Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/2a66cd51-1832-32d5-aa85-a263af125a1a.roa
File:                     2a66cd51-1832-32d5-aa85-a263af125a1a.roa (raw, json)
Hash identifier:          LMn7HhgeyaRmL/iB8p+yoNgKOnG41+1zpHTJD8HCZ9c=
Subject key identifier:   72:72:E7:4B:11:11:B9:F4:2D:3E:1A:16:F7:B9:A3:9A:61:41:D5:B3
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F43285846E11EF01C6B7F1B3FAC9AEB40
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/2a66cd51-1832-32d5-aa85-a263af125a1a.roa
Signing time:             Thu 15 Aug 2024 01:52:14 +0000
ROA not before:           Thu 15 Aug 2024 01:52:14 +0000
ROA not after:            Wed 13 Nov 2024 02:52:14 +0000
asID:                     62880
IP address blocks:        23.181.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e1:1e:f0:1c:6b:7f:1b:3f:ac:9a:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Aug 15 01:52:14 2024 GMT
            Not After : Nov 13 02:52:14 2024 GMT
        Subject: CN=4782e69e-5984-47d1-b1c2-0419a8bd0b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:8d:aa:87:2a:08:5e:47:d9:3f:7d:b7:9f:
                    68:89:4a:f0:88:8f:c3:2d:dd:1e:8e:05:5f:7c:16:
                    38:0c:32:a3:d6:cf:0e:f3:63:3c:4c:4e:24:fe:0e:
                    d9:f2:38:09:6e:eb:07:74:96:f0:5e:93:84:6e:6c:
                    25:c6:fa:1d:35:00:0f:07:2a:80:fd:71:70:cd:6a:
                    50:be:a3:97:b3:ec:b1:6c:1f:f0:96:01:cd:af:53:
                    08:fd:31:70:19:8e:c4:9a:2b:94:d9:c3:36:7b:4a:
                    a6:85:a9:f6:ed:2c:56:f1:8e:0f:f1:08:75:4c:93:
                    32:53:39:c8:8b:de:ef:00:0e:bd:6d:55:f3:e2:ea:
                    8e:9c:26:b7:05:ff:08:75:17:d6:db:08:49:5b:21:
                    bc:00:26:35:f5:16:6b:20:fb:ee:96:23:bd:b1:21:
                    d5:5c:41:81:0b:1a:fb:91:e3:de:44:7d:9e:42:25:
                    2e:ed:d5:b5:df:93:58:e9:91:e0:d8:ce:e5:a0:40:
                    03:ba:28:15:47:68:a8:aa:08:56:fb:16:16:09:49:
                    a4:c6:70:2a:09:a2:74:67:50:ba:6c:10:18:54:fa:
                    77:98:29:c3:9e:32:a1:f4:87:5d:86:9e:80:9a:0f:
                    ca:57:f7:57:1f:7f:71:7f:8d:9b:cb:16:43:29:7e:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:72:E7:4B:11:11:B9:F4:2D:3E:1A:16:F7:B9:A3:9A:61:41:D5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/2a66cd51-1832-32d5-aa85-a263af125a1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b0:e3:6f:7e:cd:f7:4d:2a:b3:47:c3:a5:ac:17:f9:cf:c6:
         01:6c:33:13:88:d8:63:9b:5b:db:cc:31:79:43:3a:75:9a:9a:
         3e:8c:24:cf:c5:a0:47:19:68:cf:07:b3:fe:c9:50:3d:66:94:
         bf:c5:9e:f4:b8:25:a4:8c:59:75:e9:c0:e1:1c:10:52:01:45:
         a2:40:de:e6:e4:5b:95:b3:cd:12:b2:d7:33:19:cd:77:dc:68:
         24:68:b2:24:0e:0a:78:10:0e:01:2e:7a:7c:4d:21:fe:ef:a6:
         a2:75:e8:e8:ba:cc:41:39:17:e8:51:c8:5e:02:94:77:d3:3d:
         09:14:c2:73:c2:00:07:b5:6f:db:26:5f:74:cb:ee:7b:88:d9:
         ec:05:50:e1:0b:87:1d:ea:10:fb:f7:dc:6f:5d:a1:c8:cd:d7:
         0d:0f:7a:37:f5:4b:3c:8b:91:a9:51:29:3b:9b:36:1c:81:0d:
         8e:a9:46:a1:ce:fd:7d:57:f8:c5:6a:b3:aa:c5:ce:f0:89:78:
         4f:3c:52:ed:02:92:b4:cc:27:85:fc:6f:a8:96:40:6d:8d:bc:
         d1:cf:41:48:a0:30:6e:b4:bd:31:eb:83:ad:51:46:d3:56:d7:
         f8:77:bf:17:20:d4:8c:1e:af:8d:a5:59:10:68:36:0d:d4:91:
         46:79:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:47:17 2024 by rpki-client on console-fra.rpki-client.org