Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa
File:                     6053494b-ad6e-3463-a4d4-78568350ab7f.roa (raw, json)
Hash identifier:          6QYZt8QZtUzE8v+oZfQokivLJZLzRKMj47kSOk/7Qyg=
Subject key identifier:   86:2B:0B:EB:4A:15:E7:D9:7D:1D:73:B3:2F:CC:94:8C:43:35:B9:BB
Certificate issuer:       /CN=ea962f40-5514-411b-b23b-2a5e787628d5
Certificate serial:       010D0C9F43285847433411DFFDDD37CFC977F680
Authority key identifier: 95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa
Signing time:             Thu 19 Sep 2024 05:04:01 +0000
ROA not before:           Thu 19 Sep 2024 05:04:01 +0000
ROA not after:            Wed 18 Dec 2024 06:04:01 +0000
asID:                     401336
IP address blocks:        23.189.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:43:34:11:df:fd:dd:37:cf:c9:77:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea962f40-5514-411b-b23b-2a5e787628d5
        Validity
            Not Before: Sep 19 05:04:01 2024 GMT
            Not After : Dec 18 06:04:01 2024 GMT
        Subject: CN=eab06adf-9137-459b-bb8e-a294b363901d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:42:7b:34:cf:2b:42:9d:57:69:b5:d7:5e:
                    f7:9d:a0:e8:48:49:21:f0:46:cb:98:81:01:e0:0b:
                    17:7d:dc:25:3d:9e:22:2a:37:2b:c5:bc:a8:c1:f7:
                    c7:e8:b3:db:38:6c:1d:cc:77:f7:af:98:73:26:0a:
                    5e:84:56:c6:51:c3:38:1f:33:6a:d6:d8:ff:17:18:
                    f4:e9:46:96:a0:ea:2a:7e:3c:7b:1f:69:12:dd:92:
                    63:3a:b3:02:ea:5b:11:65:e8:cc:99:8f:34:89:bc:
                    10:c1:58:a9:ea:ef:f9:30:54:b8:6a:33:3f:27:fe:
                    48:a5:b7:d7:60:ab:f5:85:d5:37:6c:f1:45:45:04:
                    12:98:e1:33:76:c1:e8:4b:70:45:b0:b0:52:9f:4b:
                    fe:91:59:ea:d4:7e:1a:bb:76:5a:cb:93:77:91:df:
                    7c:b3:8d:df:6a:b2:21:85:05:6c:35:a9:16:0b:1a:
                    aa:01:8a:46:0e:93:74:43:56:7a:59:ae:f6:0a:f9:
                    25:8f:07:bd:82:42:57:23:ff:9d:07:34:ff:69:0c:
                    b0:b2:75:3d:5e:de:e5:8e:e1:48:62:91:32:a1:be:
                    6d:b7:e4:81:57:d1:ad:fe:2e:f5:11:b3:41:72:82:
                    e5:fe:6d:23:ed:e6:45:ed:1d:1f:d0:9c:ae:56:11:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2B:0B:EB:4A:15:E7:D9:7D:1D:73:B3:2F:CC:94:8C:43:35:B9:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/6053494b-ad6e-3463-a4d4-78568350ab7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5/ea962f40-5514-411b-b23b-2a5e787628d5.crl

            X509v3 Authority Key Identifier:
                keyid:95:EC:28:9C:11:BA:47:70:E5:AA:FD:0E:AE:40:4F:AA:7D:C1:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea962f40-5514-411b-b23b-2a5e787628d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fc:33:4d:e4:10:3f:f9:dd:70:09:61:a5:52:1b:4e:4f:db:
         0c:68:a5:a1:23:1d:02:bf:8f:33:b1:e0:73:8d:9e:6d:55:20:
         e4:5f:4d:c4:81:d8:d4:73:09:fc:c2:3b:00:23:3a:6d:ff:ae:
         3f:6c:d7:4f:4d:9b:e7:11:93:ca:40:75:45:82:c1:db:f8:d1:
         86:54:cb:32:03:d5:e3:da:39:f0:24:ad:36:26:d5:26:49:28:
         4d:8f:d7:d1:c0:fe:ac:fa:78:6a:85:6d:6e:e1:b9:e0:0d:a6:
         11:8d:73:64:f9:f5:1b:1a:b8:47:27:28:2d:2d:18:f8:c5:0e:
         ae:7c:6c:ca:b3:e3:da:d5:d2:2b:99:5a:e4:6e:69:c5:97:5a:
         8a:df:01:8e:a0:cf:4f:e3:f8:16:2d:00:5a:ba:50:a4:38:32:
         b8:46:d1:d6:37:03:27:4d:d3:55:70:2d:92:b3:6e:13:83:a2:
         0d:74:29:d7:ba:20:13:8e:da:33:ff:2d:17:ad:b7:67:3c:0e:
         e6:57:81:44:db:90:71:2e:46:0c:b6:bb:13:de:d8:10:8e:fb:
         47:e5:a4:37:64:71:81:76:60:dd:77:c6:81:79:ab:9d:a2:75:
         62:78:94:ea:d3:6e:35:e5:d9:af:24:fd:58:d4:60:7a:66:61:
         33:2b:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:13 2024 by rpki-client on console-fra.rpki-client.org