Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/ea9247e2-0bf2-3535-9b79-d996f0418db5.roa
File:                     ea9247e2-0bf2-3535-9b79-d996f0418db5.roa (raw, json)
Hash identifier:          oINx/yyijTSa98pviApH/rKDLdzwkgCPk1iB8Sr/OUE=
Subject key identifier:   FF:64:1E:4A:10:3A:87:08:57:35:B2:81:6E:76:D3:32:13:23:88:68
Certificate issuer:       /CN=e0b35546-769e-41a6-987e-2a9732555de4
Certificate serial:       010D0C9F43285847256F3191AB744A7C06314480
Authority key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/ea9247e2-0bf2-3535-9b79-d996f0418db5.roa
Signing time:             Sun 08 Sep 2024 13:08:54 +0000
ROA not before:           Sun 08 Sep 2024 13:08:54 +0000
ROA not after:            Sat 07 Dec 2024 14:08:54 +0000
asID:                     57934
IP address blocks:        23.146.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6f:31:91:ab:74:4a:7c:06:31:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b35546-769e-41a6-987e-2a9732555de4
        Validity
            Not Before: Sep  8 13:08:54 2024 GMT
            Not After : Dec  7 14:08:54 2024 GMT
        Subject: CN=5bbd5a85-b4be-4981-a973-40b59c0c9949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:0c:1c:00:5a:f2:dd:28:b5:6c:99:70:c1:
                    c9:7f:34:3a:de:9a:7b:c0:52:64:26:61:f8:ba:b9:
                    bd:1a:e0:28:41:56:1a:60:3f:fa:8b:e3:77:8a:22:
                    fb:fe:9e:f5:05:44:be:f6:72:89:ab:58:2b:a7:60:
                    dd:13:04:dd:4a:8f:cb:16:a5:6d:61:4c:80:94:ae:
                    7b:7d:89:35:db:02:9b:e6:ed:e6:c2:d6:71:60:28:
                    86:db:43:80:18:5f:6f:71:f0:67:88:66:41:77:16:
                    62:af:41:8c:38:ab:38:d0:87:fd:b9:d0:a5:67:33:
                    0f:de:6d:e9:5c:f2:5f:f0:e4:b9:d5:75:13:2b:78:
                    38:48:f2:57:1a:d5:f1:cc:3b:2d:ba:8e:27:0e:c7:
                    6a:1e:a7:cf:fe:93:ef:d8:8b:16:85:cb:94:7a:1c:
                    04:09:47:33:b9:7f:08:fe:15:17:16:26:d4:f5:22:
                    b1:d5:44:07:5a:87:af:4c:40:00:e0:4e:b2:c7:cf:
                    6f:75:ec:82:67:5f:4d:0e:b9:23:fb:42:1a:57:f6:
                    b1:50:bc:b6:18:bd:bf:a0:41:fb:77:6b:c5:5d:66:
                    a9:f8:de:eb:04:f1:ad:6b:35:27:ba:2a:72:2b:c5:
                    f9:33:6c:0d:4f:29:8b:07:c8:31:b1:59:6b:95:5d:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:64:1E:4A:10:3A:87:08:57:35:B2:81:6E:76:D3:32:13:23:88:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/ea9247e2-0bf2-3535-9b79-d996f0418db5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl

            X509v3 Authority Key Identifier:
                keyid:FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:80:82:9c:92:cd:fe:86:9f:80:d5:d3:c7:b8:ae:c1:13:
         17:a8:8d:c9:0c:cc:d0:f8:68:b1:fb:38:ed:d9:8c:f8:f3:7c:
         54:03:de:bf:4d:c3:4e:39:df:8e:25:da:ae:d7:ff:67:1b:83:
         d3:bd:7f:f4:29:a4:24:25:3b:af:e9:a3:2f:14:ca:49:f4:3d:
         6b:18:17:b2:f7:64:d2:cd:46:b3:b8:b5:6a:06:b4:4a:9b:cb:
         1f:81:99:31:ba:20:2f:9d:7d:f7:88:7d:5a:0b:14:14:8f:41:
         1f:71:0b:94:b3:d9:8e:50:66:66:e9:e1:4f:13:ad:65:50:96:
         4b:46:c2:38:a1:88:de:65:85:69:74:bf:10:c3:22:9f:b0:ff:
         8b:c2:ae:ba:23:13:cb:b0:e6:ce:b1:de:87:a1:62:b3:cc:54:
         b8:ad:4c:41:2a:db:00:00:e2:e8:20:fc:40:a1:22:0a:4c:68:
         f4:23:6d:2f:bd:8e:d0:2d:0c:59:8e:98:2f:cf:04:86:4e:6e:
         ce:a0:10:cf:32:0d:1b:72:e6:c5:d3:d6:0a:d4:bf:98:72:04:
         3e:c9:a0:0b:72:e0:6a:73:2c:8e:dc:c4:e4:60:13:a1:8b:cd:
         00:78:e8:a8:80:db:ea:4f:92:41:2d:db:65:8a:90:fd:8c:5b:
         3a:02:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:24 2024 by rpki-client on console-fra.rpki-client.org