Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa
File:                     1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa (raw, json)
Hash identifier:          uvjk+8AFZluSDKxUi+NkkGI7UOnuHMCx4joUwJZfjFk=
Subject key identifier:   0B:91:BC:63:57:49:F0:A2:7F:0E:5F:A5:81:BA:C7:39:F1:03:28:BA
Certificate issuer:       /CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
Certificate serial:       010D0C9F43285847C3448ACECC92FBE798E8EE00
Authority key identifier: 93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     55140
IP address blocks:        23.138.0.0/24 maxlen: 24
                          162.220.180.0/22 maxlen: 24
                          162.245.104.0/21 maxlen: 24
                          198.1.0.0/21 maxlen: 24
                          209.177.74.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:8a:ce:cc:92:fb:e7:98:e8:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=e31e8dd4-3278-48eb-a325-610d12915173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:30:a5:4e:5b:f0:d4:cb:6c:c7:df:5a:ff:
                    2e:72:13:94:d3:5e:e1:5d:21:38:17:ac:15:e8:00:
                    b7:d2:38:46:ab:99:f2:c2:c3:41:72:2b:2d:f5:ba:
                    85:e9:69:46:40:7e:78:72:01:65:69:0b:bf:7f:35:
                    4f:10:58:7b:a5:65:ed:a4:6d:14:98:be:63:89:a7:
                    7f:84:92:a2:63:0e:d8:06:b9:dc:53:68:c0:c2:91:
                    76:92:fe:d4:44:37:32:de:5f:4a:77:f5:ca:6c:33:
                    b7:3a:3a:cb:a6:31:31:5a:13:1a:d3:bf:88:de:2d:
                    fd:ec:27:5e:95:f7:a8:f9:9f:d4:44:3b:99:0e:c8:
                    93:2c:9c:22:c1:61:9f:b8:8e:5f:4f:63:d9:35:1c:
                    95:a5:d7:8b:82:ff:76:a9:f7:91:71:a6:d0:05:52:
                    c1:5e:c9:72:ce:49:d6:fb:d3:a3:e2:50:05:e2:05:
                    54:c1:c8:f7:8e:89:4c:43:fe:95:02:86:51:65:e7:
                    0f:57:8d:b4:1a:9f:8c:58:7e:c6:a3:21:16:5e:c1:
                    1c:fa:35:38:ae:73:c7:aa:3b:ba:fa:b3:2c:7c:fe:
                    2d:56:39:a8:35:9a:9c:2e:9a:12:74:b6:8d:35:9c:
                    df:8d:7b:38:d9:29:36:3c:05:fa:10:16:c8:0a:7f:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:91:BC:63:57:49:F0:A2:7F:0E:5F:A5:81:BA:C7:39:F1:03:28:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl

            X509v3 Authority Key Identifier:
                keyid:93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.0.0/24
                  162.220.180.0/22
                  162.245.104.0/21
                  198.1.0.0/21
                  209.177.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:7c:52:dd:64:5a:9f:d9:c0:3c:8a:47:27:45:2b:f4:3e:
         20:ba:c0:98:41:88:7b:26:d6:d0:2a:7e:4e:e3:b6:02:ac:44:
         00:89:6d:de:7b:17:2f:31:85:a2:c8:a6:c6:b5:4f:f3:d2:b0:
         85:19:ac:fd:96:f6:77:c2:81:b1:ad:99:95:df:e0:a5:f7:a8:
         7a:02:34:f8:8b:fd:b0:86:6d:fb:e3:8d:95:86:ea:51:ea:00:
         83:88:9b:7a:8b:59:35:de:a2:53:fa:b2:0c:58:f1:8c:ad:61:
         4e:81:dd:bd:f1:c0:b1:7d:52:76:92:0f:02:29:24:4b:e8:7b:
         dd:64:cc:08:4d:0b:dc:d9:db:fa:46:3b:d8:8b:ab:a4:05:d6:
         31:4c:3a:0e:df:d1:08:e3:94:6d:29:a3:1f:47:67:68:83:da:
         9d:0e:5c:65:5d:38:7a:e3:76:30:c9:ca:be:3a:b9:c8:0c:9e:
         15:ed:6f:8c:58:2a:02:cf:7e:d2:cc:12:b6:dd:7e:25:2b:f2:
         be:37:ec:a4:a5:0a:19:60:f9:f2:f8:96:69:50:ca:0f:f0:1d:
         db:9e:95:a4:c1:f3:5e:86:81:5c:e8:7a:b4:72:b1:18:52:58:
         7b:20:87:7c:74:a1:18:76:d8:fd:18:98:f3:39:b8:d4:5f:bb:
         58:34:05:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 27 21:46:36 2024 by rpki-client on console-ams.rpki-client.org