Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa
File:                     26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa (raw, json)
Hash identifier:          odvN1AepQuywHnVbKH5qZ0rnk5dI7IEMXGEUqew6CtM=
Subject key identifier:   58:23:F3:07:27:C5:51:49:BE:13:B9:E7:0F:E2:DD:D2:DE:D1:35:88
Certificate issuer:       /CN=de70a194-124d-4ea2-9bff-570049254664
Certificate serial:       010D0C9F4328584762D66586C1C7FA9DB7431B00
Authority key identifier: 68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     399338
IP address blocks:        23.174.48.0/24 maxlen: 24
                          2602:fcbf::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:65:86:c1:c7:fa:9d:b7:43:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de70a194-124d-4ea2-9bff-570049254664
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=7d13139c-4737-48bd-9dea-6df68139238f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d3:40:c1:f9:f7:ec:6e:d5:c6:b1:bc:6c:7c:
                    f6:2a:f6:1a:3b:8f:f2:4a:75:43:7f:7f:28:47:39:
                    5b:0c:c2:b5:7f:bf:f3:42:71:ad:04:34:3f:3b:50:
                    30:de:47:a3:32:d9:b6:af:13:09:89:de:10:cb:c3:
                    ff:50:e7:d4:b2:7b:2b:b1:18:e5:8d:f8:32:2e:87:
                    b5:32:56:ba:13:b1:a7:20:af:1e:24:f1:e4:46:07:
                    c6:ab:fa:67:1e:87:c3:95:3a:a1:69:4c:1e:d3:f7:
                    fa:99:f4:86:be:9f:dc:dc:c3:f5:92:a0:de:2e:fe:
                    cf:d2:74:8a:d3:67:60:96:59:02:dc:be:57:c2:08:
                    bf:ea:42:35:c9:11:4d:fd:d2:e0:64:53:8d:e5:2f:
                    00:05:8a:ad:a7:81:6c:b1:25:25:ca:f1:9b:bd:2f:
                    7b:da:71:18:be:63:14:b5:88:66:46:05:6d:19:07:
                    9f:f0:4a:ee:9d:5b:ed:7e:5b:30:61:e4:4d:db:c5:
                    98:22:1e:82:0c:9a:7b:d8:e3:22:2a:47:88:80:00:
                    86:f9:08:23:01:3e:97:ba:22:10:a0:3b:b9:04:d2:
                    8b:d5:e8:1e:13:17:40:ad:5b:15:3c:01:6b:f6:c2:
                    39:34:3f:8a:97:61:83:0d:9a:ba:37:25:3a:c7:95:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:23:F3:07:27:C5:51:49:BE:13:B9:E7:0F:E2:DD:D2:DE:D1:35:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.crl

            X509v3 Authority Key Identifier:
                keyid:68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.48.0/24
                IPv6:
                  2602:fcbf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:5b:15:b8:23:54:70:ea:a2:cd:b2:f1:0e:c4:a2:be:d7:70:
         6f:5d:82:92:b3:01:6a:b3:40:69:e0:a2:fc:6b:f3:e6:81:d8:
         6b:7c:7f:38:ff:55:bf:e6:63:57:df:3e:13:8e:4a:2b:e9:07:
         97:49:40:cf:01:1b:e6:e5:36:a8:f2:69:c4:a6:ac:05:e6:6e:
         a3:2f:4c:5e:a8:47:69:b4:aa:61:95:fe:2b:02:81:23:3e:57:
         3c:0b:78:81:32:7b:51:7a:8d:aa:75:98:36:d2:6a:2d:0e:51:
         87:4e:ea:fc:d4:19:46:84:33:d0:81:a3:a1:39:d6:e1:2e:ea:
         a3:5f:74:66:11:3d:88:14:90:ac:5f:01:ce:2b:de:62:ff:74:
         c6:ab:38:a9:ac:72:1f:e0:98:83:ce:ba:ba:f0:bc:f9:68:dd:
         e9:96:53:45:92:d5:62:b6:c0:57:c6:94:8e:d7:bd:13:79:b9:
         b6:bf:7d:c9:0e:a4:db:a9:bc:78:f2:2d:c4:ae:ef:3a:67:1a:
         39:32:a7:9d:f8:f2:a4:6a:c4:6c:a8:4b:ed:e0:48:ad:d6:ac:
         69:38:d4:79:22:e6:a2:2b:cc:4d:fc:bc:16:c1:45:c7:13:e0:
         61:2d:6a:de:11:c4:93:2c:54:c4:00:48:02:12:a7:3c:d2:7d:
         d9:ea:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:30 2024 by rpki-client on console-ams.rpki-client.org