153-55949e05704b
Certificate serial:       010D0C9F43285847D139E01A73B5568B51242700
Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa
Signing time:             Sat 09 Nov 2024 02:00:28 +0000
ROA not before:           Sat 09 Nov 2024 02:00:28 +0000
ROA not after:            Fri 07 Feb 2025 02:00:28 +0000
asID:                     11004
IP address blocks:        23.161.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d1:39:e0:1a:73:b5:56:8b:51:24:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b
        Validity
            Not Before: Nov  9 02:00:28 2024 GMT
            Not After : Feb  7 02:00:28 2025 GMT
        Subject: CN=7466f852-03ef-495f-ab90-93c1e9b11fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:96:27:cd:86:24:6d:91:07:d6:f9:01:7d:
                    cd:36:13:d3:07:a9:5a:a7:9b:19:4c:9e:73:68:1a:
                    41:13:91:45:76:b8:47:31:71:e1:ad:dc:c5:6f:23:
                    f3:56:bf:18:63:1d:e3:61:98:b2:52:68:21:d4:62:
                    1d:0d:30:3c:3a:30:91:cc:f1:9a:b4:46:05:9f:b3:
                    a2:2a:dc:aa:21:f3:c2:42:1b:55:bc:ff:f8:3f:af:
                    ce:20:15:4a:52:ef:cc:78:dc:14:5b:ea:25:06:3b:
                    72:38:83:75:12:de:6c:36:45:74:3b:17:83:8d:6d:
                    6a:10:e8:0a:ef:1a:04:b4:73:ed:fa:22:8f:eb:52:
                    cb:98:27:fe:c3:3d:46:33:91:db:65:55:b8:de:a7:
                    84:7a:27:a1:c6:0f:7c:ec:49:82:ba:b7:af:b1:23:
                    3a:95:9b:4d:07:13:41:63:39:db:b6:7d:c7:0e:34:
                    b8:fe:85:68:b4:8b:17:7e:96:dd:0b:a5:83:d2:a4:
                    1a:9e:b2:a9:9c:7b:11:b5:47:de:e3:02:e5:d9:53:
                    20:77:8d:6f:8a:62:d2:5b:44:c4:ad:f9:dd:5f:91:
                    f1:40:20:8d:26:14:09:1b:3e:45:ec:98:7f:46:f9:
                    a2:d8:da:11:d7:ab:f5:2e:6c:f7:ab:84:ff:30:74:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5D:7C:52:84:B8:C3:5F:F1:73:7C:5F:B8:BA:59:D0:DD:35:EF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl

            X509v3 Authority Key Identifier:
                keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9d:26:27:91:2a:c1:45:9e:02:f6:10:f0:5a:6c:66:d0:93:
         00:b7:24:2c:c1:b6:50:ed:13:d8:93:9a:5b:e2:d3:73:e1:41:
         4a:03:35:40:ff:74:32:04:58:19:77:e1:03:51:4d:5c:c4:47:
         a1:c5:fb:f0:b7:38:1f:7b:cf:70:f0:9c:86:d1:68:1c:23:d8:
         e5:69:28:ce:8e:d2:c9:84:f1:e0:32:12:ae:30:12:a1:36:d3:
         f9:df:12:61:c6:62:21:08:de:e6:74:58:20:e2:c3:a6:cc:cd:
         52:86:24:36:de:d1:19:61:df:86:58:61:5b:ac:18:e1:89:fe:
         a4:45:fb:92:27:77:75:ba:0d:11:7e:71:bf:43:bb:7a:80:5c:
         91:e2:3f:e0:1d:c8:d3:12:79:66:2f:a5:62:41:53:9b:1e:f0:
         c4:dd:38:a6:49:ac:90:7d:e3:40:ae:d9:55:a4:a2:dc:90:82:
         9d:10:26:d4:af:3a:1b:91:9b:0f:1a:0f:1f:55:29:5c:76:45:
         12:8c:be:34:30:c1:59:78:4e:81:d8:09:99:b7:55:79:bd:72:
         57:1b:bf:7f:76:8a:cf:b1:1c:95:a0:c9:3b:ae:28:6c:53:36:
         d9:78:31:16:6e:44:8c:70:45:88:c1:64:3b:ee:cd:82:62:d1:
         2e:17:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org