Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/035d159a-4b57-3539-af75-7730d9676848.roa
File:                     035d159a-4b57-3539-af75-7730d9676848.roa (raw, json)
Hash identifier:          i1l89M5d6PkZRNPw3o71v0cmCtAFK9BDjnWHDhdvRjg=
Subject key identifier:   FC:FD:99:91:84:B1:1C:12:F6:B3:E5:A4:79:DB:BF:71:AA:F2:1E:A6
Certificate issuer:       /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial:       010D0C9F43285847E2F787C74ACA6CDD75142E80
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/035d159a-4b57-3539-af75-7730d9676848.roa
Signing time:             Fri 15 Nov 2024 10:31:23 +0000
ROA not before:           Fri 15 Nov 2024 10:31:23 +0000
ROA not after:            Thu 13 Feb 2025 10:31:23 +0000
asID:                     213856
IP address blocks:        23.154.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e2:f7:87:c7:4a:ca:6c:dd:75:14:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
        Validity
            Not Before: Nov 15 10:31:23 2024 GMT
            Not After : Feb 13 10:31:23 2025 GMT
        Subject: CN=d1e79532-8326-4515-af52-fbbfa16a11b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:ba:05:76:32:79:01:54:01:37:b9:94:17:
                    b4:96:fa:63:9a:dd:c3:82:05:14:20:6e:40:73:0d:
                    35:11:5a:94:09:dd:47:c0:8a:10:fd:91:47:d0:b5:
                    6f:8a:f0:f4:fc:e3:b3:fa:02:33:35:23:0e:e8:e1:
                    99:68:8e:b0:6a:14:c2:ff:ef:39:57:a5:54:8d:26:
                    47:8a:95:f1:f0:5a:84:4a:2c:82:cf:5a:de:e4:7c:
                    ed:83:60:b2:dd:96:8c:13:3d:b0:06:3e:d6:2f:37:
                    6b:b1:93:bd:d6:94:86:8c:4d:52:a1:1c:02:51:55:
                    31:46:e2:ca:c1:46:44:5a:3a:49:ae:6f:0d:03:b2:
                    00:29:01:d1:a7:4c:56:44:20:35:42:ce:5d:b9:63:
                    35:ac:30:8c:5a:02:52:34:88:a6:44:c4:8b:03:03:
                    16:45:99:a5:34:a0:91:7f:ae:b2:f8:09:1c:f5:13:
                    87:d0:e9:83:6c:b6:ac:d9:f3:d8:9d:cb:cc:8d:e6:
                    e4:af:5d:92:c8:e8:b0:52:70:3b:c1:2d:af:22:ce:
                    ff:9c:5e:08:7d:36:83:79:d5:be:36:92:e1:2c:9c:
                    04:90:a7:23:80:06:81:43:99:85:66:9c:54:29:0a:
                    9a:49:15:27:c5:d1:25:1d:f5:1b:d4:3f:1f:de:75:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FD:99:91:84:B1:1C:12:F6:B3:E5:A4:79:DB:BF:71:AA:F2:1E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/035d159a-4b57-3539-af75-7730d9676848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl

            X509v3 Authority Key Identifier:
                keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d5:5b:ea:27:1d:8e:2e:c9:48:76:bc:ae:1b:47:4a:ea:1d:
         09:a7:7d:b2:5e:47:f3:74:27:36:57:db:a5:dc:cf:74:bf:e0:
         3a:8c:47:76:df:d4:12:78:bb:96:bd:c2:71:d0:8a:3b:f1:fc:
         4c:0c:dc:a2:2d:0f:71:8a:31:86:ca:91:ac:55:68:d1:fe:98:
         55:4b:5f:d9:c1:1e:7f:5e:33:d6:ae:45:fe:cf:0f:9b:99:64:
         27:54:e0:b7:36:ac:c3:aa:82:9d:04:5a:71:3d:5c:08:fe:9e:
         6b:2d:0a:14:be:0a:83:c6:92:72:3c:2d:a2:1d:74:11:4e:64:
         0d:16:88:ea:04:c1:51:3c:36:57:36:ab:17:68:0a:db:22:94:
         21:92:2c:aa:47:f3:4b:fe:bf:34:2a:85:3b:bf:e1:31:c9:49:
         75:b6:16:06:86:2c:2d:75:40:fb:8a:f9:75:fb:93:6f:49:97:
         6e:81:4a:6c:82:02:08:9d:48:44:1e:c4:b2:1e:d4:21:72:5b:
         92:47:11:50:72:81:55:82:0b:1c:ca:85:84:b3:87:09:32:3e:
         c9:d8:b0:d2:d0:77:f9:f2:95:54:d7:d9:b4:28:22:39:f0:8f:
         25:d7:54:25:14:d1:09:de:4e:d3:ae:95:59:d6:f3:59:1d:5f:
         c1:7f:c4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:50 2024 by rpki-client on console-fra.rpki-client.org