Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/4fcb65a8-ed13-3f21-9803-4298a1362328.roa
File:                     4fcb65a8-ed13-3f21-9803-4298a1362328.roa (raw, json)
Hash identifier:          z7AcLFpHPFEOwr/9CXlVrbcnRF7uGtRZT7b1dlwsWkE=
Subject key identifier:   28:FF:BB:07:62:FC:FF:0E:40:13:C1:7F:3A:CE:17:43:76:D7:4B:E3
Certificate issuer:       /CN=6c969b15-97c7-4334-a334-afc07d03fab9
Certificate serial:       010D0C9F43285847A5D698956ECA3FE70E764280
Authority key identifier: A3:36:0B:03:C0:44:A2:73:55:6A:B2:B1:8D:E3:52:36:C3:C0:6C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/4fcb65a8-ed13-3f21-9803-4298a1362328.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     152918
IP address blocks:        23.148.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/6c969b15-97c7-4334-a334-afc07d03fab9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/6c969b15-97c7-4334-a334-afc07d03fab9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:98:95:6e:ca:3f:e7:0e:76:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c969b15-97c7-4334-a334-afc07d03fab9
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=69dd18b8-a17c-43f5-ad38-061811cd263a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:4d:10:4b:11:37:ae:83:94:00:4b:57:f6:
                    8c:6d:17:49:f7:b6:69:36:54:83:f4:96:07:9f:3e:
                    5d:e3:96:35:38:a1:99:e7:f0:d6:37:a6:32:c0:ba:
                    e4:c3:c7:31:f0:20:79:35:9f:c8:d1:3d:12:5d:e6:
                    db:11:4a:da:be:26:56:85:cc:de:ef:5e:ec:d2:d7:
                    51:f5:44:ed:66:52:ec:3f:60:45:ae:fc:32:e9:92:
                    02:35:1b:35:43:fd:f2:22:5e:39:76:77:15:76:4a:
                    ce:a8:f8:aa:57:00:00:e2:88:70:85:b5:b9:d6:cf:
                    b6:6f:05:a8:ba:43:87:7c:a2:ac:b0:6c:32:5b:c3:
                    0b:3b:d8:e7:3b:64:7c:cc:7b:60:38:5e:69:b2:06:
                    6c:70:3b:db:3f:4a:71:16:a5:df:e7:ee:db:b6:41:
                    82:f4:b1:a4:c7:b6:2d:ac:e4:3f:44:43:47:29:dd:
                    d7:d3:6a:53:b8:e0:ab:9d:e9:0a:eb:b4:ed:8d:2d:
                    39:c2:b4:58:8d:6d:40:6d:7b:a0:2d:21:84:d6:2a:
                    39:a3:d5:13:39:64:be:d5:7b:86:16:8e:a8:d6:da:
                    8c:78:fe:61:34:ae:3e:d4:8f:da:8f:79:74:53:c4:
                    0e:cf:4c:d2:33:5b:2e:58:60:b2:7d:2f:11:2d:e7:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FF:BB:07:62:FC:FF:0E:40:13:C1:7F:3A:CE:17:43:76:D7:4B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/4fcb65a8-ed13-3f21-9803-4298a1362328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/6c969b15-97c7-4334-a334-afc07d03fab9.crl

            X509v3 Authority Key Identifier:
                keyid:A3:36:0B:03:C0:44:A2:73:55:6A:B2:B1:8D:E3:52:36:C3:C0:6C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:21:16:cf:58:86:e0:d7:f7:08:9b:71:41:75:8d:54:5a:1f:
         65:f6:bc:84:dd:58:bb:50:8f:48:01:d7:0f:2b:dd:c8:bc:7d:
         a4:b9:eb:2c:81:45:f3:78:b4:9f:7a:c5:c1:fc:04:01:ce:c5:
         68:4b:96:2f:fb:6c:54:1d:9e:44:ca:3c:a3:6b:fe:d8:fc:09:
         8a:49:b1:b4:4f:50:15:24:fb:49:0c:ea:5b:a1:a5:bd:ba:99:
         d5:6a:67:69:ac:fc:83:be:87:06:cb:06:29:96:0a:17:01:fd:
         07:fc:09:1b:7f:1a:2f:b3:a8:9d:9a:ee:5e:77:47:93:10:4a:
         42:27:9e:97:fb:fb:c8:c3:23:86:af:dc:c6:d2:17:65:a3:dc:
         1b:73:1c:0e:37:63:60:da:97:2b:d3:26:6b:3d:e7:8b:ef:82:
         ba:3b:56:28:93:03:42:c6:89:a4:55:c8:f4:7a:cc:4a:91:ca:
         3e:d2:9f:4b:0c:8f:ce:1e:5d:4f:05:54:48:9b:f5:2f:3c:93:
         56:72:b8:8a:a0:c7:04:22:5f:02:67:7c:dc:77:6d:03:c6:a1:
         d3:63:28:8b:1c:d0:99:c3:90:d1:8d:89:9f:02:71:63:b8:2a:
         3c:a0:cb:12:d3:6d:62:15:0c:9b:ef:22:b8:75:da:e4:42:21:
         bb:dc:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:09:48 2024 by rpki-client on console-fra.rpki-client.org