Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
File:                     b7201278-097e-3b32-a4e1-96b53fb35fb0.roa (raw, json)
Hash identifier:          17uWJhHvY0MVdaTOGFnL7n5voojpgvSeQKt08qwyHQQ=
Subject key identifier:   72:E9:9A:3F:9E:33:61:34:B2:06:03:2D:09:1D:77:20:6A:BC:FE:07
Certificate issuer:       /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Certificate serial:       010D0C9F43285847EE8A25A9E2494D9E119DCDB0
Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     36222
IP address blocks:        23.138.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:25:a9:e2:49:4d:9e:11:9d:cd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=d33df1ed-e4fd-4325-a491-631a1d31f134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:cb:71:08:6f:e8:f3:f2:ba:84:d2:a4:6a:
                    31:5d:ef:33:44:a8:79:8f:d7:e2:66:a6:42:c3:60:
                    8e:57:e7:ce:e0:03:d7:c1:d6:36:f3:43:b2:a4:a7:
                    99:cb:a8:fb:05:7f:94:63:a3:e2:17:c0:b6:c8:69:
                    f4:22:79:a8:28:6f:2e:8a:74:b5:40:0c:f0:55:05:
                    34:49:a0:ec:b5:76:4c:01:e5:78:c0:3e:8b:4d:2d:
                    05:de:7f:9a:23:de:a6:76:c5:70:a3:86:c4:fd:9c:
                    ca:45:16:38:12:d8:b2:42:42:c7:f2:4c:06:e0:05:
                    b6:4e:7f:0a:12:0b:c9:f4:47:f9:69:1a:b6:9f:8c:
                    e3:20:25:15:6b:9a:ca:2f:e3:98:cb:c8:cc:5b:af:
                    45:10:ac:18:a7:33:a2:08:86:0d:89:26:1d:b8:45:
                    d4:5a:4b:7d:ea:ca:01:59:59:ce:e7:dd:6b:b7:02:
                    f3:4b:43:eb:91:f8:f6:9c:1b:fe:14:7c:36:b3:4e:
                    a7:b2:53:9e:e2:17:bb:e6:37:fa:54:62:72:bc:d9:
                    ca:c1:16:0d:f6:00:c7:e4:62:ac:5a:6e:c7:11:f0:
                    8c:83:c8:df:9d:a0:ce:18:71:95:5e:71:59:a7:6d:
                    45:ab:21:31:c1:c5:80:46:3f:36:51:07:44:9a:00:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E9:9A:3F:9E:33:61:34:B2:06:03:2D:09:1D:77:20:6A:BC:FE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:66:64:c6:00:92:ec:62:06:b4:2a:41:b3:db:7d:fc:51:e8:
         0f:1a:49:ab:c4:a0:17:25:e1:d1:0c:5d:d2:2c:23:7f:ee:47:
         3e:8a:5d:0d:fd:8f:af:d9:7a:4d:51:33:59:f9:f1:ed:b2:e2:
         6a:51:db:77:7b:ee:57:61:9a:85:dc:8b:ca:44:e7:10:69:7e:
         ee:1e:e9:5d:7a:8c:93:5e:e4:62:3e:84:f6:17:e2:86:db:c4:
         a2:85:f2:c8:80:58:2b:7b:56:3a:00:01:03:fe:99:a8:a5:28:
         6b:e1:51:7b:8a:ad:f2:e2:77:f0:d5:b1:3f:fc:87:ac:21:c6:
         4c:e0:7d:fd:07:03:62:66:6f:ae:6e:f0:6d:31:d7:ce:33:af:
         c3:d3:c4:a4:58:ef:87:84:c2:d6:d8:f3:98:08:d0:89:8a:86:
         85:7c:97:cb:8f:1f:2d:db:83:13:34:60:98:c4:fe:87:d8:6f:
         ee:c3:4b:7f:6c:be:6e:ca:69:fc:43:55:e6:4a:db:39:d5:65:
         e7:5b:72:54:c0:49:ea:06:9d:c5:3b:82:67:9a:a5:ff:2a:f9:
         50:d6:38:a2:ef:c4:c4:a3:e3:e2:56:f9:98:08:9c:3f:ab:b5:
         60:e2:34:2b:75:ba:34:31:33:31:4f:16:24:26:a3:29:79:cf:
         5a:66:60:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:11:23 2024 by rpki-client on console-ams.rpki-client.org