Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa
File:                     d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (raw, json)
Hash identifier:          nyqWQWwgZw75dPdiDGgn3FcL6cF+2hqUBN3xFWNKQZ8=
Subject key identifier:   32:34:FC:1C:34:17:BB:12:81:74:A3:74:30:F8:1D:37:B4:D9:FD:3F
Certificate issuer:       /CN=3789343d-8560-48b0-9530-d2a1129fefe7
Certificate serial:       010D0C9F4328584733F3D1F161A5AF9129BEC000
Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa
Signing time:             Fri 13 Sep 2024 17:57:27 +0000
ROA not before:           Fri 13 Sep 2024 17:57:27 +0000
ROA not after:            Thu 12 Dec 2024 18:57:27 +0000
asID:                     401228
IP address blocks:        23.183.216.0/24 maxlen: 24
                          2602:f87c::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:f3:d1:f1:61:a5:af:91:29:be:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7
        Validity
            Not Before: Sep 13 17:57:27 2024 GMT
            Not After : Dec 12 18:57:27 2024 GMT
        Subject: CN=684666f9-0d17-4868-9831-395a5c162d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:3a:e6:93:e3:04:65:ac:f3:9a:b6:6e:e9:
                    a8:63:79:c7:c5:f8:a4:59:2a:8a:1a:25:8d:20:5a:
                    70:4b:c7:dc:3a:96:c9:84:66:8c:bc:67:8a:0a:7a:
                    69:3c:92:a0:b3:d2:42:72:73:db:a9:38:94:5b:45:
                    35:7a:f8:2c:19:7d:c9:8f:6b:34:5b:2d:15:c9:a6:
                    8d:6e:b1:e2:6f:56:a4:76:87:6d:68:d7:eb:39:7c:
                    33:ab:a2:c0:39:1c:b3:7c:e6:ff:4c:f0:09:f2:a9:
                    c1:18:4e:83:0a:fe:78:5f:0d:0c:8a:1d:b5:42:e1:
                    b3:f1:62:80:93:99:53:21:62:49:a1:21:51:d7:e4:
                    c8:36:19:01:85:c6:fe:15:26:06:3d:4f:6b:76:b5:
                    ab:82:1b:cf:59:8c:c8:7a:b4:f4:7f:95:33:30:09:
                    a4:42:68:25:de:02:64:97:b2:bf:07:d1:0c:10:bd:
                    42:c0:92:2d:38:90:b3:fc:18:35:5c:41:1c:65:b0:
                    05:d7:ed:d4:7a:04:b0:c6:8b:8a:4b:fb:d7:09:34:
                    a6:70:47:92:43:18:8d:70:ce:3e:12:43:ce:cf:1f:
                    13:1d:9d:28:1d:a3:fe:d6:31:ee:85:09:06:9d:31:
                    69:cf:cf:21:d3:7f:a5:f1:a0:15:9b:6a:ad:a9:6c:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:34:FC:1C:34:17:BB:12:81:74:A3:74:30:F8:1D:37:B4:D9:FD:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl

            X509v3 Authority Key Identifier:
                keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.216.0/24
                IPv6:
                  2602:f87c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ae:63:86:2b:bd:b4:ac:9b:ba:56:90:8f:b6:c6:50:aa:e3:
         7a:53:69:05:17:98:c5:48:24:57:d7:34:13:91:2a:61:58:47:
         f5:8a:8a:08:5d:7c:cc:27:f7:50:44:d9:ac:d0:96:c7:14:78:
         9c:70:08:39:1a:16:1d:d5:c0:bf:b3:0f:d6:8f:92:bb:77:6e:
         70:fa:10:8f:2c:4f:b4:d5:31:61:27:13:b4:3f:dc:93:62:0f:
         53:89:20:11:f0:b5:fa:e6:43:51:d5:99:e8:cd:ec:69:41:1d:
         10:73:a9:47:78:43:a3:56:7b:57:3e:1d:25:47:e6:25:c9:8e:
         27:ce:db:18:cd:c7:f5:f5:6c:5d:5c:64:35:9a:d7:04:75:cd:
         a3:7a:6b:d6:f6:0d:bd:2d:00:2b:75:d8:8f:46:f4:08:65:da:
         6f:52:e7:76:49:7f:cc:1f:3b:8b:91:20:7f:30:4b:e6:05:9d:
         1d:60:72:73:59:c5:20:6c:fb:ce:7d:ee:94:e9:4b:43:34:5e:
         39:e9:5d:f7:76:47:58:68:e3:67:63:fd:06:e8:0e:c9:a2:7d:
         64:60:88:c2:20:e0:b4:f3:0c:7e:e6:d9:ee:78:20:b4:73:b0:
         ff:4b:49:9f:5a:e5:1a:dc:a7:b3:c6:a5:0d:2f:9f:ee:36:f9:
         61:07:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org