Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/0a01ce04-eb13-303b-8b70-087183277092.roa
File:                     0a01ce04-eb13-303b-8b70-087183277092.roa (raw, json)
Hash identifier:          XyzkIMxVFsy3IzmeIvWfSq1QibkTz19sHOYOSY1vLJM=
Subject key identifier:   65:8A:CF:E7:5A:05:95:FE:62:C8:98:E3:91:13:2C:B5:D4:67:C4:70
Certificate issuer:       /CN=e6948ae7-36f2-49ff-ae79-8de3b34aa992
Certificate serial:       010D0C9F43285847F4873AD16E240ABE1CE0DF00
Authority key identifier: 7B:3C:92:3D:B0:B2:70:C4:06:3F:46:A5:6D:00:73:D8:47:56:5D:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/0a01ce04-eb13-303b-8b70-087183277092.roa
Signing time:             Thu 21 Nov 2024 17:29:39 +0000
ROA not before:           Thu 21 Nov 2024 17:29:39 +0000
ROA not after:            Wed 19 Feb 2025 17:29:39 +0000
asID:                     401486
IP address blocks:        23.129.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/e6948ae7-36f2-49ff-ae79-8de3b34aa992.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/e6948ae7-36f2-49ff-ae79-8de3b34aa992.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:87:3a:d1:6e:24:0a:be:1c:e0:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6948ae7-36f2-49ff-ae79-8de3b34aa992
        Validity
            Not Before: Nov 21 17:29:39 2024 GMT
            Not After : Feb 19 17:29:39 2025 GMT
        Subject: CN=cb4a8e5b-dfd1-4f09-9770-59b03e58bc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:a1:7e:44:d5:df:d2:35:18:8c:f7:7d:9b:
                    c1:87:8f:8a:91:e6:57:02:01:8a:04:86:9b:05:72:
                    c9:0d:0b:c9:77:e6:f1:ba:59:6a:42:d1:f7:17:4e:
                    e8:4b:dc:b1:71:cb:c0:61:78:76:f9:21:f6:ba:ae:
                    ce:ff:4f:3f:d4:22:2d:63:25:fc:80:e2:4e:c1:7c:
                    4a:e0:cf:7d:92:9f:95:ee:48:2d:16:f2:ab:0d:21:
                    3d:83:69:38:a2:a3:f4:4d:0f:5b:b6:49:00:dc:3d:
                    71:03:16:d7:89:74:22:e1:9b:dd:d8:d8:ce:af:e9:
                    d7:9d:ce:8c:7e:f0:6a:43:89:0f:d5:b7:1d:10:40:
                    dd:79:0f:00:f8:4b:b6:e2:bf:0a:0d:89:c7:06:46:
                    1e:c7:e1:88:7b:4d:14:80:25:23:38:6e:44:3b:84:
                    88:89:c5:de:6e:ea:cd:7a:00:66:07:1e:ef:31:6a:
                    f3:16:03:ab:e2:02:09:ec:a1:fe:c0:74:2c:59:be:
                    c1:a6:62:c2:d5:25:4f:8b:90:d6:1e:dc:55:e3:33:
                    28:42:f2:3c:75:e9:db:02:25:23:d1:6a:4b:3a:c4:
                    0e:68:d3:4e:9f:71:88:30:26:64:ce:c9:be:79:2d:
                    00:5f:19:c0:a4:0c:e0:d1:d1:10:74:43:d3:98:9d:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8A:CF:E7:5A:05:95:FE:62:C8:98:E3:91:13:2C:B5:D4:67:C4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/0a01ce04-eb13-303b-8b70-087183277092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/e6948ae7-36f2-49ff-ae79-8de3b34aa992.crl

            X509v3 Authority Key Identifier:
                keyid:7B:3C:92:3D:B0:B2:70:C4:06:3F:46:A5:6D:00:73:D8:47:56:5D:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:41:fa:69:52:fb:4e:e0:e9:8e:2f:b2:88:a8:c7:42:31:
         c5:b2:d4:7b:32:c9:4f:bb:a3:76:f2:1c:1e:cc:d4:c8:63:69:
         c7:31:19:97:5d:b9:53:53:f8:ae:98:1e:d1:4d:ed:cc:a6:9a:
         7d:b4:6d:17:bc:58:bf:31:75:c4:cd:bc:a7:b0:21:7b:95:1c:
         0f:29:5e:7a:8c:27:e4:12:30:7a:78:3c:00:ab:55:5a:32:75:
         d0:7e:b7:75:7e:0e:15:2a:b7:5c:1f:19:99:72:7f:ee:07:e2:
         66:4a:d7:95:5b:61:88:c5:f8:84:06:66:4c:b3:98:f4:8d:7f:
         d2:d1:e0:03:80:a4:8e:78:7d:39:30:b8:08:6a:33:06:f5:e4:
         31:e6:7b:89:ed:64:9f:c0:cc:4c:bf:7d:eb:82:ee:39:fd:35:
         20:90:60:e9:4a:3d:53:05:eb:2c:4e:91:e2:b0:cc:c9:73:0e:
         4f:fe:60:cb:58:3e:3d:d6:dc:20:56:2f:14:53:9e:68:9a:43:
         58:c6:e9:72:33:5e:db:af:08:fb:d5:79:fb:91:d1:44:c4:55:
         d3:d7:07:7e:39:61:b2:4b:25:96:47:06:b0:00:ee:80:5b:07:
         1a:bb:e1:9c:ce:49:ac:6e:5d:e0:e5:56:81:6c:08:5b:b0:a1:
         c8:0d:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:59:47 2024 by rpki-client on console-ams.rpki-client.org