Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa
File:                     90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa (raw, json)
Hash identifier:          8CDXIhHptByPw5YXqaYOJ+UW5RZuUufVWFIBQ3pjj6Y=
Subject key identifier:   2D:C2:7D:51:5B:27:99:05:2A:0D:1F:EA:F4:ED:6B:91:61:61:1B:00
Certificate issuer:       /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
Certificate serial:       010D0C9F43285847987A276A15DA1D908FF55980
Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa
Signing time:             Sat 19 Oct 2024 18:08:57 +0000
ROA not before:           Sat 19 Oct 2024 18:08:57 +0000
ROA not after:            Fri 17 Jan 2025 19:08:57 +0000
asID:                     401233
IP address blocks:        23.140.152.0/24 maxlen: 24
                          130.51.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:98:7a:27:6a:15:da:1d:90:8f:f5:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
        Validity
            Not Before: Oct 19 18:08:57 2024 GMT
            Not After : Jan 17 19:08:57 2025 GMT
        Subject: CN=3c62faf0-86e0-49a5-94cd-7f86c6a42c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:da:53:46:fb:59:96:28:14:a9:e0:59:1b:
                    71:f0:00:66:df:18:7a:0e:fc:02:29:df:2f:22:5a:
                    d5:59:57:01:e0:7d:e1:6c:2f:7d:ea:4e:ad:1d:bc:
                    77:eb:16:3f:91:c9:e4:b2:b4:68:e6:7a:5b:45:48:
                    96:62:16:c2:bb:1b:cd:41:f7:73:95:c6:5f:43:49:
                    58:99:5e:95:d1:a3:95:36:d7:12:b3:17:4d:98:94:
                    bd:ea:cc:cc:5a:fd:ad:59:4e:65:7d:97:6a:30:a4:
                    ac:cf:6d:11:2f:70:1e:ff:0f:97:2b:a5:e9:9c:a0:
                    1e:e9:65:34:fb:dd:83:df:91:db:3b:1b:ab:4b:3a:
                    57:35:41:9b:12:18:a9:71:f3:16:e5:1f:72:80:db:
                    c7:be:a5:38:48:ea:66:5b:9f:c9:ec:b7:4f:4d:7c:
                    21:90:a8:1c:d5:56:ee:8c:e8:0c:fc:6b:c8:f8:e2:
                    00:b3:cd:1d:c3:33:e6:9a:cb:61:33:7a:96:4c:67:
                    93:45:8b:4e:df:2b:85:bb:49:49:7a:df:ea:b0:88:
                    72:3e:2b:15:dd:17:67:7f:ad:52:a9:55:6c:28:9c:
                    46:c1:df:0d:ed:d9:1a:09:53:5b:5b:27:31:b3:4b:
                    ea:e4:88:98:d5:a3:ab:78:9f:94:ad:c1:0b:9a:b8:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C2:7D:51:5B:27:99:05:2A:0D:1F:EA:F4:ED:6B:91:61:61:1B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/90c90ff0-7e6b-357b-ab5b-2ab54e15c4f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl

            X509v3 Authority Key Identifier:
                keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.152.0/24
                  130.51.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0f:44:cb:d1:87:60:0a:bd:f0:f9:f4:69:b1:fd:61:e3:25:
         aa:bc:e9:f8:32:3c:fd:18:e0:2d:8a:84:1b:e2:2b:cf:67:03:
         60:66:06:66:98:48:1a:fe:b8:05:4d:96:f9:7e:ff:66:dc:bc:
         8e:6b:f8:35:ca:28:db:74:f0:ae:bb:12:cc:4f:09:f7:b2:40:
         a4:0c:e9:5f:8a:cd:18:78:5f:f4:f7:b1:5c:67:1b:ba:b8:b2:
         78:c4:4a:50:e0:c5:f7:42:cb:e9:f8:af:3e:37:10:38:24:3b:
         0a:41:c7:7a:c3:7a:e2:f1:ff:a3:b3:b6:3c:4a:11:88:57:83:
         87:a2:ec:77:f1:a5:dd:d7:07:76:0d:fc:40:ec:1c:4b:f2:c8:
         d3:43:a8:4f:72:26:7a:c2:cc:32:ad:39:2e:cb:ca:c8:26:9e:
         ab:c9:a9:75:c4:e9:2b:e0:9d:71:a9:71:e4:1b:1b:3b:c3:8d:
         e7:d3:64:f9:f0:0e:31:8d:14:fc:fd:1b:76:07:b4:96:4f:40:
         e9:cc:5a:11:7e:2b:5b:b7:0e:cc:78:10:4e:39:29:56:6c:5e:
         fe:e2:d7:17:b7:4a:7a:5c:dc:7a:46:89:37:4e:fe:28:dc:0b:
         e9:83:e4:cd:2c:df:df:71:c3:78:63:52:70:fd:a4:87:34:3f:
         30:de:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:15 2024 by rpki-client on console-fra.rpki-client.org