Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa
File:                     f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa (raw, json)
Hash identifier:          XO1kR8JduDZjSu1cNjDLcTL6lQKAZsNQY97DudXhNCA=
Subject key identifier:   0C:D6:25:59:B9:5D:38:55:8D:9A:6F:99:80:7F:B9:9D:76:9A:24:AF
Certificate issuer:       /CN=53672676-56d0-4921-8e86-0b820202ef6c
Certificate serial:       010D0C9F43285847766109DD96A6CDC84039A940
Authority key identifier: 7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     32913
IP address blocks:        23.174.232.0/24 maxlen: 24
                          207.90.242.0/23 maxlen: 24
                          2602:f944::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:09:dd:96:a6:cd:c8:40:39:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53672676-56d0-4921-8e86-0b820202ef6c
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=a63be144-0d03-465c-867c-2198f5b303cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:ab:c8:a8:73:63:0b:67:eb:1a:66:d7:6e:
                    5a:5f:a3:25:e4:88:fb:96:cf:bb:6a:79:46:82:9c:
                    9f:f2:92:71:d0:5f:f3:29:d1:f9:d5:a1:5d:f0:c6:
                    49:84:7c:2a:16:71:91:5a:8e:9c:56:82:cb:ed:fe:
                    3f:69:ad:7e:ec:66:25:58:74:70:fe:c7:1f:e1:bc:
                    27:60:fd:26:86:0d:92:ac:ef:ce:67:db:06:ea:e6:
                    be:b6:67:47:68:45:d2:01:2e:ec:72:98:61:a8:2a:
                    ca:c1:67:3d:9e:1e:57:ee:5c:6e:69:1e:aa:61:60:
                    a0:e8:d4:11:c6:36:75:3d:67:47:52:fc:e0:b3:5d:
                    7a:48:e8:5d:d6:e4:99:86:3a:31:2c:3d:0e:36:85:
                    36:33:68:75:9f:bc:df:6d:ec:35:5d:a4:b4:ca:c7:
                    dd:23:7a:49:fb:a9:7f:34:7c:a4:83:cb:86:4c:c7:
                    d4:ed:e1:18:e4:e4:c8:fa:a9:66:e7:78:8e:97:43:
                    1a:7e:2e:36:b8:08:02:7b:bd:0e:f6:22:e9:d2:ef:
                    f8:b6:40:2c:fd:8f:32:82:5a:39:cd:fe:8c:7a:d7:
                    34:2e:81:e7:92:aa:b9:c8:b6:6f:5f:0b:ee:07:47:
                    16:0b:0a:e9:61:36:6c:23:25:05:60:d7:d6:5b:0d:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D6:25:59:B9:5D:38:55:8D:9A:6F:99:80:7F:B9:9D:76:9A:24:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/f39d8138-9af7-3a44-97f6-668c0cfe35b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c/53672676-56d0-4921-8e86-0b820202ef6c.crl

            X509v3 Authority Key Identifier:
                keyid:7E:1A:39:BE:17:56:D6:2C:72:4D:1E:4C:41:C3:9C:00:0C:0F:4A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/53672676-56d0-4921-8e86-0b820202ef6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.232.0/24
                  207.90.242.0/23
                IPv6:
                  2602:f944::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:0b:94:23:3b:0d:b4:d8:f0:fa:b7:b6:79:57:65:e6:7e:
         37:87:21:8d:39:25:62:bc:6c:a1:17:0c:63:35:fe:dd:89:a2:
         aa:f7:12:0e:ca:01:43:c5:e4:39:ec:3f:86:40:b0:71:d6:29:
         09:41:65:17:6a:e2:41:64:10:5b:a4:67:43:59:3d:18:27:6d:
         29:93:83:9a:e6:df:d5:80:1e:84:18:fc:28:be:fe:4e:16:bc:
         d9:35:78:d1:79:3c:29:64:29:47:bf:a2:2a:7c:51:c6:29:5c:
         f6:6e:b7:53:fc:8e:55:86:e0:86:af:01:91:99:91:ac:aa:97:
         e8:3b:34:34:8c:2d:61:8a:5a:43:fd:ad:e6:04:38:68:d8:c5:
         1c:46:3b:1a:a4:53:17:0d:8e:2f:18:9e:27:38:d1:64:6b:2b:
         5b:db:d7:6c:c4:1b:14:d4:f7:09:36:1a:a3:9a:a6:34:98:c2:
         17:e4:d9:ea:6d:9f:9f:78:76:c9:64:9e:c4:69:5b:e0:13:54:
         99:fc:e9:d4:94:e9:c2:9c:12:84:2d:99:1a:a5:fd:ed:c2:f0:
         37:5d:9f:7a:b6:f4:dd:7d:d5:74:04:3b:0a:33:a9:88:3b:f5:
         32:ac:62:0b:28:6c:91:fa:19:29:7f:42:ed:74:10:40:5b:90:
         cc:3e:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org