Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/4fc79741-a915-3754-b946-7f0fffc99d9f.roa
File:                     4fc79741-a915-3754-b946-7f0fffc99d9f.roa (raw, json)
Hash identifier:          RwDfKJ+xjLsR3TnUz7TXsh7LIcaTZfobGvRls2zdvGY=
Subject key identifier:   35:87:46:64:03:9C:4A:0C:47:AC:C5:B9:70:96:06:90:53:15:C6:10
Certificate issuer:       /CN=5b959ce4-3ae9-4721-8444-22b2e7161104
Certificate serial:       010D0C9F4328584742BB433E2BBC9B4309373D98
Authority key identifier: F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/4fc79741-a915-3754-b946-7f0fffc99d9f.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     32109
IP address blocks:        23.137.128.0/24 maxlen: 24
                          23.137.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:43:3e:2b:bc:9b:43:09:37:3d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b959ce4-3ae9-4721-8444-22b2e7161104
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=90145b81-1ba7-466d-a49e-8fb2892e2fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:56:b2:1e:f6:ac:0a:6c:b3:56:84:a3:4e:55:
                    91:f7:6d:2b:0c:c4:4c:0f:28:08:a1:e9:65:09:44:
                    09:f3:f9:7d:ff:b1:d8:b2:10:36:0c:29:86:ea:fe:
                    8d:99:72:d9:80:7c:8a:a3:65:34:f4:15:a3:0c:27:
                    2a:8b:ec:22:53:f0:37:a3:42:2c:9b:04:7e:01:28:
                    6f:96:d5:b1:17:bf:de:9b:bc:31:65:5a:d2:cb:6d:
                    60:0b:50:0d:ac:2e:8d:18:c3:e4:1c:b0:4b:74:59:
                    3a:93:93:c2:8e:16:71:94:4b:47:2c:b5:93:1f:e1:
                    67:5c:9f:82:c3:04:8d:97:33:a3:49:40:2f:46:cd:
                    be:89:d9:db:6a:21:eb:fb:62:97:49:cc:ee:9a:e8:
                    0d:9e:ad:12:96:10:89:dd:04:62:2b:d9:81:83:5a:
                    3f:35:5d:7c:e1:11:65:b1:09:5e:e0:b6:53:b5:99:
                    7d:6c:cb:4e:18:b1:7e:36:7e:1d:3a:98:02:a3:91:
                    a2:f1:54:15:82:a2:88:9f:55:5c:93:91:e0:dc:11:
                    47:3e:5b:7f:57:56:20:15:53:20:cf:28:f6:e7:4c:
                    02:28:b2:0a:41:95:6c:6c:df:61:7c:fa:10:f6:5f:
                    a1:b5:64:f9:22:c0:c4:a1:c5:e6:fa:ce:d3:94:24:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:87:46:64:03:9C:4A:0C:47:AC:C5:B9:70:96:06:90:53:15:C6:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/4fc79741-a915-3754-b946-7f0fffc99d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104/5b959ce4-3ae9-4721-8444-22b2e7161104.crl

            X509v3 Authority Key Identifier:
                keyid:F7:04:0B:E9:9B:F2:56:71:7F:ED:45:FE:D5:1E:7E:0A:FC:8F:D5:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b959ce4-3ae9-4721-8444-22b2e7161104.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e9:39:40:c3:01:57:ce:1f:ad:7a:9d:c6:d6:aa:0a:a5:a5:
         28:17:4a:2b:37:04:52:93:31:9b:d4:8b:fd:c5:fb:ed:94:f9:
         a8:0d:ed:1f:99:b7:b2:9d:76:f9:f4:85:f1:da:e2:99:12:ef:
         d2:c3:77:e3:96:c1:4d:b7:92:f6:86:53:44:2e:ce:be:3a:6c:
         c7:24:93:33:47:00:5e:d0:8f:7f:8b:55:21:82:a2:81:4f:fd:
         eb:c5:ac:bd:c7:8d:4a:33:49:a0:1c:8b:a8:ab:fa:4d:36:5e:
         73:61:86:6e:22:12:35:2f:95:6e:85:0f:e9:b0:45:c3:a1:55:
         2b:28:cc:98:78:b2:2e:8f:f3:21:a4:35:76:55:c8:e2:16:81:
         e1:dd:c6:c4:3b:f7:a5:0a:f4:f7:bd:e3:ce:95:73:3e:65:19:
         c0:16:21:3b:8b:66:17:f1:45:6b:08:7f:4d:4b:24:ba:ac:4c:
         f7:0b:ea:dd:1a:5a:22:48:22:ea:b8:fc:52:fc:e5:19:e0:11:
         53:60:b0:74:24:61:36:71:af:41:b2:eb:98:02:eb:df:2d:8f:
         21:26:1b:37:82:27:40:e0:3f:3b:75:c5:83:8c:a1:1b:0b:cd:
         0a:75:f4:76:cb:1f:77:bf:ad:c6:ee:7b:91:c2:1b:b0:0d:06:
         97:c5:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org