Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/9c78331e-690d-3211-ba70-a5dbba40235b.roa
File:                     9c78331e-690d-3211-ba70-a5dbba40235b.roa (raw, json)
Hash identifier:          5eXMSee1F2sR6E57e3wK0gAfLXutAAn+HPhkpN+Drzo=
Subject key identifier:   29:B8:5B:84:B0:BB:5A:71:1F:D9:DD:F7:94:60:3F:C4:FD:EC:BF:E7
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F43285847F2BA37860C5B0B8852E1E040
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/9c78331e-690d-3211-ba70-a5dbba40235b.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     26006
IP address blocks:        23.168.136.0/24 maxlen: 24
                          2602:f9bd::/36 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:37:86:0c:5b:0b:88:52:e1:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=f7eb0808-89f5-492f-9aee-3c98b5bec573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:98:73:90:9f:85:f4:d7:1e:3e:05:80:dc:
                    c1:08:6c:16:f8:da:1b:4b:67:63:4b:48:f0:dd:91:
                    3b:76:1a:69:9f:ce:d6:66:8f:bf:e1:7b:5e:6e:74:
                    74:44:8b:60:5c:23:a8:6b:63:e5:4a:37:ab:e0:5f:
                    76:20:b0:19:a5:73:40:e8:d9:29:ca:5c:90:eb:bb:
                    26:67:2e:94:cf:f4:5e:ae:3a:73:e8:dd:63:b3:91:
                    00:6f:d0:ac:df:d2:e2:ec:18:35:bd:6b:55:d9:72:
                    d5:f4:a1:8a:34:17:9f:34:85:0d:76:7f:75:0f:cc:
                    56:26:68:ed:ac:8c:07:ab:d0:1a:b4:b4:cc:d4:e5:
                    1d:14:47:4d:08:20:fd:0a:3f:1f:8d:de:9c:9e:9b:
                    02:6d:0b:17:2e:6e:86:0b:03:8d:b3:cc:28:89:8e:
                    48:a9:71:bc:da:8a:27:be:42:4c:45:f5:e0:7e:e5:
                    b3:a3:11:6f:e2:76:f4:88:c9:5c:51:13:cc:4c:3f:
                    5f:65:d3:78:d3:d3:f4:a0:ff:ca:af:0d:fe:90:08:
                    14:f4:ff:db:b0:30:75:c8:e5:97:55:7f:e2:ae:ec:
                    22:e5:36:42:d0:6e:0d:31:89:90:b3:a8:c8:98:6d:
                    8a:6b:34:cb:4d:0c:76:fd:91:39:0a:ef:97:db:a8:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B8:5B:84:B0:BB:5A:71:1F:D9:DD:F7:94:60:3F:C4:FD:EC:BF:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/9c78331e-690d-3211-ba70-a5dbba40235b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.136.0/24
                IPv6:
                  2602:f9bd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:03:57:bf:1e:61:c4:5b:5c:35:b1:41:1b:a8:8a:f4:9a:9b:
         45:f1:d1:06:e1:96:34:21:05:2d:39:02:28:b2:5b:50:43:38:
         e0:b1:a6:2b:58:58:13:45:c1:6c:4d:42:ee:ff:21:67:75:62:
         b6:32:f9:2e:68:5b:e9:58:c5:11:7f:25:ec:ee:de:16:47:a8:
         44:27:c9:5d:34:16:d2:0d:29:d5:ef:1f:d1:dc:6d:ee:c8:c7:
         83:0d:69:95:04:90:65:e1:ff:94:9c:c2:85:22:32:35:e6:32:
         c6:1f:ca:3c:4b:83:72:88:11:56:7b:80:b1:73:53:45:a9:cf:
         a7:52:a2:4a:26:02:ba:2b:7f:5f:6a:76:c9:8e:62:1e:c3:7b:
         ee:48:8d:d0:b4:b8:67:5e:d9:db:90:73:32:1c:c8:ec:4a:8e:
         30:bb:86:96:3e:0d:ed:1b:eb:41:e9:9b:6f:ef:8a:6e:77:0c:
         93:7d:83:b6:05:4a:5a:3d:d7:8f:8e:c1:3a:fb:0b:ed:65:5a:
         3d:f0:bc:99:6e:6f:e5:10:67:56:82:75:21:7b:15:36:43:ff:
         59:11:b6:93:f7:c0:93:d1:8f:b4:94:21:79:81:83:61:8e:df:
         2c:26:67:fe:25:d4:35:41:dc:17:9c:8e:2c:02:7e:cb:6d:98:
         ed:0d:91:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:43 2024 by rpki-client on console-fra.rpki-client.org