Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa
File:                     d893a598-2191-39e4-ab6f-df13d27172ac.roa (raw, json)
Hash identifier:          yOs5PZZ5MMDM/7Km3SPZ2+dbjTDGspiYWoLtE+6Tkto=
Subject key identifier:   4D:05:94:E2:0C:9A:F8:29:8F:B0:FA:3A:9A:E6:11:34:CA:70:AE:25
Certificate issuer:       /CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c
Certificate serial:       010D0C9F43285847C1DF57AD14FA036B91AA73C0
Authority key identifier: 21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     399029
IP address blocks:        23.144.216.0/24 maxlen: 24
                          2607:dc0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:57:ad:14:fa:03:6b:91:aa:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=ceb39491-2356-4c2e-b397-06b8b62a3b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:c1:cd:b6:25:d9:1d:89:e4:47:96:7c:2b:
                    04:12:5f:f0:21:b1:15:bb:c9:e3:21:89:d3:58:6c:
                    a3:6d:bf:cb:e4:1c:9c:52:e5:4a:e7:04:18:6f:fc:
                    d5:f6:10:6c:ce:8c:67:01:da:0f:27:65:96:eb:a5:
                    6c:0f:d9:3c:ca:3f:a6:bb:6e:27:15:05:72:d3:37:
                    24:62:8e:a3:48:7f:18:1a:c1:ab:9a:8d:24:c6:90:
                    14:df:ca:b2:2b:25:f1:29:52:74:a0:03:82:4d:3c:
                    5d:bd:74:62:f7:f0:7b:e5:b7:a7:45:16:2e:b4:72:
                    da:d9:7e:dc:3d:e5:31:d3:66:a8:7e:30:c4:95:51:
                    49:62:ab:af:16:03:ba:63:a6:2b:93:67:04:59:7a:
                    e4:18:f5:d8:b4:6c:68:09:6e:d6:bb:27:c2:2c:73:
                    2f:67:e1:30:a8:a3:c6:3c:70:50:b8:ab:f2:c5:9f:
                    87:8b:54:f0:65:fd:0a:b2:35:11:9f:ad:02:89:e0:
                    78:0d:e9:5b:b5:34:29:c6:69:d4:0d:13:5a:b5:fe:
                    03:a1:ff:a9:76:1f:9c:89:01:5c:a7:82:12:08:f9:
                    cf:dd:58:c1:14:f7:f9:a6:d8:37:7d:bc:73:dd:ff:
                    70:74:8a:c5:83:8d:8e:0b:5b:87:ee:9d:cc:21:da:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:94:E2:0C:9A:F8:29:8F:B0:FA:3A:9A:E6:11:34:CA:70:AE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl

            X509v3 Authority Key Identifier:
                keyid:21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.216.0/24
                IPv6:
                  2607:dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:72:06:71:dd:55:e3:3a:94:a7:b5:71:89:63:0d:09:85:0f:
         43:55:6e:fc:66:99:6c:44:fa:71:bd:24:63:61:46:dd:bb:95:
         a8:87:cc:71:f9:87:46:09:50:c2:b3:4b:67:22:f3:70:4d:ff:
         07:89:4b:ac:12:01:22:c8:8d:7d:19:f4:d0:99:1f:93:09:3c:
         de:03:02:7a:1e:1b:ad:d2:6e:25:20:64:b8:4c:70:1b:a9:37:
         ba:95:62:1e:03:08:bd:96:f0:2c:dd:cd:f8:9b:53:29:4e:de:
         60:31:a6:c3:62:61:d1:2d:f3:b6:4c:3d:b0:df:08:ad:13:75:
         4d:24:57:0e:ac:cd:0c:16:31:31:93:32:5b:aa:e8:3b:e7:0b:
         7d:eb:bd:2b:26:e0:74:d7:be:a6:2d:46:fe:d6:a8:fc:e3:4d:
         e4:e0:54:3e:42:c4:70:0e:89:ad:61:4e:7e:a8:f4:0c:e8:91:
         e3:88:24:b0:5d:bc:7c:2b:ae:1b:b7:c2:e0:27:07:28:27:31:
         37:dd:1b:55:10:52:22:8d:57:6e:99:be:4e:a9:16:f4:3f:da:
         17:cc:62:97:8f:49:df:19:1b:31:ad:e2:06:74:e6:47:08:7a:
         ef:59:8b:c5:c8:f5:99:a9:f4:8f:4e:41:59:f6:a8:eb:d5:6e:
         14:df:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:23 2024 by rpki-client on console-fra.rpki-client.org