Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
File:                     0e8a0d07-db89-35b7-89ab-5b71612a7984.roa (raw, json)
Hash identifier:          EyG28KM35bUycH9NocU6qJmQyqPIEzQ9F172cE72z1Q=
Subject key identifier:   2B:1F:37:54:A9:DB:F6:68:1E:3F:E7:54:75:60:5B:90:18:F0:A4:EA
Certificate issuer:       /CN=1d6006cb-f538-4709-8be5-960b57450a76
Certificate serial:       010D0C9F43285847CA5DC37D82E9049D613797E8
Authority key identifier: 5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
Signing time:             Wed 06 Nov 2024 15:02:09 +0000
ROA not before:           Wed 06 Nov 2024 15:02:09 +0000
ROA not after:            Tue 04 Feb 2025 15:02:09 +0000
asID:                     396422
IP address blocks:        23.151.88.0/24 maxlen: 24
                          2607:3dc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:5d:c3:7d:82:e9:04:9d:61:37:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6006cb-f538-4709-8be5-960b57450a76
        Validity
            Not Before: Nov  6 15:02:09 2024 GMT
            Not After : Feb  4 15:02:09 2025 GMT
        Subject: CN=93d91c35-1671-44d1-9bd2-263b0bdb3428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:2f:0d:75:2c:e9:bf:17:25:ed:b2:5a:da:
                    d1:ac:1c:b8:89:77:08:66:7b:7d:fd:fa:ad:d8:b7:
                    2f:ef:bd:4d:49:0e:83:e3:9b:0f:64:e2:76:29:62:
                    cb:b8:b9:33:79:74:12:17:73:06:6d:27:56:4b:ee:
                    42:53:1f:57:ed:e2:a7:ba:a0:ed:4c:a3:3d:fd:28:
                    38:a0:02:33:d5:a5:49:cd:a6:a9:78:9d:c4:bd:28:
                    41:98:6d:61:5a:05:e9:e7:80:c5:40:88:71:f4:b7:
                    5e:b5:f0:7f:15:29:75:47:4e:9e:bd:bc:71:63:3e:
                    4a:57:a1:f7:a8:59:30:27:3c:52:b3:0e:61:3f:20:
                    8e:f0:3b:f7:f7:c1:52:8b:2b:2c:6c:a4:dd:86:23:
                    c4:15:51:04:f9:cf:3a:b6:a4:e1:8e:60:dd:ea:31:
                    d3:ab:80:fd:40:11:46:d5:60:8b:c5:e0:34:61:48:
                    f6:39:01:15:21:3a:c1:77:03:b8:8f:ef:46:89:e2:
                    71:cd:8f:cb:23:6b:a9:5d:a4:38:fc:54:1c:d7:9b:
                    c4:fb:62:88:5a:5a:fc:6d:be:00:c9:59:8a:82:05:
                    b4:e6:56:ad:65:ff:90:69:f1:4a:22:00:ad:09:e7:
                    66:af:6c:7e:9a:11:be:1f:ff:4e:bb:66:2a:ae:f3:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:37:54:A9:DB:F6:68:1E:3F:E7:54:75:60:5B:90:18:F0:A4:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl

            X509v3 Authority Key Identifier:
                keyid:5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.88.0/24
                IPv6:
                  2607:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:3a:3b:d4:56:9b:35:e2:a2:63:ef:89:b9:2a:a2:01:c3:
         a3:34:13:3a:9a:76:df:2b:2c:d3:f7:a9:40:e1:85:f9:19:94:
         c9:bf:55:27:9b:95:2a:15:ce:d5:be:88:07:47:56:ca:dc:1e:
         61:e1:b9:f3:08:b3:01:95:46:84:41:cb:ad:f6:f3:6b:8b:5c:
         d4:9c:2e:c3:2a:b4:eb:5d:1c:b3:7b:7f:b8:70:4b:6b:6a:59:
         f2:09:65:ac:b2:12:de:56:94:65:e4:87:51:7a:a3:fe:4c:2c:
         5b:2f:7a:0a:7b:d4:b4:0b:d9:d7:20:75:91:11:5c:4a:21:81:
         dc:c5:7f:c2:2b:01:7d:ed:35:a6:3c:6b:61:c3:12:f7:8b:42:
         a8:23:d5:e6:e1:9e:db:58:f8:3a:6a:fd:9a:e4:29:d9:28:6c:
         cc:56:59:89:2f:57:bb:21:d7:5a:42:3d:a2:8e:47:85:b6:9c:
         bf:57:e5:bd:cf:77:51:36:7d:41:42:15:98:56:33:b5:03:e2:
         63:8f:a5:d9:79:47:bb:e5:05:9b:3d:9a:49:4a:71:5a:1d:4b:
         d9:0e:44:94:51:11:2d:b8:fe:6d:c5:d0:72:0e:b4:b3:73:64:
         c5:37:8b:3d:9d:ef:c3:18:19:42:c2:83:fe:43:30:0e:ff:cd:
         6b:1b:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:18 2024 by rpki-client on console-ams.rpki-client.org