Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/99b9ca57-15c7-30eb-bebe-5de249f985af.roa
File:                     99b9ca57-15c7-30eb-bebe-5de249f985af.roa (raw, json)
Hash identifier:          VQ7BQKp5RXPvDH3aoymvJ9Cg03eGSQdwAiS8V9Wusiw=
Subject key identifier:   5C:2C:D7:85:E5:0A:55:9E:0B:8D:7D:1F:B5:72:B2:A6:B7:A1:F3:C9
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F43285847EE8A3C880EB3723A8B4FA300
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/99b9ca57-15c7-30eb-bebe-5de249f985af.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     401170
IP address blocks:        23.181.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:3c:88:0e:b3:72:3a:8b:4f:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=dd99e661-2de1-4c6f-997a-e5fc3a8a314f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:2b:2a:e0:e6:7a:3e:10:a1:c0:eb:0a:d5:
                    6e:d6:99:cc:93:f6:60:18:76:9e:bf:33:86:86:0b:
                    90:3f:63:de:ba:9b:e0:00:0e:1b:a9:84:6c:e3:60:
                    bf:c3:c3:0f:35:8a:ad:c2:30:ea:56:c4:13:b8:9b:
                    19:3f:ed:b3:fc:37:76:22:a5:d1:4c:fb:18:43:f3:
                    79:dd:09:0d:83:7c:b0:59:64:05:b9:73:bb:81:42:
                    ea:be:e5:b6:c8:37:ae:70:cf:8f:e5:e3:e5:4d:2f:
                    95:59:b5:96:12:ce:26:18:04:fc:6a:9b:69:33:64:
                    eb:1a:83:e1:6c:96:b1:a0:e4:23:93:52:23:b3:da:
                    de:6d:88:0a:35:53:c6:e6:f2:5f:0f:55:82:18:07:
                    97:55:a8:94:0c:51:ae:0d:f0:70:ec:eb:70:4d:de:
                    87:6c:d7:4c:56:32:22:69:8d:0b:fd:86:ea:18:c9:
                    6b:9b:e2:59:82:2a:98:46:27:72:91:7c:2c:5f:9a:
                    a0:ac:ad:fe:e4:87:58:06:81:b6:54:7e:6b:8a:b2:
                    f0:0f:cb:93:2d:b3:b2:1c:8b:56:e5:d5:06:27:96:
                    51:33:d5:8f:40:36:02:35:f4:a3:01:4d:cb:89:ee:
                    76:ee:ed:16:18:b8:6e:a3:8a:82:80:16:d7:22:4e:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2C:D7:85:E5:0A:55:9E:0B:8D:7D:1F:B5:72:B2:A6:B7:A1:F3:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/99b9ca57-15c7-30eb-bebe-5de249f985af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:62:3f:b0:d3:30:d5:9f:ed:a9:61:63:30:4d:8c:28:c7:96:
         a4:d6:49:60:55:66:c4:4d:36:ac:4d:01:93:c4:04:33:ab:9e:
         2f:a0:d0:07:19:e3:5a:51:2d:be:91:6a:7d:b1:e4:72:3e:b7:
         25:2e:0d:4e:ba:00:fb:79:6f:1a:39:41:c2:ae:e7:ae:fe:03:
         9d:78:a6:f5:f0:10:21:f0:e3:35:c4:d4:46:45:26:76:fc:ea:
         c4:26:0e:aa:7d:b1:03:ef:07:e1:1b:1c:a6:f5:9f:81:e1:fe:
         70:b0:30:3e:0c:51:59:6e:d2:7c:10:d5:00:ed:47:59:61:d3:
         89:ab:fd:c1:76:25:61:1f:a2:b4:2c:ba:7d:29:b4:81:1b:25:
         01:08:e2:e9:b7:df:bb:96:4b:9b:37:bd:74:fb:43:9f:24:9f:
         5b:7d:81:16:31:56:c4:f2:26:cd:86:3a:3c:37:4e:27:16:52:
         1b:86:b0:97:0c:84:5a:a3:01:bc:74:31:6d:1d:8c:25:be:e4:
         b6:37:75:c9:08:1c:e5:b0:12:03:f3:a0:6b:5c:c9:21:fe:e8:
         a3:03:45:3a:9b:ef:fa:14:d6:f2:0b:33:64:21:38:24:57:2e:
         50:9e:ba:bb:c0:79:a7:45:a2:82:87:0c:89:57:95:d6:e6:75:
         0e:26:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:18 2024 by rpki-client on console-ams.rpki-client.org