Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf/49c4f2b3-603b-3bd9-bc50-a261b5731360.roa
File:                     49c4f2b3-603b-3bd9-bc50-a261b5731360.roa (raw, json)
Hash identifier:          bBZD4zkaocdRPOUi2T/w0eUS/6Zwnf09E/3lpypmTPs=
Subject key identifier:   FB:6E:63:75:09:69:F2:A7:F3:92:B3:94:A0:26:30:37:AB:E5:19:DB
Certificate issuer:       /CN=ecb10f8b-b013-4d47-8d2a-b1642a9c09bf
Certificate serial:       010D0C9F43285847E78F65FC3879C89F452E9B80
Authority key identifier: 39:DA:F2:3F:85:82:C9:DB:F9:BB:D7:29:DE:56:F5:1E:56:A8:2B:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf/49c4f2b3-603b-3bd9-bc50-a261b5731360.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     63023
IP address blocks:        23.158.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:65:fc:38:79:c8:9f:45:2e:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb10f8b-b013-4d47-8d2a-b1642a9c09bf
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=863d375f-a939-45e0-9dbc-e66de83cc807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:39:cb:30:82:be:86:58:3a:1f:48:1e:26:
                    02:4f:bd:ca:68:b2:3f:5e:d8:82:36:0a:18:3f:79:
                    fb:e3:c8:82:ff:9e:21:de:d6:d4:36:8c:29:ea:ef:
                    ca:b9:fd:f0:46:54:ae:5e:e1:9d:3c:a8:2f:95:6f:
                    48:79:51:e3:bd:f8:fd:49:f6:bb:86:2f:d7:93:57:
                    fb:79:6a:99:86:e0:14:f6:f0:e0:8b:3f:04:04:95:
                    93:01:cc:db:7b:b4:57:39:8b:1b:22:83:57:0a:5b:
                    1d:2a:af:fc:71:92:26:f6:e8:52:03:08:c6:2e:d2:
                    ba:41:e6:bd:fc:20:54:89:b7:5b:b8:de:cf:4e:ba:
                    51:ae:09:f4:0c:76:d0:70:bc:93:82:18:bc:27:80:
                    a1:63:e1:2b:d6:44:15:5e:f9:2c:22:9a:5e:c3:98:
                    39:42:65:71:24:4a:b2:3d:d8:cd:e9:86:15:4b:68:
                    b7:03:18:13:c5:ed:a9:79:64:43:51:5d:d9:8e:d9:
                    7a:cb:5a:cb:72:f3:49:47:10:bd:13:93:fc:26:50:
                    0a:bd:7c:b1:f4:6c:db:6a:c3:de:27:7d:b1:24:e0:
                    26:80:e2:62:71:9d:6e:1c:4a:1d:1d:18:78:31:56:
                    c1:c5:eb:b3:a6:bd:93:a0:c9:b3:28:85:2c:cd:e0:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6E:63:75:09:69:F2:A7:F3:92:B3:94:A0:26:30:37:AB:E5:19:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf/49c4f2b3-603b-3bd9-bc50-a261b5731360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf.crl

            X509v3 Authority Key Identifier:
                keyid:39:DA:F2:3F:85:82:C9:DB:F9:BB:D7:29:DE:56:F5:1E:56:A8:2B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ecb10f8b-b013-4d47-8d2a-b1642a9c09bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ab:5e:86:7b:72:06:a0:db:73:a9:af:42:3b:59:1b:5d:3f:
         93:37:50:fa:5b:0e:06:cb:d4:ee:01:c4:49:00:03:32:fa:1c:
         b3:14:c3:cd:69:01:ed:07:eb:9b:92:c7:79:31:b1:20:a9:27:
         94:b1:c6:ea:ba:b8:b1:b6:2c:01:56:b2:69:2a:d9:42:20:85:
         2a:b3:10:47:26:21:2e:d9:89:63:db:46:a9:e7:70:22:bc:05:
         78:d6:b1:b0:e8:72:74:d1:83:00:85:45:2c:0b:52:d1:45:af:
         ad:5b:5f:61:d1:57:90:71:e5:85:72:a8:9a:9a:b0:8b:7f:9d:
         d3:55:d9:bc:00:fb:63:19:69:06:f2:de:4e:69:6d:c4:f0:1b:
         40:8a:2d:8e:25:d7:68:6b:fd:1e:50:2f:f0:a5:c6:34:da:f2:
         5e:fe:96:b3:3f:e6:4d:cf:34:53:d4:2e:cb:39:4d:91:1f:87:
         8f:93:7d:01:d5:9d:1e:d2:9c:6c:8d:4e:4b:7f:2a:73:1b:24:
         a6:29:6d:0b:41:6f:a5:f2:2f:9f:68:a6:0f:82:b3:02:37:3b:
         90:ff:d7:28:e9:34:b6:71:05:2e:a8:fa:93:59:9a:b3:d2:c9:
         35:b0:1f:1d:7f:05:7f:32:c8:c1:e9:a8:eb:b9:8c:a6:00:20:
         3e:d3:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 17:33:03 2024 by rpki-client on console-fra.rpki-client.org