Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ec044255-eff3-3318-b917-533fe44b029d.roa
File:                     ec044255-eff3-3318-b917-533fe44b029d.roa (raw, json)
Hash identifier:          zMuIWLUS7i3rMDJyjKKB0IXbL7liuGKbKVcy4pkxHaM=
Subject key identifier:   39:33:BF:7A:FE:D8:B4:FE:CD:CA:D4:FE:DA:8D:97:02:4F:AB:E9:C8
Certificate issuer:       /CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
Certificate serial:       010D0C9F4328584807AA68C8CF8DD376044BCE00
Authority key identifier: E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ec044255-eff3-3318-b917-533fe44b029d.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        23.187.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:68:c8:cf:8d:d3:76:04:4b:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f26f5a-86c1-4542-9ca9-e43777bd570c
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=89f38731-727e-4afb-9b8d-e74aa0d384e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:51:17:98:76:55:d3:b1:85:96:8f:bc:0f:
                    b5:8a:b9:13:36:1a:07:a0:36:a0:47:4d:86:d5:ca:
                    ef:e9:e6:fe:0b:a0:1c:bd:06:e2:c5:0d:93:79:f0:
                    9f:e4:24:94:46:41:01:de:80:44:4f:96:6a:ec:ea:
                    fb:ba:ce:2b:60:55:92:39:e9:38:03:55:bc:2e:4f:
                    57:ea:3b:00:30:e0:76:5b:61:34:05:0c:40:9d:19:
                    72:75:87:17:a6:cf:9d:33:54:3c:4b:66:01:fe:21:
                    7b:cb:06:cd:8f:43:de:c4:d3:b3:64:1b:a4:64:e2:
                    6c:ed:41:5d:ae:fe:24:63:38:a8:2f:39:e0:66:6d:
                    f3:5f:ba:db:32:22:fa:b1:fb:03:46:65:6c:08:98:
                    86:14:96:91:22:8a:38:bd:8a:13:fc:4f:b8:e1:6b:
                    da:3f:27:67:fe:ab:bf:76:a7:9b:2e:29:13:27:41:
                    62:24:7b:67:d2:71:1b:e5:c3:d7:2d:7a:b6:2f:c4:
                    e4:47:20:65:7d:5b:25:5a:c3:4f:0d:4a:82:53:0f:
                    b3:df:fb:49:d7:08:dd:2e:b1:ad:5b:2f:61:d1:55:
                    2d:1b:67:49:e1:f7:25:e5:cb:cb:a7:e1:31:c9:47:
                    a5:02:ca:4c:b9:a6:1b:96:8c:a9:24:63:2b:9e:36:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:33:BF:7A:FE:D8:B4:FE:CD:CA:D4:FE:DA:8D:97:02:4F:AB:E9:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ec044255-eff3-3318-b917-533fe44b029d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:2a:5d:7e:51:59:a2:bd:40:72:da:df:33:86:50:55:0b:
         9d:d7:47:55:58:08:63:c1:67:38:b7:d5:b7:1e:a6:88:5f:ea:
         ad:72:08:9c:7d:9d:6c:a4:44:6b:22:98:63:74:06:3c:62:f5:
         9f:d4:10:23:d2:74:ee:bf:93:04:44:90:43:2e:10:24:88:f8:
         86:01:15:90:68:1d:c7:73:7f:a0:4b:15:0b:0a:98:46:c9:e5:
         31:d8:d7:8b:52:fa:e5:75:cb:93:23:e9:b4:2c:4b:33:b4:05:
         f7:c7:b2:8c:3d:c9:f9:9e:96:d7:59:e4:6c:e0:7a:2c:3d:3e:
         4a:8b:1c:44:ab:73:18:c8:4a:88:ea:8b:dd:97:a8:e0:5a:3c:
         11:64:c3:97:91:42:82:f0:8b:c6:6b:41:c6:2a:c7:6c:53:9d:
         2e:a2:46:40:c0:a0:8c:12:6b:e3:5a:4f:87:da:e6:d3:a3:77:
         01:92:3f:c6:f9:26:9f:f3:0a:14:19:28:24:6f:d6:95:54:a5:
         eb:3f:fa:ca:a6:b6:5e:6c:ce:dc:0e:ca:86:3e:b5:6e:de:e6:
         1c:5d:f5:88:8e:8d:52:34:6a:be:46:a6:62:2e:c7:a7:11:e3:
         4d:a3:e3:72:63:8c:29:40:09:0f:32:33:10:3e:90:35:60:29:
         4d:cd:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:59 2025 by rpki-client