Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/938d5892-6a64-3f55-9ce7-0180f67571e7.roa
File:                     938d5892-6a64-3f55-9ce7-0180f67571e7.roa (raw, json)
Hash identifier:          WQvKdnd/mposuTg6+m2B9kseM2clw6IilBG5PMwQoWU=
Subject key identifier:   7A:B9:EF:36:C3:9F:FB:2B:DC:ED:8A:6A:12:C4:07:E5:77:DA:DD:83
Certificate issuer:       /CN=2eee75b4-9a8a-44e7-9358-b5ada51ddc74
Certificate serial:       010D0C9F4328584782F0FDA91F9A108108452310
Authority key identifier: 05:FF:93:67:74:72:1D:14:4F:93:FE:03:A9:57:A4:81:50:21:25:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/938d5892-6a64-3f55-9ce7-0180f67571e7.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     398157
IP address blocks:        23.151.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f0:fd:a9:1f:9a:10:81:08:45:23:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eee75b4-9a8a-44e7-9358-b5ada51ddc74
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=640d6f83-713d-4361-9e79-f88ef3b5001b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8b:5b:6e:08:32:37:9f:a8:30:6b:06:94:8c:
                    5b:db:a1:87:b7:c1:66:10:c9:53:22:25:0c:cc:61:
                    b2:85:a5:61:65:e4:3a:88:90:58:ac:27:67:99:3c:
                    73:45:95:00:74:d0:83:a8:35:cd:72:ba:9e:e6:40:
                    c6:27:e0:cd:ef:85:be:5c:aa:97:22:be:25:06:5a:
                    e4:80:40:77:3f:f4:fa:6b:47:37:33:55:f0:2c:3c:
                    c3:53:74:e5:fd:57:a6:29:d5:5b:90:90:7c:82:21:
                    c2:33:da:5b:2d:2d:c4:6d:bc:f6:c0:e4:42:bb:79:
                    92:13:ab:5b:ad:20:83:bf:5c:23:2a:7d:81:11:f1:
                    3b:c8:e7:d2:99:ad:7b:52:df:33:c5:02:88:7d:a4:
                    67:50:b3:95:55:ec:29:6f:5a:43:04:a9:78:bc:a1:
                    56:0d:f2:a0:a7:b2:fb:8c:f9:56:d8:da:6a:3f:3c:
                    1e:03:0f:dd:c5:bc:fe:1d:37:f6:5f:61:23:71:d7:
                    b0:76:3c:a5:0e:16:95:31:29:4c:c7:51:9f:30:66:
                    88:ab:82:ce:2f:58:ce:e8:5b:09:6c:62:87:8a:4d:
                    9a:a1:8e:9c:a8:ae:0b:5b:54:1e:0c:d6:ef:b8:39:
                    17:44:93:74:64:04:f1:75:48:11:a8:20:84:61:0b:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B9:EF:36:C3:9F:FB:2B:DC:ED:8A:6A:12:C4:07:E5:77:DA:DD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/938d5892-6a64-3f55-9ce7-0180f67571e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.crl

            X509v3 Authority Key Identifier:
                keyid:05:FF:93:67:74:72:1D:14:4F:93:FE:03:A9:57:A4:81:50:21:25:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:16:10:00:b5:15:37:86:46:d0:f3:bc:c6:9b:28:cc:05:b9:
         44:df:68:33:92:93:24:d2:68:09:0b:7a:b9:25:63:68:4d:a8:
         40:bd:f1:69:9d:61:9b:d3:ef:3d:2e:42:22:a9:93:6d:88:e1:
         3c:8c:11:78:8f:62:56:47:94:6f:7e:04:66:b1:eb:dc:2a:16:
         a7:fe:cd:b4:ec:fc:e8:59:24:e6:3b:88:69:79:14:26:05:1c:
         72:e7:82:db:60:33:a9:16:bf:d2:4a:d6:44:49:a0:09:cf:f5:
         6b:42:e6:ae:7b:75:6d:fc:c6:bc:3d:7d:bc:7c:ed:ff:95:7f:
         47:b0:a8:da:b0:d6:78:28:b5:19:3f:a8:79:65:75:4f:6d:83:
         98:5c:74:7e:3f:c7:a6:8d:dc:34:bc:d4:7c:3a:02:4f:11:57:
         8c:26:b6:98:f8:c7:80:4a:74:a7:b0:62:17:14:d2:65:b4:36:
         a4:46:e1:03:cb:3b:75:70:7f:8c:69:89:da:d5:fb:f3:f9:f6:
         42:29:9a:c0:22:05:ea:a7:1b:af:6a:00:94:3f:52:a5:d6:2a:
         ee:f8:a6:fa:3f:cf:c2:81:58:88:da:71:94:25:6b:9b:a3:e8:
         2a:fd:68:c5:ac:63:8b:24:db:91:df:94:a7:79:86:1f:b7:38:
         1e:02:f0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:36 2024 by rpki-client on console-fra.rpki-client.org