Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa
File:                     fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa (raw, json)
Hash identifier:          HqO52jFAEvgmBYP3EAA+g18phaG8g2eq9dcGtAwXM+A=
Subject key identifier:   DB:FE:CB:58:16:2F:59:7A:7C:3D:7B:B8:A9:DE:59:C2:14:5C:A8:C9
Certificate issuer:       /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
Certificate serial:       010D0C9F43285847B696B33FE2ED5AD6E9A3DB00
Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     393224
IP address blocks:        23.128.98.0/24 maxlen: 24
                          2620:137:e001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:b3:3f:e2:ed:5a:d6:e9:a3:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=37e50201-a529-4fed-9ac2-85592df5e1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:ad:75:3c:5b:fa:c4:d3:07:e7:4d:5b:38:
                    95:59:b7:d0:29:3f:33:3d:5e:96:6d:ec:a4:68:08:
                    bb:43:2a:67:53:9a:0c:18:88:e4:32:43:1a:cb:f8:
                    19:09:71:85:c8:57:c4:c2:98:32:b3:e8:72:73:ab:
                    d5:14:a4:fc:e8:b9:32:78:72:ef:1a:61:80:90:fb:
                    70:fc:c6:86:65:c1:d8:75:c8:3a:9a:f9:8e:db:20:
                    45:fa:73:71:25:1e:cf:ce:36:5f:2e:45:86:a9:19:
                    3e:4d:18:fb:bb:8c:ea:4c:da:4d:68:70:10:2b:dd:
                    db:eb:17:97:89:7b:14:39:99:13:06:ff:ad:53:8d:
                    8d:36:76:b9:9d:b5:b7:3d:80:ae:c7:a5:fb:04:e2:
                    5e:da:96:57:51:21:b1:e0:94:22:6b:b6:af:03:10:
                    cd:a2:de:b3:2a:8a:31:a1:02:87:b9:39:2e:aa:ed:
                    89:00:3b:12:09:44:53:a1:7b:fa:6a:b4:69:41:e4:
                    3b:26:18:c4:57:f8:66:5c:6c:8f:a8:dc:fc:fc:a9:
                    18:db:6a:d7:c9:7d:03:92:7d:ce:25:c4:ac:e8:87:
                    6a:6d:b1:e1:59:d7:c1:b5:32:0b:9c:99:92:0f:76:
                    ed:4d:5b:af:da:e9:5b:bd:d0:eb:00:e1:68:fb:d7:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FE:CB:58:16:2F:59:7A:7C:3D:7B:B8:A9:DE:59:C2:14:5C:A8:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl

            X509v3 Authority Key Identifier:
                keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.98.0/24
                IPv6:
                  2620:137:e001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:24:61:f8:1b:f8:c5:41:6a:02:6d:c7:e0:9b:23:2c:6a:d7:
         97:53:5c:cb:7a:4c:6c:fa:f1:83:ce:7b:89:26:3c:3a:28:21:
         41:a6:1a:13:ac:d8:75:a2:df:81:e8:d3:c8:7f:65:70:49:36:
         13:8f:1d:25:42:4e:cc:1b:30:99:64:7b:3f:a4:66:91:24:36:
         d6:7a:b1:4c:73:47:5a:6a:db:9c:ea:30:93:2e:85:f1:20:9c:
         9f:f9:c4:47:47:89:0c:39:91:1c:14:d9:a4:c9:4d:d8:60:02:
         b5:40:4b:67:f1:24:ae:01:14:3e:27:58:9a:ae:d7:82:b7:3e:
         fd:75:fa:f3:93:a0:3a:bc:4c:fa:2d:07:e9:19:e3:b3:e5:06:
         57:2b:7a:04:b8:47:bb:b6:d0:dc:88:7d:db:79:6c:c5:f6:35:
         07:56:4d:3f:e7:99:cb:15:c9:cb:1e:f0:cc:67:ac:11:5f:68:
         2b:86:6f:1d:87:c8:50:5d:d9:db:1a:f0:cf:26:15:29:3f:f6:
         6d:31:b9:e5:82:12:78:e5:ad:f6:74:0c:88:2a:35:3a:45:9e:
         f6:4b:6e:50:90:72:b4:a9:07:1d:60:5d:f5:f1:6e:b4:e2:97:
         0e:44:38:4a:f8:28:5f:46:bd:5d:3f:4f:82:35:0f:f6:fd:e3:
         67:09:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:08 2024 by rpki-client on console-fra.rpki-client.org