Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa
File:                     2d0718a0-7c15-3300-af7e-f83127e2444a.roa (raw, json)
Hash identifier:          JE0p86AgJNBJBWNLkoGvpVWtEqWv5IjzZzw7n6L1V+w=
Subject key identifier:   85:07:D8:A9:1E:CA:41:CE:82:E0:4B:5A:E4:E0:F0:59:9B:B6:AA:EB
Certificate issuer:       /CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78
Certificate serial:       010D0C9F43285847F2BA3138C09BE92B35678220
Authority key identifier: 54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     400893
IP address blocks:        23.153.0.0/24 maxlen: 24
                          172.82.8.0/22 maxlen: 24
                          2602:ff2a::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:31:38:c0:9b:e9:2b:35:67:82:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=684cad5a-6509-47d9-b3f4-9acf5887dbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:94:9c:93:f5:b4:f0:86:fb:95:84:38:03:16:
                    93:1e:7c:83:ad:f7:54:85:98:7a:1c:e1:f1:e0:59:
                    6a:b1:39:29:5c:ef:9e:91:5e:97:7e:b2:ef:4b:e5:
                    08:13:6c:74:e4:da:09:bd:10:87:2b:6d:31:fd:94:
                    07:6a:0a:fa:a2:d0:e3:fa:8f:7f:dc:4a:5e:11:d0:
                    90:d4:77:dc:79:67:98:6c:b1:e8:b7:5b:c9:04:59:
                    ab:25:69:ca:67:a4:54:1b:3b:5f:47:13:bb:3b:47:
                    c7:d4:c6:ab:96:04:be:cc:1c:ec:d5:86:5a:e7:52:
                    fa:7b:01:fe:fc:ff:8d:5a:f4:87:17:9c:be:60:61:
                    81:5b:ec:1c:6d:64:f0:71:c1:c5:e6:2d:85:b9:94:
                    60:1d:51:12:33:18:54:51:47:2d:61:23:cf:68:b0:
                    c5:ad:38:a8:6c:f7:d4:e3:06:75:f6:ab:3c:69:07:
                    95:cc:9d:41:22:c7:27:c5:f2:0b:b6:75:53:94:34:
                    06:63:a6:ea:8b:2d:42:a3:b2:5d:6a:dc:6c:26:62:
                    bb:0a:c4:e6:36:b4:5e:f0:3e:06:66:a0:78:f7:be:
                    7e:30:e1:88:78:a1:8d:e3:d6:04:26:77:33:19:54:
                    88:dc:a5:ec:82:81:02:d9:61:ec:38:a9:8d:50:59:
                    be:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:07:D8:A9:1E:CA:41:CE:82:E0:4B:5A:E4:E0:F0:59:9B:B6:AA:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl

            X509v3 Authority Key Identifier:
                keyid:54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.0.0/24
                  172.82.8.0/22
                IPv6:
                  2602:ff2a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:d6:8b:aa:4a:c5:07:0b:db:29:61:34:ea:bd:e3:32:fa:
         19:e6:c0:7a:cb:76:a8:43:3d:f9:af:c9:ba:60:58:f9:18:6e:
         a5:fd:1e:60:35:dc:9f:5e:de:19:91:26:2e:0e:c1:72:89:12:
         78:80:95:34:48:5e:ed:b6:5f:6e:89:b6:9f:0f:b1:2c:1f:1a:
         fa:c3:8f:2d:9d:05:4a:0d:03:0f:ec:f7:a6:11:30:2a:7d:b6:
         c6:a4:8f:24:bf:1f:9f:00:ad:0e:3d:60:a8:c2:87:82:c7:94:
         c5:dd:08:61:f8:17:59:09:d7:d5:53:2c:85:30:35:1c:2d:ff:
         54:05:05:ae:fb:93:7d:b8:4f:26:f5:dd:53:13:ba:23:fc:9f:
         e2:5c:46:5c:a0:c6:74:77:6c:81:f7:5e:ff:07:55:fd:af:2d:
         5f:d3:98:cf:8e:66:94:39:ea:e3:be:19:55:d9:f7:45:34:e2:
         44:6a:38:2e:92:e7:a2:60:28:9b:4c:4d:33:02:6c:94:37:5d:
         b7:c8:67:6b:af:1a:ae:65:b5:23:f4:61:1f:ea:4d:ad:c9:c8:
         3a:d8:5d:4c:6d:ed:cd:0d:94:de:ac:df:9b:78:bc:73:9d:af:
         e2:99:94:15:37:ca:50:94:ee:b9:11:85:55:7d:ed:88:28:55:
         75:e8:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org