Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/81ee5bb6-a80c-33c4-b47d-571f14a09cfc.roa
File:                     81ee5bb6-a80c-33c4-b47d-571f14a09cfc.roa (raw, json)
Hash identifier:          y5zlRtVikib2ZcOVD5A83gQ2c7FMo2TLDQYwa7Y18cw=
Subject key identifier:   EE:BB:54:24:75:A9:3A:B1:35:49:69:B9:29:84:9C:86:56:3A:F6:4D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B137243BB15D00C722CD40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/81ee5bb6-a80c-33c4-b47d-571f14a09cfc.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        23.235.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:37:24:3b:b1:5d:00:c7:22:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=8422bf3b-bb52-41d4-a56a-71b1f808a36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:17:96:c2:de:a7:1f:49:85:e2:81:8c:cc:
                    21:5f:f8:e3:41:87:1a:28:7e:15:87:27:2d:12:ec:
                    6b:74:4e:0f:db:fd:7b:33:6d:94:e8:a0:2c:97:09:
                    35:8a:aa:88:36:07:36:7a:ea:44:cd:0a:68:1e:f4:
                    e3:b6:d1:ca:ca:34:39:61:83:41:92:6f:d3:26:af:
                    fc:05:b8:34:28:1d:26:ea:72:7c:1b:20:c8:a3:0b:
                    86:ad:8f:d3:eb:ba:66:05:85:8e:7f:6b:c8:59:b0:
                    dc:7c:e7:3e:5d:0f:e2:1e:41:db:25:42:86:27:19:
                    c2:b2:e6:74:71:de:f0:99:de:37:11:aa:b3:a1:2d:
                    59:56:88:83:42:7c:15:b9:ea:e9:9f:05:05:3b:8e:
                    0e:75:87:d0:60:4d:8a:3b:c1:45:7b:42:91:4b:c7:
                    45:90:34:e7:c3:3f:42:0c:0b:82:10:64:12:3d:4a:
                    bf:7d:2f:11:e3:74:d5:64:d5:12:c9:96:47:76:16:
                    45:a5:df:83:b4:4d:80:7e:5e:48:b8:13:48:b8:07:
                    3b:52:58:c0:48:25:26:b5:fc:ad:96:f8:42:43:bd:
                    23:6e:fb:6d:c8:b4:c4:e8:56:9d:67:2a:d0:34:94:
                    ea:1a:24:1d:08:7f:7f:5d:6d:fe:a5:e0:cd:ff:29:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BB:54:24:75:A9:3A:B1:35:49:69:B9:29:84:9C:86:56:3A:F6:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/81ee5bb6-a80c-33c4-b47d-571f14a09cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f9:3a:b7:1b:a9:25:76:fc:20:1d:3c:0d:30:eb:d4:60:84:
         01:f3:69:c6:03:53:12:da:ce:88:8a:9c:30:87:3f:03:ab:4e:
         27:ac:04:9f:52:48:34:fe:51:e4:b4:bc:78:0f:90:20:0f:a5:
         ce:08:80:46:4e:55:d7:2d:c4:e6:8d:ee:77:83:50:95:44:04:
         1e:7c:33:eb:5e:09:7f:8a:55:80:0b:88:b6:d2:d2:56:5a:05:
         ac:b8:c7:b0:48:1c:6d:95:81:02:01:c6:fa:d3:ba:24:e7:bb:
         8f:4a:6d:86:6e:28:ad:0f:ac:78:3a:0b:94:b7:df:d4:ec:ec:
         8c:b6:27:d2:14:f4:3d:1d:6e:9e:0a:38:12:1b:9f:1b:c9:e6:
         27:36:18:74:95:95:bc:f6:0c:73:6e:46:4a:32:b8:52:fe:b4:
         b9:06:4e:52:b6:96:43:9a:b2:82:f2:f7:a4:c6:7b:7b:70:70:
         86:65:f7:a9:50:aa:28:b3:95:ff:26:03:50:2f:8e:3b:c1:a9:
         a7:e1:b3:12:ca:d0:bd:e4:e4:d2:3c:aa:b8:63:43:9c:09:84:
         2a:7e:95:29:af:d5:93:48:c7:d0:6f:b3:03:a9:da:19:5b:0a:
         d7:2f:0b:90:33:26:ac:22:91:b1:98:0e:23:9a:7f:40:c0:87:
         2b:f9:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:30 2024 by rpki-client on console-ams.rpki-client.org