Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa
File:                     ea7ca2b1-e689-373f-a9ca-9e3008107917.roa (raw, json)
Hash identifier:          F/EJzE4IwQDp+50xJpzcUQm1Q2R39XbTdEb2/DC0xc0=
Subject key identifier:   88:2A:00:DA:51:60:8A:80:6F:14:65:FB:28:8B:3E:BB:13:A9:D6:09
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B6600064ADC2B31DF2C00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     28753
IP address blocks:        23.19.197.0/24 maxlen: 24
                          2607:f5b5:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:66:00:06:4a:dc:2b:31:df:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=38f419b5-392b-408c-b250-e5a5061479cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:59:9c:12:42:dd:29:5e:50:ed:e6:f4:be:
                    e9:bd:c3:d4:7e:1a:c7:28:d8:53:ed:5a:79:26:df:
                    5f:36:93:2f:62:68:6a:7a:d2:d7:2e:d8:bd:2b:c3:
                    67:6b:b0:19:65:2b:84:bb:e3:08:99:17:f1:f3:85:
                    88:f0:ae:2b:ea:7d:a3:f3:50:6d:e2:7b:17:22:6f:
                    f7:8b:c4:d3:82:27:e3:a0:79:df:ac:2e:26:76:8a:
                    35:8d:5d:38:eb:b0:4b:fa:df:28:fa:f1:1f:b1:75:
                    9e:5d:47:6b:fa:40:df:90:af:b4:a7:6f:40:4c:37:
                    38:68:f8:d4:4f:cf:54:6b:93:8a:2e:d3:8c:7e:15:
                    c1:3e:a5:55:1a:ad:20:14:8e:95:d8:45:63:df:7e:
                    82:d9:a8:31:98:54:b4:1f:9d:39:59:43:52:3f:66:
                    48:0d:a1:11:03:0b:8d:e0:7a:28:97:10:67:b3:06:
                    90:ed:17:39:8b:e2:76:cf:c9:2d:78:be:ca:ea:b1:
                    94:42:c7:ce:23:b4:37:ce:7b:4e:86:75:fe:ba:05:
                    5f:bd:c8:b5:10:09:4e:9f:5d:1b:69:2a:f4:4f:fe:
                    1e:3f:dd:fc:b0:e1:6a:9f:80:b1:2d:67:d9:c2:75:
                    ab:11:c2:63:9c:b1:7b:2c:46:5a:71:a5:7e:9e:d5:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2A:00:DA:51:60:8A:80:6F:14:65:FB:28:8B:3E:BB:13:A9:D6:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.197.0/24
                IPv6:
                  2607:f5b5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:c1:1e:bf:f6:e4:a2:9a:a9:bb:6f:67:ac:5b:77:91:ba:
         7d:97:97:62:29:dd:60:59:b4:1f:6f:9f:64:0c:9c:70:50:fd:
         ad:ee:2e:97:dd:2e:88:47:d3:ca:cf:d9:a7:83:b9:ed:e8:17:
         67:16:14:99:80:7c:77:48:19:8e:25:f4:47:e2:6d:8a:93:3b:
         30:4b:db:11:10:ad:d0:8d:c3:89:54:c7:45:06:cd:75:c6:ac:
         fd:e1:f1:cd:0e:57:c4:4a:e2:85:3c:d1:77:25:cb:03:b2:ce:
         57:2a:39:dc:d9:8a:6a:0c:cf:8f:e6:07:80:10:be:b3:cf:11:
         e8:c7:e3:e4:84:77:1f:1c:dc:2b:4b:26:94:e6:7c:39:3f:3f:
         d7:ea:29:f8:fc:f9:2a:9c:db:f3:0a:97:42:1c:7a:46:0b:cf:
         a8:37:ee:86:13:ac:ac:dd:e2:96:76:86:e0:80:1d:39:ef:0c:
         8c:31:14:f9:6c:4c:26:75:95:47:48:04:39:f7:c2:35:7f:39:
         79:97:fa:16:31:21:81:de:b7:8c:77:01:01:f4:b5:0d:c5:34:
         38:3a:0f:e5:f9:a7:c7:77:27:7e:5f:76:71:80:a7:dd:59:64:
         26:db:6b:41:a0:88:8f:8b:05:56:c0:ed:b4:b9:f3:83:14:84:
         68:eb:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org