Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa
File:                     ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa (raw, json)
Hash identifier:          tWOY7TWzb+QczN9ZK2X4pXvpfxFQcL/5T+d63ZZslaM=
Subject key identifier:   02:07:CE:B7:37:7C:2F:82:94:B8:08:49:FA:C9:D5:27:62:E9:6F:17
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F43285847CA3F442EA4A4A8C2BCC36408
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     30114
IP address blocks:        23.146.88.0/24 maxlen: 24
                          2602:fab0:20::/44 maxlen: 48
                          2602:fab0:30::/44 maxlen: 48
                          2602:fab0:40::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:44:2e:a4:a4:a8:c2:bc:c3:64:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=bd05cc82-448a-4208-ae5b-d8b054cdbf1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:66:b5:e4:f4:dd:f2:66:b2:93:00:d3:99:
                    7c:62:05:e1:5a:47:a3:98:4a:59:1b:1c:85:a2:6a:
                    d7:e3:72:31:f1:82:a6:94:0b:74:51:25:8c:c7:37:
                    a0:11:13:14:46:00:3e:a8:65:70:4b:0c:cd:fc:f1:
                    bd:e6:e1:c6:30:9d:e3:67:83:dd:f6:aa:ab:cb:d7:
                    43:67:34:1a:31:9f:ee:91:e5:bc:48:08:ca:37:60:
                    99:3c:12:91:6c:08:78:7e:80:e2:b8:f6:11:9f:1c:
                    aa:3b:4a:c7:e2:55:7b:fb:ff:ea:70:bc:6d:78:18:
                    15:76:52:3a:64:ea:05:61:5c:66:96:eb:12:04:cc:
                    2d:8e:8a:e2:15:f4:cb:f0:6e:30:7b:73:d1:19:9c:
                    c7:66:13:ec:28:d9:5a:fb:d4:23:02:94:af:f2:a1:
                    fb:83:bf:d8:9d:29:e8:93:59:45:5b:a6:03:45:c2:
                    ab:23:75:2b:34:0f:1e:46:a3:14:26:f1:cd:05:3d:
                    02:e9:27:ed:fa:e9:9d:a0:42:dc:9b:a0:cb:db:70:
                    e3:3e:76:9a:4e:0f:a9:5f:b7:19:55:6d:51:38:b4:
                    7a:44:9b:24:98:26:c7:0e:37:5f:97:29:6d:63:05:
                    83:69:fd:84:27:ca:36:58:4f:fd:c2:67:18:1e:8d:
                    e4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:07:CE:B7:37:7C:2F:82:94:B8:08:49:FA:C9:D5:27:62:E9:6F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.88.0/24
                IPv6:
                  2602:fab0:20::-2602:fab0:4f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4f:0d:b7:01:7d:a0:4f:85:52:71:76:56:9a:97:a5:e3:cf:
         4b:28:3b:91:cd:3f:d4:60:57:0b:35:d7:fc:14:28:80:05:1a:
         60:4c:41:c6:69:62:3c:39:a4:25:eb:61:01:20:a5:17:34:64:
         aa:fb:a3:02:02:2e:26:7a:89:3c:0c:fc:a3:31:1b:b2:80:73:
         c4:37:28:cd:f4:25:01:67:96:52:9d:93:38:cf:6b:0c:dc:ad:
         b6:f5:8f:b9:15:08:93:ca:56:85:92:7b:b8:fc:b6:8f:33:12:
         c9:45:b4:81:45:d0:81:eb:d4:64:b6:35:eb:85:47:68:7a:73:
         69:25:09:6d:5b:be:a7:e2:81:e4:22:41:8e:d0:6b:a6:51:26:
         a7:01:1a:5e:9c:76:33:f7:1c:fe:6b:a7:71:2e:6d:2b:04:1e:
         f1:1e:c6:ed:ed:17:7f:b8:7a:56:de:98:d0:2f:3d:54:8c:b3:
         ee:67:3c:bb:e4:b8:18:55:94:65:67:2b:6e:19:17:46:bd:c8:
         48:6d:52:7a:ac:74:14:11:61:71:ac:29:e3:5f:3a:32:9f:86:
         9a:47:cd:da:30:7d:93:04:f8:bd:f9:04:b0:92:27:b1:57:26:
         32:6c:3f:02:65:6e:fa:31:4f:93:00:9b:11:d9:09:9a:d3:9d:
         75:92:89:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:22 2024 by rpki-client on console-ams.rpki-client.org