Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa
File:                     724eaedf-d166-39d4-84e6-c3434f2a41dd.roa (raw, json)
Hash identifier:          FctpOKRwM4gpZtWICJJMVLJTUu6nDMo5Q6s3HJ+VbiM=
Subject key identifier:   AA:F9:19:67:6B:B3:2F:3F:85:AF:B2:A3:B1:75:AA:59:5D:8E:13:69
Certificate issuer:       /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial:       010D0C9F4328584733609401C9B632BAF60A8400
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        23.29.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:94:01:c9:b6:32:ba:f6:0a:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=d41a1d24-649c-4024-8556-4da82ff56f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:80:62:9f:6a:39:60:da:8f:cb:e7:77:21:
                    17:da:87:ea:a1:93:71:3c:10:3b:7b:f0:5a:fd:e6:
                    b0:60:24:28:c4:54:05:67:57:8e:18:c1:ad:de:7c:
                    d6:76:8b:71:ba:3a:4b:3d:8d:18:51:21:ca:28:76:
                    77:43:75:0b:ae:de:5e:5b:78:6f:37:63:bb:03:45:
                    c9:6d:09:6f:44:c6:73:69:67:3d:9b:d6:2a:62:e8:
                    87:18:20:d4:2c:43:bd:77:4a:6b:62:a4:8b:76:ef:
                    15:85:84:a6:ed:83:9f:65:49:e6:96:bd:c6:95:c8:
                    c5:09:9f:60:82:59:ff:38:e9:48:01:07:1b:8b:8d:
                    36:10:bb:6c:d1:69:51:ce:fc:c2:a8:d5:d7:8b:da:
                    70:e1:e6:c6:60:e7:1e:80:2e:60:b0:d1:b6:bd:2d:
                    e5:d1:66:20:14:a1:24:bc:a1:3f:8e:df:6d:c3:e3:
                    c5:4d:22:6f:c7:31:ca:1a:c7:62:7b:45:20:cb:c1:
                    5d:34:2f:0c:d6:24:79:ea:0a:17:f0:2d:ba:e9:48:
                    74:99:72:39:6a:c2:0d:dc:87:e0:96:a1:8e:bd:4e:
                    5a:99:06:9c:18:36:25:6c:f2:9a:b7:a5:23:f3:86:
                    79:44:ad:4c:e1:5d:b5:29:28:2a:29:73:24:4d:84:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F9:19:67:6B:B3:2F:3F:85:AF:B2:A3:B1:75:AA:59:5D:8E:13:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl

            X509v3 Authority Key Identifier:
                keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.29.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:af:16:fe:cc:23:82:9b:57:6a:d0:67:fc:64:a5:3f:c1:
         c0:43:3f:bb:39:41:e7:98:d2:2d:07:31:8b:4f:84:cc:a6:ef:
         4e:64:e6:f7:28:96:db:99:e0:a2:21:39:20:c4:f4:62:c9:9d:
         db:83:52:d8:80:44:f8:ed:7c:b5:94:8d:b5:19:d9:f1:36:dc:
         73:38:9f:26:1d:94:28:21:46:08:96:30:8d:51:85:36:16:95:
         da:1a:8e:ff:d7:bf:57:7d:32:96:b0:8c:6b:a8:28:0c:c1:73:
         d8:b4:2b:af:81:83:a8:2a:04:dd:81:b0:46:94:5f:9f:a3:9c:
         48:c0:d6:0f:bd:e6:f4:92:a3:4d:6d:3c:9c:7d:43:e8:17:0c:
         5f:e2:82:8f:56:fb:2e:26:39:34:a2:dd:ac:15:e4:48:d0:98:
         d1:52:75:87:b8:eb:f1:8f:a2:72:0a:8c:6b:e6:4f:e0:11:21:
         87:ad:bc:c7:d7:23:68:cf:d3:83:d6:7e:37:6f:5a:24:19:05:
         35:de:88:16:13:3a:e7:43:c0:92:57:25:a3:1c:f9:4d:95:6b:
         e0:75:5f:05:5f:31:04:39:7e:7f:0c:d7:1e:de:eb:e2:c6:2b:
         dd:40:a5:49:e5:54:db:af:60:04:f9:0f:c8:f6:4c:a2:7e:f0:
         65:8b:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org