Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa
File:                     06c61722-7a68-3f16-a8ff-eefcf70e5126.roa (raw, json)
Hash identifier:          nPgO3LulSsO13xyVV6DCWD+J97vqmlGpisO1K/zuHfs=
Subject key identifier:   85:3C:0A:09:E1:2E:B8:0F:04:AB:44:53:48:D9:0E:8D:D7:D4:48:2F
Certificate issuer:       /CN=9eed61a4-093d-432f-9466-2001995b9535
Certificate serial:       010D0C9F43285847F2BA37CC893814A41C9A17C0
Authority key identifier: AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     30307
IP address blocks:        23.168.184.0/24 maxlen: 24
                          2602:f9b1::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:37:cc:89:38:14:a4:1c:9a:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eed61a4-093d-432f-9466-2001995b9535
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=01ee12a2-1650-4a93-bc6c-c8d6934f09df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:9d:8e:36:6e:2a:7e:1e:4c:31:eb:fa:d8:
                    82:49:37:96:ce:51:81:6f:be:4d:81:f0:bb:ef:7d:
                    dc:9e:8e:a9:c2:58:c8:11:8b:bb:1a:be:c0:fc:df:
                    c9:6d:b6:41:1c:d5:da:de:28:98:66:c2:59:75:e6:
                    ff:2a:2a:52:b0:03:9b:5a:b4:9c:b7:ef:6d:2e:00:
                    ca:d0:1c:9a:34:c7:de:e9:ed:88:9e:e9:59:71:5c:
                    22:d5:2c:3d:2c:3e:ff:52:52:10:47:66:55:e6:d7:
                    08:0a:77:be:c0:a9:50:28:d6:9a:c1:0c:6c:42:95:
                    8f:3e:ab:ce:62:44:af:e5:1b:da:e5:ee:04:c5:f7:
                    f8:2e:c6:fb:bb:83:5c:17:88:e6:23:7c:c3:ec:23:
                    c9:02:1b:96:ae:3b:4a:43:6a:e6:8b:ce:45:b8:c7:
                    82:d2:00:d0:05:d2:c9:4a:89:e0:22:1d:9f:c2:90:
                    4d:7e:1d:9a:15:70:2f:7c:34:8d:64:7a:2d:97:cd:
                    64:4d:52:ae:24:7d:e9:74:a3:27:0a:e5:77:ff:59:
                    df:b5:79:5a:3f:2c:b6:2c:b1:63:8a:2a:bf:34:c3:
                    3c:7a:09:c9:4e:e0:6e:41:5b:f5:2e:23:ac:e2:0b:
                    07:eb:77:01:6a:05:5f:37:e9:cc:3b:4c:67:7f:d2:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3C:0A:09:E1:2E:B8:0F:04:AB:44:53:48:D9:0E:8D:D7:D4:48:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/06c61722-7a68-3f16-a8ff-eefcf70e5126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.184.0/24
                IPv6:
                  2602:f9b1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:53:c3:73:e8:73:ee:71:b3:53:59:e2:8e:06:f0:0e:45:b4:
         1d:33:95:af:83:f6:75:b0:2d:fa:83:ac:49:53:86:74:06:1f:
         a0:06:12:95:af:ff:a4:9f:36:f5:b6:d1:90:87:92:ae:21:a2:
         c4:d8:25:7d:f6:8e:ff:39:ea:59:ce:d0:d1:81:9d:08:98:8d:
         d0:4f:76:cd:3f:0e:1f:5c:18:b6:9c:c2:a1:bc:1d:39:9b:8c:
         b8:83:f4:6a:66:10:b0:94:26:b4:03:94:46:4e:05:f3:39:0f:
         3a:73:8b:2b:8a:e3:94:3b:7d:37:7f:ad:cd:8c:5a:84:22:d1:
         34:55:86:65:c2:79:dc:7c:ff:3c:ca:17:94:82:65:a4:6d:aa:
         a8:9c:40:06:41:05:03:77:7e:4c:40:09:d2:d5:60:ff:15:4b:
         4f:ce:58:d0:cd:5d:2a:4d:54:18:21:84:8f:73:7e:eb:e2:5b:
         40:42:ca:c5:09:04:ef:29:09:13:27:a4:c9:25:0c:46:e3:3f:
         9a:f1:cf:b2:99:ef:b1:05:14:fa:4f:4d:f4:78:7b:a7:48:25:
         03:4d:75:86:02:84:66:f0:93:f0:9f:bb:1d:6d:a4:68:6f:5a:
         16:47:c9:e2:f8:5a:7e:95:a1:b5:5e:39:ea:67:a8:95:1e:c4:
         75:2c:01:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org