Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
File:                     0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa (raw, json)
Hash identifier:          HB9Fivzfyds0uIuiYz8Y01zMhVxX9d9qDiT8/m4MFA8=
Subject key identifier:   04:F7:E5:97:9E:36:5E:FC:C9:AC:75:FA:6C:3A:93:4B:46:97:7E:1A
Certificate issuer:       /CN=7905c321-789d-4866-a23f-9f01c7b24cf4
Certificate serial:       010D0C9F432858474B1B54D0B3F16BFDFA686840
Authority key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     395886
IP address blocks:        23.170.48.0/24 maxlen: 24
                          23.170.49.0/24 maxlen: 24
                          64.112.28.0/24 maxlen: 24
                          104.167.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:54:d0:b3:f1:6b:fd:fa:68:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7905c321-789d-4866-a23f-9f01c7b24cf4
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=da00f78d-1c1f-4bf8-8ac2-017bd66194e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:86:b9:e7:15:81:5b:5f:1b:12:f1:99:d8:
                    55:0f:59:89:f0:8a:92:f2:57:69:eb:10:23:51:27:
                    4d:c7:70:94:c6:25:a4:e3:b8:80:e0:9d:4b:44:9e:
                    81:07:0a:70:b5:a9:d8:4f:a2:f0:b2:39:ea:c8:56:
                    41:14:b3:0c:9c:8a:eb:92:05:2b:18:b2:4f:f7:4c:
                    d8:59:c8:a9:6c:fd:41:d3:74:e2:ec:ba:ab:21:38:
                    c0:0b:ec:8f:37:e0:a6:85:ad:6f:3b:4b:37:9e:be:
                    4a:6e:d1:94:9d:28:7e:c3:18:7a:96:cc:70:da:44:
                    25:cb:c0:ff:cb:09:94:e5:95:d2:81:c4:1f:8c:58:
                    06:dc:89:98:cf:e7:46:11:79:0c:f0:da:1e:bd:20:
                    49:c5:3e:89:dd:84:0f:df:04:ae:e5:fa:3c:91:bf:
                    49:c6:84:05:9b:96:ad:8c:de:15:f2:c3:bc:b4:ca:
                    e0:36:d8:59:d4:bd:3b:92:21:8d:0a:b5:27:6d:44:
                    71:47:46:94:33:8a:eb:50:ab:65:69:3b:a8:5e:bf:
                    8d:5e:77:38:ac:ae:40:94:9e:b5:93:61:fc:ec:47:
                    2c:b3:4f:15:58:b4:9e:19:b2:8e:9c:4a:19:8e:33:
                    b8:d6:25:72:b0:49:5b:78:17:02:48:06:3c:e9:e0:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F7:E5:97:9E:36:5E:FC:C9:AC:75:FA:6C:3A:93:4B:46:97:7E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.48.0/23
                  64.112.28.0/24
                  104.167.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:a2:27:06:2e:60:0d:7d:dc:92:ba:35:20:0e:92:a2:e7:
         a1:e3:9d:94:86:41:f5:d5:68:55:2b:88:ce:5d:17:ad:0d:1c:
         81:4c:c9:57:0a:fb:34:00:0b:8f:75:89:94:f8:7c:d3:de:d9:
         98:0d:48:0f:bc:0f:71:eb:11:a2:69:0e:ea:4d:d4:f7:26:e5:
         22:e6:30:3f:13:09:b3:c6:93:02:5f:4f:b5:57:26:eb:b5:05:
         80:89:30:b8:10:b8:ea:ab:d7:09:28:2a:2a:59:5e:1d:5e:f4:
         d5:6f:c8:fe:3f:9c:5f:dc:30:d3:e2:50:3a:7c:29:53:d6:49:
         b4:6c:ff:88:f4:39:2a:ba:78:37:23:2d:16:68:a0:78:63:c7:
         3c:b7:03:16:d8:18:ad:49:12:22:7e:00:c9:0b:1e:44:f7:64:
         29:65:0b:47:89:3c:af:88:6c:9c:a0:8e:92:3d:c3:81:4c:0d:
         88:fd:a7:bb:c6:cf:a0:31:82:41:68:53:c3:06:36:47:68:ca:
         a2:4c:93:00:57:60:18:aa:e9:d2:b0:4e:b8:2b:fc:81:7a:b0:
         17:b5:5d:3c:ce:4a:a9:75:90:46:fc:c2:76:80:3f:a1:8b:00:
         02:02:51:47:f9:06:ab:8a:cd:0e:f5:e0:81:eb:55:79:7f:9f:
         99:ec:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:22 2024 by rpki-client on console-fra.rpki-client.org