Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa
File:                     69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa (raw, json)
Hash identifier:          /gvYYdUZcUTsBaTtGPEzmAyiCOM1FIb2MAqNYEumAbc=
Subject key identifier:   06:20:1B:21:E5:65:8E:B7:AD:73:BB:08:99:87:27:E5:70:67:DB:A0
Certificate issuer:       /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
Certificate serial:       010D0C9F43285847B4820B6E234FC2D18BEA7580
Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa
Signing time:             Tue 29 Oct 2024 19:07:29 +0000
ROA not before:           Tue 29 Oct 2024 19:07:29 +0000
ROA not after:            Mon 27 Jan 2025 20:07:29 +0000
asID:                     395261
IP address blocks:        23.155.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b4:82:0b:6e:23:4f:c2:d1:8b:ea:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
        Validity
            Not Before: Oct 29 19:07:29 2024 GMT
            Not After : Jan 27 20:07:29 2025 GMT
        Subject: CN=5cd3d74b-4346-4284-ba88-9a74a070e2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:81:ea:34:48:7c:3a:2d:f7:d0:e8:5c:13:
                    80:39:1c:3b:e6:98:1c:d6:fc:e1:76:37:be:be:83:
                    16:24:5c:95:f1:48:78:74:d9:d1:87:42:64:af:5c:
                    81:b2:42:4d:d3:76:f5:76:39:ab:ce:f8:5f:f9:47:
                    e7:e9:ab:ec:06:d9:ce:09:88:48:24:41:a2:ff:db:
                    9c:03:6f:53:f1:03:46:ab:e1:1a:39:c2:55:6c:c9:
                    63:8d:5d:10:36:88:21:46:cf:38:10:0a:3d:2b:c2:
                    eb:35:50:e7:72:b2:4d:66:88:1b:59:74:08:35:73:
                    5e:63:47:df:be:aa:bb:15:a4:d0:b2:58:2e:24:e7:
                    73:f3:fc:64:7b:85:19:19:b9:da:27:79:0f:f3:cf:
                    95:1a:40:cb:44:c7:74:8a:46:fc:43:ed:c9:0f:f9:
                    da:c2:88:b0:d3:95:33:ec:59:8f:b4:3e:94:18:ed:
                    bd:7f:a6:72:e4:da:ff:cd:e0:d2:97:95:7d:cc:4f:
                    8e:22:7e:af:63:db:2a:cc:5d:ab:70:e8:88:c9:92:
                    72:f1:9e:b9:ae:e8:6f:7a:0e:af:f2:02:dd:73:30:
                    16:63:21:e3:e1:11:94:19:d1:e4:b0:0b:bc:b3:8f:
                    4b:68:13:3b:31:e5:7e:b0:83:ee:7c:3e:3d:a7:7b:
                    84:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:20:1B:21:E5:65:8E:B7:AD:73:BB:08:99:87:27:E5:70:67:DB:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:61:52:e6:60:16:46:13:30:a2:2d:25:82:d8:f9:0f:99:02:
         c5:8c:7c:43:f5:4d:e8:e2:8a:2a:53:7f:79:c0:b4:97:e9:bc:
         5f:c5:90:19:3e:53:bf:3a:09:bf:63:ea:4d:a2:ce:15:6b:90:
         a3:5b:cb:94:54:77:bb:49:76:d4:1c:32:b0:fc:02:2b:8e:34:
         02:ca:da:02:5a:ac:94:f1:01:72:7f:f2:4a:8c:d6:f8:95:3b:
         4e:e4:96:04:b7:3f:58:cb:77:78:d8:0e:e7:0b:ff:30:3c:d1:
         8b:0a:77:c6:12:06:67:b5:83:93:b1:76:47:a0:1d:64:3b:d2:
         ad:b6:78:b3:73:28:ee:be:3a:9b:a1:b6:66:92:ca:81:83:41:
         17:c1:20:cf:43:b5:3e:a7:91:85:02:7d:1d:82:dd:9c:4e:1f:
         67:08:75:dd:f2:46:0b:bc:3e:ce:8b:7c:69:6c:ac:41:c8:c6:
         01:74:d3:eb:e8:ec:f9:7f:f3:78:2a:0c:33:33:ec:21:cb:5a:
         98:3b:75:01:18:ff:c6:b4:0c:b2:32:bd:49:6c:a4:9e:1a:18:
         8c:f4:96:1c:65:b0:c0:ed:ab:33:e6:40:b4:22:66:40:f4:4a:
         c0:a9:98:39:41:90:f9:d0:f5:be:cc:3d:80:35:7c:d2:58:9c:
         a2:f0:aa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:27:08 2024 by rpki-client on console-fra.rpki-client.org