Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
File:                     3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa (raw, json)
Hash identifier:          7g0xv/19i3BjvPJ/67kRMyGzp3AttbLDWlSuC8SIebQ=
Subject key identifier:   97:68:47:36:43:E8:0D:CE:AA:53:3C:6B:96:BF:C7:2D:6E:4A:2E:F0
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F432858474F485703DCBC89DC444A91C0
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
Signing time:             Mon 23 Sep 2024 12:54:34 +0000
ROA not before:           Mon 23 Sep 2024 12:54:34 +0000
ROA not after:            Sun 22 Dec 2024 13:54:34 +0000
asID:                     149020
IP address blocks:        23.131.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:48:57:03:dc:bc:89:dc:44:4a:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Sep 23 12:54:34 2024 GMT
            Not After : Dec 22 13:54:34 2024 GMT
        Subject: CN=3ff681c8-e33a-41ab-99e6-b7c0bf95c08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:b6:0a:99:d3:0e:eb:1d:c5:d8:a3:ee:75:
                    a5:47:88:8a:7f:f8:7a:2d:40:4a:9b:10:25:f4:8f:
                    13:ca:26:d9:18:77:0b:b3:0b:1a:7a:c1:71:6c:c3:
                    3e:95:21:de:96:9e:4a:41:78:02:3a:d0:ab:39:6e:
                    50:f1:8d:ac:1f:a7:32:c6:4b:93:d5:46:8f:65:2d:
                    3b:94:3c:a6:87:ca:5c:8d:8b:0b:2f:30:3f:ec:9f:
                    e3:22:46:c9:89:9a:77:65:3f:7d:ee:0f:93:3b:1d:
                    85:4a:ff:d4:d1:21:07:5f:70:c0:27:46:99:b8:ce:
                    62:f4:3d:74:3d:04:81:94:c4:d5:98:82:66:24:35:
                    01:bd:94:92:41:4b:c7:7b:38:68:09:1f:22:6e:c2:
                    76:17:3e:ed:e7:ba:14:cd:2b:15:24:16:08:49:db:
                    f8:ac:7a:d6:f0:b3:38:1a:0d:10:d9:b5:3f:d0:b5:
                    04:b1:d8:59:e0:13:e0:81:8b:cc:a9:23:77:d9:2e:
                    c3:0e:e1:c2:38:37:a5:7f:74:75:d3:3c:82:e2:87:
                    20:ef:e2:dd:d4:1b:96:3d:1b:a9:c0:81:cc:33:aa:
                    11:29:7a:6f:5a:1d:20:35:2e:b3:7c:f9:9e:0f:cf:
                    d4:a6:20:d7:68:b7:f7:8a:78:2c:99:c9:77:c2:bc:
                    ba:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:68:47:36:43:E8:0D:CE:AA:53:3C:6B:96:BF:C7:2D:6E:4A:2E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:88:4e:9c:e1:d0:c8:f5:18:a4:67:9f:4c:b3:66:80:7f:aa:
         24:0a:fd:9b:85:79:60:7e:aa:bf:72:fd:0b:ac:97:b4:fe:f0:
         af:9f:ad:8b:1d:f5:ad:d1:b3:2c:36:97:9b:1b:55:18:3f:22:
         1f:78:89:de:aa:85:a7:c0:ca:5e:3f:d9:73:69:be:76:9c:29:
         93:57:01:72:7d:a1:53:ab:79:c6:73:57:09:8e:cd:3f:e8:1b:
         3f:17:3a:45:e9:4c:10:81:60:82:fc:86:3a:c7:b2:84:2a:27:
         8f:e8:53:b9:52:ba:95:8c:3e:3d:f5:36:21:78:ae:ce:95:75:
         92:2c:80:23:39:57:9f:aa:e7:95:74:d6:ac:73:f1:e8:fc:6b:
         11:3e:81:6a:8a:63:a8:07:d2:76:d5:d4:75:27:17:26:24:d7:
         20:2c:93:9d:88:36:c2:65:77:be:97:52:87:66:ee:ab:cf:a1:
         42:2d:b9:ec:d1:c9:91:03:19:96:ee:c6:64:1b:36:50:fa:0e:
         6f:08:ea:5d:da:29:b6:36:08:36:0e:53:f7:16:e1:35:33:d4:
         24:7d:be:14:1b:c3:0e:b4:38:28:d6:a1:b8:b0:00:98:0e:4c:
         f5:dd:d0:f0:68:b2:d5:a4:e0:c6:f4:d9:2e:5c:1f:81:0b:ca:
         ea:70:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:17 2024 by rpki-client on console-fra.rpki-client.org