Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
File:                     d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa (raw, json)
Hash identifier:          DOqq36XWUQYj9wlC7mlHPnWlC9bMHVGiK4EbHaEcr30=
Subject key identifier:   0D:9C:14:FA:67:DB:08:D3:B4:5C:6D:A8:D8:9D:6B:08:23:68:1D:E4
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F4328584726D075E9C1FEF80AE1A97200
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     19879
IP address blocks:        23.169.88.0/24 maxlen: 24
                          23.169.89.0/24 maxlen: 24
                          2602:f9a6::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:75:e9:c1:fe:f8:0a:e1:a9:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=b9e18b33-60b3-4ce1-a7b7-73db28d98230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f6:31:a8:bd:16:0c:d7:9f:64:35:12:ce:e0:
                    52:03:0a:a9:e7:01:85:72:be:1c:ba:03:64:e2:c5:
                    34:50:70:81:b2:6f:e0:9f:83:5b:b4:24:11:eb:b2:
                    8a:98:34:da:03:75:84:c4:0d:91:77:49:1e:3e:ab:
                    b6:27:27:83:37:4d:8a:19:11:58:b8:b4:58:4c:17:
                    9f:1e:fb:3e:aa:e8:3f:df:8f:0f:ff:c8:2e:13:da:
                    6e:9a:e5:88:a7:42:45:2d:46:96:96:d1:35:93:6f:
                    90:11:14:b3:14:bd:f7:e5:3c:2d:cd:0e:8c:72:59:
                    0b:72:07:8d:a2:d4:9d:d3:6c:ff:8e:6c:37:ce:4e:
                    0e:8d:29:b3:cd:c4:4a:ff:0e:e8:98:b3:c9:fd:63:
                    72:5a:a6:2c:8a:3e:46:f4:50:19:09:d3:8e:9f:57:
                    76:17:25:81:df:c3:76:84:5a:33:e2:07:b0:93:8a:
                    b8:85:2d:ea:a5:4e:05:e2:f6:43:47:84:a7:13:b9:
                    0e:64:ff:c2:bd:1a:9b:2a:b6:65:82:64:aa:b9:7c:
                    b5:30:10:e7:37:af:19:a5:eb:99:fa:43:b8:68:f3:
                    53:12:94:4a:b9:06:e0:09:31:89:b5:2a:2d:75:18:
                    0e:41:90:cc:b4:68:e8:00:12:63:67:2e:bc:50:c0:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9C:14:FA:67:DB:08:D3:B4:5C:6D:A8:D8:9D:6B:08:23:68:1D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.88.0/23
                IPv6:
                  2602:f9a6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:c1:e4:a4:e5:6e:9e:52:a3:23:fe:6f:2a:ca:f0:ec:a2:e3:
         13:f8:6e:73:ab:62:1b:f6:67:e1:05:38:69:0a:3a:8d:7e:43:
         9b:00:76:59:91:77:2d:25:d1:9f:87:6e:4e:88:3e:16:b2:95:
         38:d8:8c:14:49:6b:28:78:b5:08:b2:42:96:52:23:c5:58:c1:
         7c:09:e7:3a:1d:2c:04:f8:a3:9f:30:f0:00:cd:35:60:60:a4:
         e6:9f:7e:fe:b8:4e:46:fe:96:18:2c:0a:19:10:fe:68:4c:cc:
         67:25:80:d9:da:f9:1c:f5:55:31:38:a9:de:82:a5:5f:3e:ec:
         e9:a4:38:b9:68:16:0d:c0:d9:48:1e:84:28:06:82:fe:15:5c:
         fe:93:69:70:80:94:79:79:1e:42:67:b6:da:16:55:51:49:f2:
         1d:78:10:61:37:b6:e4:49:33:ac:5b:55:2d:fb:39:fa:89:75:
         a6:d4:01:c4:e9:55:ee:f9:86:6d:ad:93:06:df:03:fc:9a:9b:
         5f:23:da:e3:1e:fd:ea:b9:fb:85:6f:79:91:24:7d:c9:c6:03:
         e3:d8:13:28:97:de:3a:0f:cb:52:2c:cf:90:81:b5:ba:4f:2b:
         b2:e1:62:40:34:d6:e6:f2:7f:0c:a9:4b:34:9d:4d:50:76:a2:
         87:03:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org