Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
File:                     9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa (raw, json)
Hash identifier:          k0jfwqmaZ9w9AV+Y5OpRC2e6EroCf7Slk6ejZGThdJs=
Subject key identifier:   1B:5E:5C:47:9F:2F:8F:22:6D:4B:CC:8D:03:08:97:40:DF:9B:B9:DF
Certificate issuer:       /CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
Certificate serial:       010D0C9F43285847CD09F51589281BD7273D4380
Authority key identifier: FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     20091
IP address blocks:        23.132.64.0/24 maxlen: 24
                          2604:6c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f5:15:89:28:1b:d7:27:3d:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=81cc5832-dd61-4e3a-9f84-bb83331c8434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1b:65:09:29:07:b7:fc:25:3c:e3:34:7d:54:
                    f5:8d:e3:c1:e1:f6:18:61:66:f9:dd:73:e7:19:fb:
                    c6:6c:23:d3:de:bc:c9:28:f8:8c:ec:35:d5:a9:37:
                    36:75:74:ff:1c:94:67:ba:4b:27:0c:d1:64:50:f0:
                    d0:39:c6:a9:cf:67:2f:89:7e:57:10:2d:42:e7:f3:
                    6f:24:f0:9e:f7:14:be:02:12:aa:db:72:1a:49:de:
                    17:e6:b4:b2:28:a5:b7:21:30:6b:cb:57:15:4e:f3:
                    04:fc:8e:55:b6:ed:b7:ff:6a:89:59:d6:5c:95:5f:
                    70:77:a6:99:ff:fc:d8:c1:de:8a:c8:6d:b7:8e:41:
                    f7:0d:e3:b4:15:2f:dc:e6:b9:e8:4f:e1:42:16:d8:
                    59:b1:83:09:4b:9f:ba:af:90:f0:38:5c:bb:b4:61:
                    11:d8:10:ec:9c:be:dd:96:56:d8:a2:32:f6:44:aa:
                    e8:ae:a9:1e:5e:83:55:93:8d:d0:ad:55:66:97:73:
                    29:66:99:a0:a8:8b:a2:ed:fb:71:b4:2e:65:19:db:
                    d0:ad:97:fe:bd:3d:64:69:bc:52:22:58:c4:61:e3:
                    b8:e7:0c:60:86:6e:af:13:44:61:89:c9:73:0a:b2:
                    a5:c3:23:d9:52:14:83:47:a1:66:c0:54:c1:17:cf:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5E:5C:47:9F:2F:8F:22:6D:4B:CC:8D:03:08:97:40:DF:9B:B9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.crl

            X509v3 Authority Key Identifier:
                keyid:FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.64.0/24
                IPv6:
                  2604:6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:28:49:49:4f:06:cf:9c:b6:62:61:8d:77:69:31:92:ca:
         4f:8e:f9:62:e9:80:a4:a0:16:bb:07:85:b8:cd:82:37:4c:ef:
         43:c5:bc:fc:c4:4d:9d:e7:e8:fe:6a:ca:ab:25:1b:40:b6:1a:
         03:8f:3c:ac:53:c6:bc:f1:bd:2c:dc:0b:ab:00:6b:2b:81:08:
         83:b9:75:c7:cc:cc:1d:dc:c5:bb:37:aa:de:9d:6c:68:a1:a3:
         5c:1c:d3:fa:30:12:00:57:8b:ab:43:5e:fe:04:6e:c6:f1:e3:
         60:27:35:18:2e:c1:c7:ac:9f:c5:c2:b3:82:83:be:f5:83:36:
         4b:79:e5:96:c8:f7:06:af:97:2f:aa:3d:5d:55:4c:b3:0a:29:
         6a:cc:a3:c4:36:50:1e:cc:8d:29:4a:8b:d3:92:16:e7:f0:4f:
         67:fa:fc:f2:34:0c:d2:0c:92:f5:2a:8b:6e:83:e5:c2:dc:01:
         d3:8b:04:54:19:36:8d:59:e0:e7:89:60:7d:24:68:9e:9b:19:
         80:06:97:62:aa:f2:92:b5:13:b1:df:1d:af:d3:5d:6a:de:5b:
         e3:46:d0:fc:dc:6e:96:f1:df:f9:dc:0b:66:16:b8:eb:3e:4e:
         5e:da:b3:0d:85:b8:39:fb:60:33:54:24:3a:ca:16:38:07:38:
         45:0d:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:16 2024 by rpki-client on console-ams.rpki-client.org