Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
File:                     39e8376f-22b2-35f2-8504-c32896390d85.roa (raw, json)
Hash identifier:          uur+7ygDzAO0aBYO4G9TlXGaMD4sPh4Uez9CffoC+PI=
Subject key identifier:   C1:38:48:5B:80:CC:93:91:45:3C:CB:66:0E:F3:93:38:4E:F2:43:E0
Certificate issuer:       /CN=0e307b23-6715-4f4e-8e81-99854b623d2d
Certificate serial:       010D0C9F4328584769D0E0B48F27E3801D283D80
Authority key identifier: 58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     397668
IP address blocks:        23.165.56.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:e0:b4:8f:27:e3:80:1d:28:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e307b23-6715-4f4e-8e81-99854b623d2d
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=e287c524-510a-478e-9041-49b8a8f1c03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:83:41:e4:30:3a:b1:50:d7:c2:5c:b6:f5:
                    5f:aa:22:7c:ce:56:5e:7e:5e:0a:5d:8d:11:a0:64:
                    7b:97:7b:a6:bc:d5:41:11:a6:7a:e6:e3:1c:7c:1f:
                    6d:48:ba:11:0d:7c:85:75:3a:9f:f5:c3:4a:58:25:
                    15:41:50:e6:66:e0:1f:ed:2f:85:14:e1:a5:5d:a1:
                    fc:ac:fd:4e:b6:56:98:f5:70:07:49:5b:e5:a7:c0:
                    11:e5:e5:66:21:8e:8b:b9:95:65:4a:f8:71:68:6f:
                    ef:64:19:10:a1:1e:09:33:68:d8:0f:de:19:57:dd:
                    7d:ee:d6:ed:5d:76:49:21:1d:9f:99:06:e3:70:56:
                    60:6b:8b:b6:65:be:d6:d2:0c:95:a8:c2:69:07:76:
                    af:fc:a2:de:5d:dc:b0:77:58:4a:cd:d6:01:5a:b6:
                    a2:dd:c5:8b:d0:45:b9:c9:45:ee:06:c6:4b:08:29:
                    9e:11:4c:b3:87:77:30:7e:a3:4a:a9:4e:d4:e8:b0:
                    80:c5:86:3a:4c:f6:ff:13:52:08:d1:f7:ae:94:54:
                    61:82:1e:d5:ce:7f:f6:f5:ef:96:31:23:63:82:86:
                    c5:d0:a2:02:fc:de:8e:83:d7:e3:11:2c:09:e9:72:
                    3d:2a:98:be:bb:06:b7:c4:06:1c:5f:6d:e3:aa:8c:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:48:5B:80:CC:93:91:45:3C:CB:66:0E:F3:93:38:4E:F2:43:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl

            X509v3 Authority Key Identifier:
                keyid:58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5d:59:04:33:c0:a6:a2:ff:7d:6c:eb:1f:02:34:09:19:86:
         c8:c2:80:31:c5:7b:ae:06:ec:85:e3:26:03:6e:77:c0:28:3a:
         12:02:c8:80:60:15:8f:8c:02:e9:7e:23:57:9f:f7:80:cd:0f:
         ff:10:5b:60:1d:8b:87:8b:99:34:3f:53:97:c1:e4:3b:4a:58:
         95:0e:b9:9a:b8:b7:1f:6b:63:aa:b4:c5:5f:26:e0:e3:cc:c4:
         1f:1b:d6:44:60:27:0d:53:77:64:3d:66:bd:1e:7f:62:cf:86:
         e5:43:48:61:e4:0f:c5:50:57:6e:00:ad:bb:2c:31:ab:b5:1b:
         eb:c2:a0:7c:99:86:86:1f:15:70:2d:92:8c:6c:3f:09:2c:8c:
         da:de:19:b5:19:b2:e3:b6:6d:74:b6:d2:9b:b4:34:44:32:1d:
         b2:72:77:cf:03:74:41:0c:54:22:19:58:2b:9c:c4:ba:94:23:
         df:14:4b:10:63:f5:1d:52:4f:e2:b3:36:49:e6:f3:20:77:aa:
         b6:4a:5a:25:e0:97:19:50:3b:9c:8a:9f:cc:18:e3:45:75:a5:
         7e:90:17:09:ca:4d:73:66:55:b7:07:20:2c:da:bc:1b:68:33:
         7d:72:7e:5e:e3:55:40:c2:8b:94:dd:f3:b9:50:b5:1f:3e:cf:
         01:a8:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org