Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa
File:                     a9d6e5c9-bec2-395f-af08-83ce47190965.roa (raw, json)
Hash identifier:          61Y+syUsPdWlQqyoxHxyBGoFVF9tHFzzqK461FnzObQ=
Subject key identifier:   04:EE:B5:FD:D3:34:F0:01:32:E0:22:93:FB:A3:6E:37:62:49:3F:9E
Certificate issuer:       /CN=d037641d-aa90-4eab-864e-a73e03e24cfa
Certificate serial:       010D0C9F43285847C05C17E9FF52BAC01AA7FCE0
Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     398759
IP address blocks:        23.165.120.0/24 maxlen: 24
                          2602:f9eb::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:17:e9:ff:52:ba:c0:1a:a7:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=50e31fc5-2df4-4ead-a3ed-f6cf5710edd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:26:38:d7:a9:c8:4e:93:8f:c7:af:e7:21:
                    88:45:c9:e2:f5:5d:47:df:37:6d:7e:bb:78:10:1a:
                    84:3d:8b:b0:57:ce:e0:d5:a0:f1:dc:9a:dc:5c:c6:
                    2a:20:e7:1b:4a:2d:57:49:19:18:8f:a2:28:f1:11:
                    7c:dd:b4:df:96:7b:b5:91:b7:9f:8f:37:10:2b:fb:
                    c1:14:46:d0:21:4b:e6:f7:c5:b1:8d:08:53:e5:4a:
                    d4:d5:aa:3c:b3:44:1b:95:f4:ba:c6:33:31:05:73:
                    e2:65:7a:8b:24:a5:c8:ef:dd:46:4f:9c:ec:b5:a8:
                    16:25:e0:5f:4a:70:0d:2f:f7:13:71:4d:ad:34:fa:
                    b3:43:8b:b1:a3:41:c9:c5:d2:9f:97:f7:9f:49:f8:
                    a3:bc:5a:53:71:a2:b3:35:54:ec:5c:5c:8b:43:c2:
                    67:af:61:f6:1d:14:f1:d2:64:85:11:15:10:be:a3:
                    e5:47:e0:48:e0:ab:d7:ec:22:52:5c:1f:ef:02:66:
                    b9:1d:ec:dc:c9:7b:7d:47:02:bf:49:58:8e:3a:3d:
                    40:54:8e:58:d1:49:bd:03:f2:de:aa:f2:3f:05:65:
                    54:f8:c3:0b:c6:08:1e:f7:d4:b8:75:65:fa:97:81:
                    b2:87:bb:0c:ba:6c:5e:65:f0:56:41:e2:ca:e1:c0:
                    26:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:B5:FD:D3:34:F0:01:32:E0:22:93:FB:A3:6E:37:62:49:3F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl

            X509v3 Authority Key Identifier:
                keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.120.0/24
                IPv6:
                  2602:f9eb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f0:3d:a3:23:95:38:6f:9f:5c:41:88:0a:95:62:c2:48:f2:
         39:69:f8:81:ae:64:ba:d0:f0:f0:e8:bf:74:09:1f:30:fa:2b:
         c9:bd:01:af:bd:d9:a2:02:27:fa:66:30:61:59:ae:05:e8:38:
         c6:3b:3a:e6:a0:e3:ce:b2:7a:16:de:c0:27:09:be:e4:3a:1b:
         23:29:52:04:06:d4:c8:c2:60:2f:ed:53:16:ae:6e:4d:31:2e:
         01:cd:21:3f:54:e7:5f:da:72:3b:c7:cf:9c:b8:67:87:3b:28:
         96:e3:84:00:e7:02:28:e5:47:dc:4a:54:21:04:87:17:c9:05:
         7f:4c:79:53:66:7e:19:43:45:3a:73:cb:ce:24:e1:b1:06:70:
         bd:93:6e:20:b7:41:32:67:a6:9e:6e:cc:12:ea:a9:cc:16:98:
         b5:de:ec:e4:b3:56:56:fe:2b:dc:c7:07:f2:a6:6e:49:6a:5b:
         a3:14:77:3b:51:c2:db:4e:ec:7e:26:63:d1:ee:41:2e:37:e0:
         5f:7e:b7:03:dd:2a:46:98:1f:70:1b:bb:de:e8:49:64:f8:d8:
         60:a5:d1:ae:ce:f5:26:bf:99:ce:b3:67:66:5b:9c:72:a0:a5:
         96:ae:da:a5:9f:62:30:0d:50:99:29:9a:ff:57:5e:ce:2f:29:
         9d:b7:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:19 2024 by rpki-client on console-ams.rpki-client.org