Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa
File:                     d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa (raw, json)
Hash identifier:          Z9qQfFa/G2G/DgCxVLUiN7HGKD8G1DMUYnH57iZHxyc=
Subject key identifier:   C3:E4:CA:45:F6:BF:6A:3F:6C:97:36:07:C9:BC:71:BB:C2:F8:DE:C5
Certificate issuer:       /CN=6ea4077d-c1f0-46d2-b575-7da368923370
Certificate serial:       010D0C9F43285847B9617B4AD239CBCBFB150E00
Authority key identifier: 69:ED:46:13:6B:C9:9E:A9:F8:F1:2E:36:8C:B6:D8:0C:F1:AA:52:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     397427
IP address blocks:        23.145.224.0/24 maxlen: 24
                          23.145.225.0/24 maxlen: 24
                          66.245.160.0/22 maxlen: 24
                          142.202.206.0/23 maxlen: 24
                          2602:fe4c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/6ea4077d-c1f0-46d2-b575-7da368923370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/6ea4077d-c1f0-46d2-b575-7da368923370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:7b:4a:d2:39:cb:cb:fb:15:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ea4077d-c1f0-46d2-b575-7da368923370
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=d79045a9-8cb2-4961-bb11-796dddc92d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:43:9c:34:22:fb:9f:38:08:e7:08:9c:fb:
                    37:73:30:c8:63:00:b6:fb:5d:9f:b2:09:2f:c8:e5:
                    81:df:5d:07:54:b2:af:e8:c6:3b:2c:6f:4c:fc:eb:
                    b7:6a:07:b5:55:37:5f:52:49:ce:ec:a5:38:2e:ce:
                    db:c2:f5:33:0e:00:b0:e7:e9:d9:15:28:05:92:7c:
                    23:90:0f:c1:e7:d6:ce:19:a7:e9:a4:65:80:57:72:
                    41:db:86:c3:f4:c5:64:12:77:db:5c:59:5e:6e:77:
                    8d:3f:82:5b:0c:7f:ba:93:d7:84:03:35:fa:67:c8:
                    0a:37:75:ca:e7:16:6a:c6:cf:20:c1:1f:19:c4:18:
                    52:fe:2b:61:30:9a:1c:e7:2a:1b:d7:be:e7:4e:48:
                    07:53:50:68:10:49:af:ae:e4:81:b7:50:af:c9:61:
                    24:96:23:cb:c7:99:75:1f:a4:ab:7f:1a:55:29:a7:
                    ba:4c:2c:ac:b4:20:42:1b:cc:1e:43:d9:e1:92:d4:
                    13:ca:e9:6b:db:ec:63:4b:5b:c7:b0:db:7d:c1:07:
                    3c:f4:43:44:77:a8:e6:0b:d2:b1:da:f6:f3:8d:d7:
                    b1:43:84:02:4b:83:10:fd:23:f6:3f:8c:1f:2f:26:
                    0b:01:71:41:e4:ab:33:fc:79:6c:a1:30:72:a6:f9:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E4:CA:45:F6:BF:6A:3F:6C:97:36:07:C9:BC:71:BB:C2:F8:DE:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/6ea4077d-c1f0-46d2-b575-7da368923370.crl

            X509v3 Authority Key Identifier:
                keyid:69:ED:46:13:6B:C9:9E:A9:F8:F1:2E:36:8C:B6:D8:0C:F1:AA:52:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.224.0/23
                  66.245.160.0/22
                  142.202.206.0/23
                IPv6:
                  2602:fe4c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7d:f7:e2:eb:c9:cd:3b:fd:df:fa:88:84:2e:4f:b8:28:77:
         6c:fe:5e:8b:51:56:69:2a:7c:f5:8a:eb:7f:55:e9:84:63:79:
         51:dc:48:90:e4:7c:78:4d:c7:5a:09:24:b5:e5:7e:6d:c1:33:
         a4:0d:44:05:72:aa:c9:44:ed:3d:2a:51:c9:ad:63:fb:80:3a:
         a0:ae:4d:74:8b:de:b9:41:d9:35:46:eb:a2:10:ef:27:ab:10:
         ab:56:32:d8:1b:84:8a:c0:cd:c3:27:3d:31:2f:a3:36:5d:e7:
         50:a0:18:8f:33:46:28:30:e8:47:7a:aa:1a:ec:d6:aa:c8:62:
         c6:5b:f7:7d:65:ae:ca:f3:94:a1:21:2f:d7:16:2f:98:4a:bb:
         7e:bf:05:56:fc:78:ae:42:43:5f:69:1c:2d:44:f4:39:4e:31:
         3f:8d:0a:3b:6c:b5:69:3f:65:f0:71:b5:9b:a0:f7:b4:d0:63:
         15:30:68:08:3c:a3:1c:83:07:05:14:cd:ef:53:27:d5:1f:ef:
         ef:3c:26:c4:ef:27:73:dd:94:49:9a:a9:90:b7:de:c9:67:52:
         ad:7b:bd:2a:1c:cb:d7:17:2d:17:f7:3c:1d:20:cf:cd:b1:0f:
         e1:43:1d:08:a3:c9:86:b8:0f:48:c1:f9:c5:3c:ba:04:12:06:
         b0:72:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:14 2024 by rpki-client on console-fra.rpki-client.org