Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa
File:                     c2790227-b2a7-3771-9257-78748f60cd1e.roa (raw, json)
Hash identifier:          3HOvYXjood5fU8K39MlLVg+OHvSWoWjuoBV1vP1Hz3Y=
Subject key identifier:   CA:D6:78:47:85:52:31:C9:89:61:9F:AF:C5:05:28:CA:B2:F3:EC:F7
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F432858477230E0883881906503E5F200
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     25855
IP address blocks:        23.147.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e0:88:38:81:90:65:03:e5:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=64a04db1-8256-428f-a7e5-2aa05a2462a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9f:1d:20:0b:ef:b1:df:e3:8e:03:52:42:fe:
                    55:d0:e4:46:ca:48:08:de:99:80:1d:9d:d8:fa:01:
                    67:13:4c:c2:0e:18:6a:1d:6b:f3:cf:cb:fa:f0:64:
                    e7:c2:27:e3:51:fa:1b:87:47:d8:dd:3a:03:ac:f8:
                    1e:5e:5b:16:92:0f:d5:14:eb:99:40:05:6a:88:99:
                    61:0f:c7:32:16:bf:6c:25:13:da:1b:66:76:98:a8:
                    39:d0:a9:9d:b3:90:4f:0c:aa:52:42:33:64:29:9a:
                    27:d8:58:84:f4:08:07:b6:48:b8:60:01:d9:d4:49:
                    5b:aa:e8:c7:9a:ae:49:30:56:8c:3e:ca:0b:43:18:
                    c5:d8:0c:9d:23:30:96:74:9b:c4:8d:4d:e2:c3:25:
                    e5:ff:71:8a:aa:54:48:1b:7e:28:cc:08:37:c1:77:
                    36:ff:17:96:85:34:d9:05:1a:47:4a:09:40:ac:19:
                    e6:1a:ff:a8:d3:7c:c7:5c:16:3d:0c:72:15:23:8e:
                    00:d1:57:e1:c6:1a:e7:bd:fd:a1:2a:05:62:52:18:
                    5c:1b:08:43:13:1f:b1:e4:b5:f7:00:3a:45:b2:5e:
                    a7:03:e6:2d:fc:84:e7:f2:56:d8:ba:2b:9d:72:a9:
                    6e:8e:2b:20:f8:14:9c:68:57:71:04:b0:90:8a:64:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D6:78:47:85:52:31:C9:89:61:9F:AF:C5:05:28:CA:B2:F3:EC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:29:12:22:b3:7f:5d:10:97:ba:61:76:18:7d:e3:d8:a0:
         b3:35:74:f3:cb:02:9e:94:09:65:39:75:8e:6f:02:4c:38:11:
         76:92:1f:a1:1e:ac:eb:3e:fe:6c:5a:b0:bb:ed:63:db:da:2f:
         73:c4:be:16:9a:3a:d5:38:8f:66:d9:33:ca:71:26:ca:a2:1c:
         72:3a:36:0d:14:d2:87:89:f8:72:e4:49:e5:36:25:b9:32:7d:
         12:cf:13:bb:ac:b5:7d:24:be:30:75:0e:20:e2:4b:d2:3c:2e:
         2b:ae:61:ae:fa:65:5d:2b:53:23:24:41:a1:a8:e2:d4:a6:ac:
         5a:28:9a:28:22:03:d7:f3:c7:34:ad:c9:66:f9:ee:c8:54:60:
         67:53:e1:85:6a:84:5c:d1:a5:bd:a2:07:91:5e:0e:5a:1d:f7:
         b7:c0:00:bb:b9:75:f5:53:97:e7:14:c3:b2:d9:dd:16:03:0d:
         99:32:32:36:cc:3b:55:43:00:cb:5e:ee:47:93:cf:99:86:9a:
         43:75:52:eb:ef:1c:00:e9:39:a3:c1:44:0a:10:d7:7f:26:6a:
         20:62:12:06:b3:5c:4c:3b:d2:47:5c:6a:7b:3b:a8:d1:57:2f:
         6a:f1:cb:50:df:9d:32:12:24:77:0b:80:fa:84:b1:6d:54:47:
         b1:d8:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:10:18 2024 by rpki-client on console-fra.rpki-client.org