Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/6b36aaa4-c70f-33d8-8c1a-7509702c2d73.roa
File:                     6b36aaa4-c70f-33d8-8c1a-7509702c2d73.roa (raw, json)
Hash identifier:          Hktman6vfJsnt/eK5YExJOBBO9twxBGthzBMzPOrZbw=
Subject key identifier:   42:A9:6A:70:E7:34:4A:12:E6:3D:63:84:53:46:F3:7E:8C:9D:2E:16
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F4328584754E0CB9A20A9460BCDE54740
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/6b36aaa4-c70f-33d8-8c1a-7509702c2d73.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     19529
IP address blocks:        23.164.144.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:cb:9a:20:a9:46:0b:cd:e5:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=3d80a075-131f-4dcc-9e1a-76c0875c80c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:36:e6:c0:6f:5f:1f:61:1c:fc:dc:91:72:
                    75:d7:bc:cd:0e:36:6a:8d:11:f0:9f:7e:6c:80:f0:
                    52:cc:4c:e1:60:c4:97:a1:a4:67:31:2b:16:6a:40:
                    3c:59:55:d8:f7:ba:34:65:37:41:78:8d:6b:d4:32:
                    09:e3:5d:30:73:13:68:02:a4:57:f7:d1:46:ff:70:
                    b0:f4:34:ed:92:20:9f:db:61:e2:35:38:7d:19:c2:
                    e3:b8:86:77:57:ae:b6:5b:8e:09:b8:e6:25:b0:6b:
                    7f:11:48:e7:4f:33:5f:c5:0e:88:70:f1:a9:c2:5e:
                    16:dd:c5:ac:0f:2b:f5:da:f3:56:6f:c4:6b:98:6e:
                    b2:a1:19:1f:91:fc:a7:bb:ac:cc:13:2c:d9:ef:87:
                    70:f9:fd:6f:e8:e5:32:36:d2:ea:2e:3d:74:34:58:
                    87:14:02:2b:e3:a7:16:a6:50:0f:fb:30:5a:7d:57:
                    75:03:db:0e:b3:d6:02:43:d1:6e:ba:c8:6a:e1:6f:
                    1d:88:b7:1e:fd:75:d5:0d:59:93:c8:d1:95:c3:2a:
                    85:19:57:50:3c:71:e2:22:9f:95:dc:8a:d3:ee:08:
                    d1:fb:9e:6d:55:6b:ba:01:e7:15:f7:d5:36:75:0e:
                    c4:56:91:11:e1:9e:ed:02:eb:fa:44:44:42:f7:28:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A9:6A:70:E7:34:4A:12:E6:3D:63:84:53:46:F3:7E:8C:9D:2E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/6b36aaa4-c70f-33d8-8c1a-7509702c2d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:da:03:02:d6:53:aa:06:a3:36:24:93:bb:4d:8d:6f:31:26:
         53:af:26:f6:e0:69:3b:63:17:f9:42:b7:88:9f:92:fa:9a:d1:
         3c:a1:fb:5e:8f:be:c6:52:d3:c2:ca:78:64:79:e7:9d:7e:52:
         82:1f:8f:df:1b:bd:2c:24:05:a3:65:fc:3b:72:cc:5a:e5:e6:
         a5:fa:86:45:c3:e5:ce:ed:df:9e:16:8b:03:d7:91:5c:a5:fd:
         9c:2d:b0:77:37:c0:53:b6:35:7e:d4:59:f1:95:fe:af:9d:96:
         45:fc:31:d2:92:29:26:d5:a8:8a:55:7c:39:0c:82:3d:2b:e4:
         08:01:43:61:95:f0:ca:3f:28:ac:fb:0b:94:bb:fd:84:b7:38:
         71:3b:94:0c:f4:7a:40:b4:96:f1:c2:4a:3a:0d:a4:e9:d7:dd:
         0a:10:75:d9:b4:07:33:27:59:51:f6:01:6c:d1:2d:3e:93:d4:
         64:ed:4e:38:a0:1e:93:d2:20:60:7e:b9:5f:7c:97:06:a5:7e:
         d1:af:59:fc:7f:cd:12:fb:f9:13:5b:4c:5d:02:42:49:87:fc:
         51:e7:85:6e:91:bd:66:3e:a3:95:a8:21:be:06:a3:60:48:58:
         6b:2e:ad:58:9b:0a:a1:83:d2:6b:e9:25:90:a9:e8:33:e0:07:
         e4:2e:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:16 2024 by rpki-client on console-ams.rpki-client.org