Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/7760cdcc-f2fa-35a4-8043-b43fd903c644.roa
File:                     7760cdcc-f2fa-35a4-8043-b43fd903c644.roa (raw, json)
Hash identifier:          U1eXrmbRrjIM2o8j6PNn/O6z8aARKTrm9pXKLzuCe3Q=
Subject key identifier:   E8:10:C7:5B:03:AC:C3:C6:77:81:3B:26:C9:D1:70:FA:D3:5F:F9:AC
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F432858477396626A22816C273E20C280
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/7760cdcc-f2fa-35a4-8043-b43fd903c644.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     10779
IP address blocks:        23.161.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:62:6a:22:81:6c:27:3e:20:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=b3dff4de-5ede-4991-8d79-e30ea3f3afa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:14:bd:4c:9f:ce:3b:03:d5:87:65:fe:b2:
                    b2:d4:52:8b:cf:c4:80:c1:34:d3:d4:92:69:04:b5:
                    21:f5:f0:68:d1:4b:83:88:d0:61:80:c4:c0:ed:c9:
                    b3:f9:f2:0b:8d:8f:74:e9:c2:84:58:54:84:cd:2b:
                    b3:a2:3d:4d:a5:87:32:90:af:f0:09:01:ed:10:21:
                    aa:b6:51:0d:db:c7:f5:f4:a6:32:44:4a:1a:58:30:
                    6e:e0:ab:bb:42:ab:75:14:d7:0e:5c:84:51:66:e5:
                    5f:19:89:4b:47:41:0c:09:1f:c5:73:14:76:b9:42:
                    b3:d6:7a:5c:8f:ce:9f:b5:54:01:60:4f:0d:18:90:
                    56:c8:3d:03:6f:87:ca:ca:a8:aa:b5:9b:f5:e4:51:
                    3e:95:90:97:b8:d7:a6:82:c2:1e:68:28:66:a5:12:
                    52:40:9a:f6:27:16:90:a1:ab:0f:30:34:20:4c:d2:
                    a4:51:9f:73:07:8b:17:ea:ba:5e:a2:9c:a4:58:62:
                    21:d0:72:8b:22:b6:d2:db:eb:1e:8a:97:d7:1b:f5:
                    72:95:75:54:bc:61:44:8e:2b:32:85:74:55:a2:87:
                    b5:f8:68:0b:62:a2:d1:86:83:42:1a:48:01:7a:05:
                    d0:2f:f6:b3:fb:92:1a:54:dd:a2:c8:49:81:92:9d:
                    99:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:10:C7:5B:03:AC:C3:C6:77:81:3B:26:C9:D1:70:FA:D3:5F:F9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/7760cdcc-f2fa-35a4-8043-b43fd903c644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:39:dc:8b:64:02:c4:03:7d:18:c5:50:e7:8c:2d:63:38:
         e9:d8:c0:f2:d5:f6:0c:f9:bb:f8:23:4f:aa:af:50:50:c8:83:
         98:5a:17:dc:58:70:ed:9b:53:60:11:b5:15:e0:4b:ad:fc:43:
         76:ab:66:6c:0c:6b:da:f8:df:6e:2d:d8:a4:62:6e:01:77:9e:
         67:93:6d:ae:a8:52:7f:ab:55:50:b7:c6:b4:2d:c6:c8:7d:81:
         d9:9d:ff:cf:6f:46:4e:04:0f:40:19:ac:86:25:8e:a9:50:ea:
         96:01:3e:31:49:2e:72:70:40:07:b5:12:5d:89:4a:ef:d1:ef:
         db:8d:76:33:b2:51:bf:87:fe:82:87:ac:ef:1d:19:1c:ad:71:
         44:8b:1a:da:4f:68:c0:cf:82:1a:a3:68:e5:f6:35:12:db:80:
         59:fc:79:8c:d3:70:6c:44:c1:8f:57:98:09:58:1f:6b:81:bb:
         d7:92:3e:9f:2b:6f:a5:6a:63:6a:76:14:85:d8:65:75:8a:52:
         23:5c:cb:25:28:e9:70:6f:93:e2:99:87:d0:7c:a6:66:1c:07:
         8c:6a:50:ae:a1:06:a9:05:8d:dc:88:5f:b3:7a:e9:73:36:de:
         a5:82:fb:46:c6:8a:fe:f1:e7:6f:91:be:a9:eb:5b:97:51:1a:
         a6:26:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:27 2024 by rpki-client on console-fra.rpki-client.org