Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09cc8267-7dd0-3eaa-a577-acd20ef03bd3.roa
File:                     09cc8267-7dd0-3eaa-a577-acd20ef03bd3.roa (raw, json)
Hash identifier:          Khk4JetS+EnbB/j4ebtCYcXTE3VZjvsuXgBJT/fNjBM=
Subject key identifier:   25:80:B4:13:90:0A:55:7D:00:2F:BA:69:CB:6A:64:52:9B:98:D8:6E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847617135D9BA6E9BC176FA9500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09cc8267-7dd0-3eaa-a577-acd20ef03bd3.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     3561
IP address blocks:        23.230.194.0/24 maxlen: 24
                          50.117.97.0/24 maxlen: 24
                          50.117.100.0/24 maxlen: 24
                          68.68.99.0/24 maxlen: 24
                          104.253.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:35:d9:ba:6e:9b:c1:76:fa:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=a6cdfebc-40f2-4a7c-ab1d-18397c85e9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:db:6d:1d:dc:6f:f1:11:d0:b7:33:6f:33:
                    f3:3f:98:a5:da:4f:52:c6:9d:63:76:e8:71:b7:b5:
                    1a:67:dc:0d:ac:0b:df:5d:78:2e:5e:00:01:30:74:
                    fb:1d:5f:d4:3e:26:ff:ff:a3:28:8e:92:4b:4e:75:
                    44:77:45:da:d8:27:14:d2:d4:35:e4:af:1c:2d:c2:
                    87:b1:77:52:5d:33:cb:a0:1e:dc:98:33:2f:b0:7e:
                    f8:7e:4b:74:c9:f1:4c:77:7d:a7:ee:6f:49:37:60:
                    a1:1b:4d:59:84:f8:b4:fc:eb:1a:d5:63:85:23:dc:
                    53:cf:a4:49:d7:3e:a0:85:bd:bc:15:5d:ba:68:dd:
                    8c:92:6a:65:f8:a5:8f:71:bd:1d:da:68:11:f8:f8:
                    f6:26:0b:d5:fd:9c:58:35:ee:fe:9e:cc:94:7f:cb:
                    9e:6a:6e:be:9b:02:28:7a:03:ca:af:95:40:87:36:
                    77:8f:94:85:00:22:41:49:ae:62:ab:c7:4b:a6:50:
                    6f:da:ab:1c:1f:7a:70:66:58:40:ed:57:8d:05:fb:
                    da:54:fc:ba:f5:8f:e3:20:b9:15:6c:5d:d3:8e:a9:
                    1b:c7:23:18:95:6b:f1:15:61:e9:55:44:63:bc:8a:
                    0d:f7:d0:9b:de:d9:e0:88:9c:53:30:ac:b9:f4:00:
                    67:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:80:B4:13:90:0A:55:7D:00:2F:BA:69:CB:6A:64:52:9B:98:D8:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09cc8267-7dd0-3eaa-a577-acd20ef03bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.194.0/24
                  50.117.97.0/24
                  50.117.100.0/24
                  68.68.99.0/24
                  104.253.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:bf:9e:8f:4c:d9:ef:86:99:8d:53:3c:37:ab:f1:a0:fd:
         6c:26:2b:30:4a:06:8a:f7:3c:bb:ff:28:75:9f:4b:9d:e0:d8:
         e8:e4:e2:0e:bd:58:d9:95:d8:f6:c0:0b:38:6c:84:d2:89:88:
         87:85:e0:f3:bc:2e:c5:69:66:54:f0:2e:df:e6:2e:26:ec:c8:
         4e:6f:4e:f2:a2:e5:04:92:20:e8:f8:a9:8f:e2:e7:72:07:e5:
         b8:04:47:b1:66:ad:a7:51:23:17:15:09:57:9a:8a:ab:aa:6f:
         07:71:23:ee:e8:5b:b5:49:62:13:b2:5c:d7:ed:54:04:c5:80:
         65:81:19:7b:f9:9f:2f:f7:22:e3:90:46:46:46:b5:95:1b:bc:
         ac:9c:40:78:4b:30:fe:2c:1b:dd:41:48:76:aa:47:d9:ae:e7:
         49:6e:f7:2b:e8:0e:cf:73:d5:98:a0:54:72:12:ad:c9:7e:31:
         ce:f5:50:dd:69:f3:cd:6d:1b:c0:13:90:27:37:32:f6:e6:1d:
         fd:ac:28:e1:eb:b5:61:e3:3d:7e:ba:78:4f:b3:fe:5b:86:15:
         92:7e:2f:10:13:3d:86:40:52:83:32:07:bc:59:f9:b5:47:0d:
         9b:27:ce:db:4a:5c:90:52:fa:c7:57:d0:47:e7:fd:8f:cc:fc:
         9b:af:a9:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:45 2024 by rpki-client on console-ams.rpki-client.org