Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa
File:                     eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa (raw, json)
Hash identifier:          u4OQCFeJdYHVYIPoI1x04+9K6Hn50QbAN1XJgDGxiuA=
Subject key identifier:   57:18:59:92:BF:E3:D2:4E:8C:6A:D6:B3:62:1E:3E:F0:78:31:63:DE
Certificate issuer:       /CN=a2a9c3f0-9f82-4e64-bbd0-be3652feb255
Certificate serial:       010D0C9F432858477BF6696B07BB5ADBC700DE80
Authority key identifier: EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     401017
IP address blocks:        23.176.248.0/24 maxlen: 24
                          2607:ae40::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:69:6b:07:bb:5a:db:c7:00:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2a9c3f0-9f82-4e64-bbd0-be3652feb255
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=374cd0a9-d01d-429b-89ea-de22d0527e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:be:36:a1:85:ff:a5:c9:1b:5e:50:76:2d:
                    f5:80:cf:0c:2d:e6:5c:bb:80:d2:21:68:af:1a:4f:
                    2f:2c:fd:47:71:ce:fb:11:fc:7a:79:32:b0:e1:62:
                    52:a6:05:01:c9:e2:e7:e0:ec:1d:09:11:86:db:dc:
                    48:ec:85:a2:e5:5e:2d:2e:37:dc:0e:48:f6:8b:b0:
                    04:8a:4c:dc:41:d3:a0:38:8a:21:0d:33:97:a5:90:
                    6f:8b:05:63:c0:1c:b2:1d:e8:cb:7d:cf:42:44:f4:
                    3a:98:93:ee:af:d8:29:85:bc:2d:94:6d:3a:0c:aa:
                    d3:bf:39:9e:c2:80:2c:0e:7d:90:d1:c4:ce:4a:31:
                    2f:ec:85:b3:e5:ed:3e:cf:2c:62:26:e1:d0:7c:e2:
                    52:d8:89:10:71:e9:c8:4b:74:e8:63:61:c9:75:fd:
                    96:de:77:51:8d:2b:8f:84:92:b8:1b:a9:04:83:4f:
                    92:66:e9:4d:d1:a4:d8:0e:e8:ad:32:da:b7:56:03:
                    f8:fc:2f:24:c5:17:cf:91:61:9e:22:70:7d:ba:ea:
                    26:b9:df:9f:8c:f7:fd:4e:ab:e0:c7:2a:da:43:02:
                    e1:c0:41:89:d7:ab:e0:03:1c:48:ff:7f:7c:54:c5:
                    1e:ad:b0:b7:b3:e3:99:d8:da:9c:21:76:9c:3a:82:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:18:59:92:BF:E3:D2:4E:8C:6A:D6:B3:62:1E:3E:F0:78:31:63:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.crl

            X509v3 Authority Key Identifier:
                keyid:EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.248.0/24
                IPv6:
                  2607:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:fa:c4:8e:88:15:9b:86:ce:4a:54:9f:8a:67:bf:1e:f6:
         93:cb:93:01:9e:c3:12:5a:61:8d:b0:79:9e:a3:97:39:52:94:
         7f:04:a0:96:f8:ed:f9:39:8a:3d:ad:a8:19:b9:ab:af:0b:c1:
         b3:71:52:13:7a:e3:2e:eb:58:26:57:62:e2:8f:46:a5:9a:2d:
         9d:ab:86:c8:f2:f9:bc:1f:4d:53:f7:2f:db:8c:78:91:f5:b9:
         07:14:ad:9c:05:12:9b:3a:e3:27:2c:d8:8e:44:b7:5a:c9:ef:
         55:09:d2:24:c8:a0:70:ac:79:19:6c:2c:fe:d0:77:35:de:7d:
         aa:5a:0e:68:87:27:40:de:26:8f:14:04:dd:7c:08:d1:18:a3:
         7d:85:7a:76:9b:66:ef:7f:a5:1b:03:0a:77:e7:2e:57:42:57:
         94:ce:65:fc:9a:1e:2f:3c:7b:7e:91:22:bd:2a:b8:9c:f7:a9:
         41:3d:9b:bd:91:54:8c:9d:72:3c:0f:fd:72:38:34:fd:19:2a:
         31:19:61:51:df:42:d2:45:58:13:50:a0:69:64:b6:f6:b4:85:
         1c:58:9f:b1:4a:25:d6:a1:b6:6e:10:28:a2:b9:0c:47:4b:ae:
         04:3b:b0:af:02:74:a9:d7:32:70:db:7f:2a:68:cb:a1:f8:8a:
         91:4a:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:22:12 2024 by rpki-client on console-ams.rpki-client.org