Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/d581413d-7c5e-3ce0-b58b-8c1f4cc766ee.roa
File:                     d581413d-7c5e-3ce0-b58b-8c1f4cc766ee.roa (raw, json)
Hash identifier:          rpbdC6NUHUSmNs3R/7z+bJDF19xYhRzZlOzthRU2uf8=
Subject key identifier:   DB:E3:DC:D7:11:09:A8:E8:B2:94:7B:F9:C6:4C:34:B8:0C:1B:C0:A2
Certificate issuer:       /CN=6056a542-dd4d-44c1-82dd-402b8d57ec5a
Certificate serial:       010D0C9F43285847282D3190DAAA3EB19CCF6E80
Authority key identifier: AC:61:81:2C:1B:9C:DE:5E:05:E8:F2:23:B5:15:A5:C2:0D:C0:4E:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/d581413d-7c5e-3ce0-b58b-8c1f4cc766ee.roa
Signing time:             Mon 09 Sep 2024 12:43:21 +0000
ROA not before:           Mon 09 Sep 2024 12:43:21 +0000
ROA not after:            Sun 08 Dec 2024 13:43:21 +0000
asID:                     7029
IP address blocks:        23.188.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/6056a542-dd4d-44c1-82dd-402b8d57ec5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/6056a542-dd4d-44c1-82dd-402b8d57ec5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:2d:31:90:da:aa:3e:b1:9c:cf:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6056a542-dd4d-44c1-82dd-402b8d57ec5a
        Validity
            Not Before: Sep  9 12:43:21 2024 GMT
            Not After : Dec  8 13:43:21 2024 GMT
        Subject: CN=9c08d6da-77f6-4cea-a0d2-4f024f421b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:b8:28:ab:99:94:62:9a:9c:8b:b8:0f:dd:
                    5d:fc:2e:b3:5d:72:a5:9a:ad:21:ed:7f:0f:2c:2a:
                    a5:1f:04:a4:be:35:36:61:92:6b:a4:d2:fb:63:b8:
                    0d:50:1c:e2:a7:f6:c7:4f:c7:62:ac:5a:44:82:9a:
                    5d:1d:6c:67:27:28:fb:66:74:c3:63:02:01:25:1d:
                    75:7c:68:9c:f2:34:00:6c:5a:82:12:62:88:45:b0:
                    ee:1c:ba:63:5e:5b:03:da:35:86:2c:0f:e1:b7:f2:
                    33:ea:a3:2b:cb:c1:0f:70:c3:4f:37:b6:74:98:1d:
                    6b:9c:3c:6d:d9:5f:91:d5:01:45:8d:24:45:77:f5:
                    1c:c7:83:32:db:73:08:26:d6:98:a5:8e:16:af:b3:
                    17:a3:31:c1:96:12:a0:ae:3a:7d:96:3f:e4:11:7e:
                    27:fb:ba:32:f0:f9:27:19:6e:f2:a2:dd:d2:dc:76:
                    40:76:f5:d7:9d:c2:7c:48:3e:6e:1c:27:c6:9b:de:
                    34:da:3b:91:8c:e1:5f:30:1f:a2:3d:69:e5:59:e0:
                    9e:e0:9e:da:30:1a:c5:94:f5:c0:ec:6c:f1:46:2f:
                    6d:8a:7e:8a:87:ec:8a:b7:0d:c5:78:f9:50:5d:ba:
                    b7:dc:02:1f:bc:8f:65:69:24:a0:16:aa:b0:61:de:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E3:DC:D7:11:09:A8:E8:B2:94:7B:F9:C6:4C:34:B8:0C:1B:C0:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/d581413d-7c5e-3ce0-b58b-8c1f4cc766ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/6056a542-dd4d-44c1-82dd-402b8d57ec5a.crl

            X509v3 Authority Key Identifier:
                keyid:AC:61:81:2C:1B:9C:DE:5E:05:E8:F2:23:B5:15:A5:C2:0D:C0:4E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:59:aa:65:f6:b4:2b:36:99:20:cb:4f:98:1c:23:b2:4f:
         52:d7:ab:4c:02:8d:08:d3:57:10:7e:88:02:76:5e:6a:7e:39:
         82:00:64:ca:56:2d:64:0a:4c:12:a8:1c:c1:09:59:c9:b6:53:
         83:17:50:1a:83:c7:cf:cf:21:e0:44:2e:85:ae:3f:04:ce:56:
         50:ca:3d:ec:e2:9a:2f:78:3e:da:4f:74:0f:ea:9c:08:e3:8b:
         4e:7b:c0:fe:8e:a7:fb:76:27:11:37:36:24:68:cd:24:47:9d:
         e6:0a:d4:04:7e:07:dd:38:49:96:bb:09:f1:a1:75:b7:7e:82:
         48:f0:c7:b4:12:d5:83:ae:5a:01:0a:bb:f5:8b:fb:3b:ba:92:
         8e:10:3d:fa:fb:1e:5d:15:6c:31:18:8c:37:a9:09:ff:64:60:
         4b:38:5a:b1:97:8b:66:e5:02:d2:01:8e:7d:c0:64:df:0f:f2:
         80:ff:93:1f:59:b3:fe:e8:5e:9a:25:20:ea:e8:02:a4:ce:e2:
         c0:db:97:be:f6:0d:e9:d3:1d:3c:4c:75:9a:74:71:b7:85:ae:
         69:0b:65:e7:ee:13:78:dd:82:d1:8c:94:10:df:75:a2:f9:49:
         f1:83:19:91:18:a9:ca:c5:93:4b:24:ca:1f:2d:ec:cc:bd:00:
         b9:79:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:22 2024 by rpki-client on console-ams.rpki-client.org