Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/a5fd011b-f74e-33c0-b3d2-1e9ee67af081.roa
File:                     a5fd011b-f74e-33c0-b3d2-1e9ee67af081.roa (raw, json)
Hash identifier:          Zn9y9v8BUOzrQl6V5i5wYYsvApxy+T6chApwvaUhA0g=
Subject key identifier:   1F:15:A3:E6:38:B0:4D:37:6F:85:93:8B:A8:DA:D7:97:B8:3F:97:73
Certificate issuer:       /CN=6df0f127-67c5-46f6-bdda-25948d05d9ec
Certificate serial:       010D0C9F43285847CA3F7EE359C9F6D3A747DF80
Authority key identifier: 2E:EB:09:2D:D2:74:0C:6B:33:9D:56:E5:64:9A:F4:B0:60:8A:32:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/a5fd011b-f74e-33c0-b3d2-1e9ee67af081.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     40202
IP address blocks:        23.167.64.0/24 maxlen: 24
                          23.179.160.0/24 maxlen: 24
                          130.51.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/6df0f127-67c5-46f6-bdda-25948d05d9ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/6df0f127-67c5-46f6-bdda-25948d05d9ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:7e:e3:59:c9:f6:d3:a7:47:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6df0f127-67c5-46f6-bdda-25948d05d9ec
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=c106bafb-efe6-4dac-a011-7cc804e35309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:a6:9a:ec:aa:2a:bd:dd:61:2f:4b:b3:58:
                    cf:db:ee:61:34:5e:56:90:47:ca:06:d2:f5:f3:0a:
                    82:88:d5:6a:9a:9c:44:08:fa:6c:d1:17:0d:fb:f7:
                    d0:55:33:70:2f:21:08:10:dc:42:33:96:fd:7d:dc:
                    3f:92:f1:58:67:80:40:a3:39:0c:ce:89:cb:c7:e2:
                    c8:86:8e:59:34:80:92:27:98:4a:97:1d:6a:1e:63:
                    ca:db:6b:af:17:bb:20:5a:bb:2a:07:a8:12:66:10:
                    b0:ff:b4:34:f5:fd:4f:a0:70:9d:61:d0:f7:08:9e:
                    f0:f2:85:73:7f:c1:1a:96:e6:65:83:19:38:99:52:
                    36:20:2f:de:a7:38:2d:d2:29:ea:8b:69:3f:5b:fb:
                    46:4a:58:cc:1d:81:e9:80:da:f5:20:38:49:c0:ef:
                    fb:c5:3c:d1:ee:cc:e9:c9:fc:ec:0a:62:b4:91:c0:
                    0e:a0:8d:c7:c4:77:2d:74:17:33:4f:20:23:a2:a8:
                    4b:9d:25:bd:26:e7:02:2c:ae:4c:4d:4d:b5:d6:25:
                    34:8e:67:ab:2b:98:48:a7:3c:bb:ff:a0:c1:5d:b3:
                    08:4a:35:8d:18:a9:be:98:e5:d3:fd:79:e3:c3:bd:
                    2b:97:c1:72:dc:4d:7d:65:58:dd:be:d8:c2:36:db:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:A3:E6:38:B0:4D:37:6F:85:93:8B:A8:DA:D7:97:B8:3F:97:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/a5fd011b-f74e-33c0-b3d2-1e9ee67af081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec/6df0f127-67c5-46f6-bdda-25948d05d9ec.crl

            X509v3 Authority Key Identifier:
                keyid:2E:EB:09:2D:D2:74:0C:6B:33:9D:56:E5:64:9A:F4:B0:60:8A:32:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6df0f127-67c5-46f6-bdda-25948d05d9ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.64.0/24
                  23.179.160.0/24
                  130.51.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:10:5f:dc:77:f9:35:83:d5:54:9f:ac:7a:af:d7:12:01:da:
         64:0d:57:7f:46:24:71:de:97:df:da:f5:55:c1:56:47:d5:e7:
         eb:a9:18:fb:9d:cf:ce:49:ff:0a:a5:11:41:23:94:2b:48:00:
         d1:42:da:2d:a1:79:66:46:d3:62:eb:77:b0:4b:51:86:c6:49:
         f6:7e:29:c4:3b:6e:3b:fc:01:b4:b9:1d:4f:1d:17:fe:4c:28:
         93:2e:89:b2:34:49:ae:45:d9:c8:46:0d:47:4a:9c:f0:98:d3:
         6b:e8:a5:a2:b3:ba:4a:6c:ed:46:f1:99:dc:18:ad:f9:49:31:
         be:fc:3c:28:b4:8b:b7:ab:fe:d8:2c:c8:b0:5c:8f:2c:36:09:
         e2:d2:62:9c:74:b2:8b:68:04:c0:d5:d6:bb:67:e2:a6:25:18:
         4e:91:18:ce:30:4c:54:9e:c4:02:2b:ff:12:0d:cf:e0:ab:3d:
         b0:43:a9:07:af:9b:91:29:c3:ca:a0:99:61:23:a2:3b:77:f3:
         e5:4a:32:ea:6a:17:ac:45:07:9b:2f:64:77:79:bb:be:ff:63:
         f7:27:ff:86:c9:a3:3d:43:82:b2:00:dd:ff:7f:43:1e:ce:de:
         e3:18:8b:12:a0:6f:48:39:9a:6b:39:b4:b7:15:ed:49:6d:df:
         7c:37:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org