Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/05369644-9ded-3c42-9676-c9f26be40288.roa
File:                     05369644-9ded-3c42-9676-c9f26be40288.roa (raw, json)
Hash identifier:          2m/Lqs1ed5j6AlsJCqRgkllsg4PuQ/lCLLoaA3dJEoQ=
Subject key identifier:   25:37:7E:89:2D:BF:5B:CD:8C:19:4F:26:1C:AE:01:E0:9F:32:8C:EF
Certificate issuer:       /CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47
Certificate serial:       010D0C9F432858473322E9FF6E4D8D1791EF5580
Authority key identifier: 38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/05369644-9ded-3c42-9676-c9f26be40288.roa
Signing time:             Fri 13 Sep 2024 10:56:31 +0000
ROA not before:           Fri 13 Sep 2024 10:56:31 +0000
ROA not after:            Thu 12 Dec 2024 11:56:31 +0000
asID:                     7029
IP address blocks:        23.189.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:22:e9:ff:6e:4d:8d:17:91:ef:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47
        Validity
            Not Before: Sep 13 10:56:31 2024 GMT
            Not After : Dec 12 11:56:31 2024 GMT
        Subject: CN=d67fa3ef-35e4-4dc7-82c7-f22d9e9d8efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:d5:b0:a5:dd:ba:14:88:5f:e0:1a:b9:f6:
                    6a:96:ab:3d:19:2f:c2:6f:d9:e0:c7:ef:8c:4f:c6:
                    e3:8b:c0:3f:62:9f:27:11:17:71:d3:f8:c9:9e:ce:
                    df:21:63:36:87:f5:c4:c0:eb:71:2e:91:57:44:cd:
                    92:a7:47:c9:7f:96:16:cd:1f:ec:2a:9f:35:e6:e1:
                    60:8a:e6:ca:b8:f8:77:41:20:78:44:46:5d:6f:af:
                    1d:ce:bf:2b:33:a2:37:1e:2d:4a:87:75:b0:9a:53:
                    74:60:af:06:bf:f6:8d:38:a5:c5:7d:6f:ef:c2:85:
                    eb:d0:f1:1e:3c:52:ca:31:98:70:69:f5:50:ac:cd:
                    49:36:e9:46:0a:0e:c2:da:3a:b9:f2:9c:06:f5:50:
                    b9:72:ea:86:77:2c:c9:d3:51:39:b0:a6:fc:34:5a:
                    25:01:fb:27:ef:64:07:61:d1:27:ea:59:19:5b:77:
                    3b:63:12:77:79:d7:04:f1:ea:23:82:9f:6f:0a:42:
                    23:b0:3a:38:31:3e:36:e8:ec:b0:7e:74:c5:5e:4c:
                    23:d1:bd:6b:c7:cc:31:86:a9:ae:b2:ca:24:10:ed:
                    9f:8a:20:e1:ef:ce:f6:88:f5:cf:94:e0:69:51:31:
                    3f:e6:05:84:8d:6f:c9:b1:18:0e:90:a5:47:4b:a0:
                    6c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:37:7E:89:2D:BF:5B:CD:8C:19:4F:26:1C:AE:01:E0:9F:32:8C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/05369644-9ded-3c42-9676-c9f26be40288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.crl

            X509v3 Authority Key Identifier:
                keyid:38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:af:42:a2:c9:70:94:c4:8a:74:be:c3:19:ee:59:d9:b0:
         e7:0d:dd:5f:b5:17:0d:d1:e2:12:11:30:13:4e:64:65:3a:a2:
         ea:33:60:8f:2f:15:a1:18:1e:fa:fc:7d:2f:7f:e5:42:b2:0e:
         8f:cb:06:74:32:f9:8b:86:33:33:22:a6:15:0c:00:10:8f:40:
         7a:37:16:5f:98:c6:6d:51:50:ca:7c:56:fa:31:4c:3d:e6:18:
         d3:ca:b5:3c:06:ce:53:34:c2:8b:19:a9:e6:42:25:6c:82:27:
         46:89:d6:d6:54:74:5b:9f:c1:4a:b7:e1:a0:42:7b:f8:4d:88:
         69:67:13:ae:fa:49:4d:bb:5a:69:1e:63:a0:0f:a1:89:fa:ce:
         5c:bb:f1:d7:1a:07:27:2e:34:1d:29:bf:a9:ad:73:42:f8:5c:
         c8:61:4a:0d:d0:c5:ab:12:d3:9c:41:c3:f3:b8:38:bb:4a:f8:
         9f:e8:db:ac:9d:09:98:cc:28:97:f0:5f:9b:e9:6f:62:4d:fc:
         89:ad:fd:fc:89:57:18:42:32:37:95:cd:1e:5e:c3:60:26:35:
         7a:f8:01:a8:aa:ed:3e:81:2e:3f:b5:3d:82:0d:bc:32:d4:48:
         db:13:f0:68:9d:5f:58:e1:46:56:b9:3c:49:f7:4c:36:53:60:
         eb:bb:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org