Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/0111369a-cdc2-348b-8c1d-4ee3e5971357.roa
File:                     0111369a-cdc2-348b-8c1d-4ee3e5971357.roa (raw, json)
Hash identifier:          mWLOb3wPJnqXBezcHjv6OqG+3R55P7AZnvRQBqaut6Q=
Subject key identifier:   F2:6C:44:BF:8D:6A:52:B4:F9:CB:5F:17:65:DB:76:2B:F1:ED:B5:F3
Certificate issuer:       /CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
Certificate serial:       010D0C9F4328584722A078F537A0EB9BBDC72400
Authority key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/0111369a-cdc2-348b-8c1d-4ee3e5971357.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     13737
IP address blocks:        23.169.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:78:f5:37:a0:eb:9b:bd:c7:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=81f2d57f-7a93-4015-8556-b9f0832558d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:39:2d:bf:83:76:b6:ec:84:d0:5d:a0:16:
                    1f:9a:03:dc:62:63:a4:ac:70:7b:3e:a0:c4:04:a2:
                    7a:b3:04:4e:2c:dc:1b:d9:23:f3:20:f4:f5:e8:e9:
                    9e:7c:dc:cd:48:a9:f1:5e:f9:49:bc:0b:36:51:2a:
                    d1:32:e4:ed:54:5f:f1:56:49:6f:9d:7b:f8:84:cc:
                    bc:f8:2f:aa:fc:74:c8:77:cd:25:4d:71:4b:14:81:
                    b0:72:7e:77:eb:9c:d6:09:ee:fe:46:99:6b:57:b7:
                    35:1b:f5:0c:54:ae:f2:97:f3:ea:87:10:2f:fd:4e:
                    5c:a5:e9:d7:9a:91:c7:e1:69:0f:67:56:fa:f5:9a:
                    8a:11:a7:3f:89:02:60:a8:a1:f6:35:9c:da:1e:db:
                    f5:fa:42:eb:b9:a6:7a:9b:0c:90:54:1f:45:62:c0:
                    e4:67:18:bd:f2:20:8a:b0:8c:a9:34:0f:0c:0f:ae:
                    67:b6:f0:55:b1:c1:16:db:3a:64:7c:92:90:05:29:
                    b0:a4:d5:77:09:ba:07:bb:f7:a8:92:c2:07:1d:34:
                    c3:04:37:96:ab:83:06:4d:92:2d:7d:78:80:11:6d:
                    54:62:d0:73:a1:18:4b:b1:f1:8b:d8:a4:ce:9a:8a:
                    c5:bc:65:f9:d5:a3:a6:22:b4:f8:34:0c:b1:b5:6d:
                    a6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6C:44:BF:8D:6A:52:B4:F9:CB:5F:17:65:DB:76:2B:F1:ED:B5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/0111369a-cdc2-348b-8c1d-4ee3e5971357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl

            X509v3 Authority Key Identifier:
                keyid:CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:06:1a:ae:dc:0c:fb:cd:89:35:d0:4f:62:3f:e2:16:43:c4:
         16:66:14:cb:05:59:ce:ad:9b:64:35:8a:e7:5c:16:43:c7:d7:
         7d:33:11:97:f5:06:78:6a:bb:8c:42:aa:a5:c4:95:7a:83:92:
         67:06:3f:97:3f:92:f1:fc:ed:1b:7b:d8:c8:cd:53:1d:1f:a9:
         bd:cf:6a:a0:0c:b9:17:14:b0:d8:6c:8d:a6:b0:59:23:21:dc:
         10:0b:ab:41:7a:9e:32:51:c4:85:37:4f:8c:88:24:8d:af:bd:
         cf:f4:e9:e9:f8:5a:80:a0:43:d7:a0:8f:59:3a:df:03:d7:8b:
         1c:ee:ba:c5:29:57:28:45:5b:5e:fe:0d:6d:ee:3a:3c:a9:ce:
         01:90:22:b1:bf:10:5f:af:04:9b:b5:1e:6e:45:3e:ae:5d:00:
         80:10:1d:e0:7b:e0:aa:a6:3f:07:5c:30:10:49:f5:fb:f6:18:
         8b:ee:83:81:c7:76:11:4b:d7:20:19:b3:34:d4:ac:6e:b2:e8:
         19:c7:ec:29:aa:8e:25:41:d3:b1:f1:7a:0a:cf:ac:1a:6b:68:
         24:8b:10:2d:5b:f3:2d:53:d5:e9:8b:0a:65:82:cd:a9:34:79:
         fa:01:4d:ff:8b:0c:c7:17:02:53:52:17:e5:67:07:26:4a:90:
         7a:b9:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org