Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/dfd50e54-9a49-38c5-8797-1a6bdd2e9ca8.roa
File:                     dfd50e54-9a49-38c5-8797-1a6bdd2e9ca8.roa (raw, json)
Hash identifier:          8Ux1Lv3XlF6CsVOeZ5KIttRMBp4QGKmV2oUxjQ580qU=
Subject key identifier:   DE:B4:68:3A:01:DF:A4:2D:75:CD:D1:4E:6A:A9:38:FC:B2:9C:B0:90
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F432858474850A0AD845779D1D39BF4C0
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/dfd50e54-9a49-38c5-8797-1a6bdd2e9ca8.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     25855
IP address blocks:        23.147.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:a0:ad:84:57:79:d1:d3:9b:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=fd90db40-e9f7-4f15-a9c9-ffbfe85d1573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:56:f6:5c:aa:21:e4:51:24:d2:ca:33:d1:
                    1a:f8:e1:27:3b:6f:c6:6f:46:02:33:23:5b:cf:02:
                    e1:9a:3d:51:d8:6c:bb:f9:fb:a8:81:8c:3c:68:53:
                    ab:90:7d:15:3b:16:a3:ac:ad:c3:42:95:1a:c6:79:
                    ba:77:ae:8e:cb:ae:7a:59:39:c5:01:00:9b:29:fd:
                    8e:38:bc:b4:29:44:ce:cf:a4:34:b1:df:3b:da:9b:
                    eb:aa:95:a2:59:89:c2:25:91:0a:19:7a:d9:df:3f:
                    fe:8a:30:c4:4a:9c:81:ab:fa:10:f3:81:7b:85:d5:
                    61:69:37:ed:c1:35:82:ee:9b:10:6c:8e:61:23:12:
                    d6:72:3d:a3:ad:a2:48:1e:7b:c9:b2:94:d5:59:b6:
                    59:9c:25:79:b7:92:9c:58:96:0c:83:40:f3:45:54:
                    ee:1b:79:13:ed:85:d6:5d:96:3f:2f:01:84:73:b9:
                    1e:9d:ac:e2:1c:72:f8:be:d0:ca:81:ca:61:d0:98:
                    94:a1:66:b1:73:87:62:b7:26:f4:11:ab:b4:5e:ae:
                    25:98:b8:78:37:6b:cd:c3:3c:fa:8a:63:1d:91:10:
                    43:6c:96:aa:50:0f:ce:fe:71:06:e6:f9:32:28:c9:
                    6f:67:73:34:4d:ff:6e:bf:04:87:e9:0e:ae:99:04:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B4:68:3A:01:DF:A4:2D:75:CD:D1:4E:6A:A9:38:FC:B2:9C:B0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/dfd50e54-9a49-38c5-8797-1a6bdd2e9ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:18:80:f5:f1:26:a9:d1:8f:4e:76:27:d5:5b:5f:fc:0a:
         0f:f3:a3:f5:66:67:97:81:72:22:f2:69:b7:6d:af:7e:41:85:
         36:8e:4f:38:bd:a8:cf:7b:9a:28:c5:2d:ea:ad:11:07:af:55:
         6c:aa:6a:9a:ca:e1:f5:8f:cd:8a:27:3d:c0:68:26:9f:09:e9:
         b4:6d:68:d8:b3:71:33:0a:a3:23:c6:01:38:fa:cc:c7:7b:b2:
         e5:4f:f1:73:76:5f:cf:7a:ed:36:6c:c4:82:c7:35:9e:f8:d4:
         2f:fd:23:2d:87:08:a3:17:63:7a:b8:cd:a2:b2:2e:98:e2:d6:
         6d:9c:8b:34:74:14:19:ef:a0:1b:82:0f:91:10:eb:9b:f8:91:
         2e:4a:1c:00:55:63:b2:88:e4:35:f8:d7:0b:73:b8:33:ce:43:
         bc:d0:bb:a4:0a:ca:ed:2c:fd:82:a5:a7:8a:53:cc:1c:27:47:
         ee:4c:1e:ad:d8:4f:ac:38:8e:6d:38:bc:bc:fb:2d:52:35:12:
         c4:df:24:2c:71:a6:de:8a:c2:52:ab:4c:03:bb:5c:20:b2:68:
         17:61:48:8d:d3:28:90:af:7a:3f:74:cf:bc:af:ab:d0:4a:c0:
         2d:b6:4b:04:0c:09:79:5f:2a:50:23:7d:47:3d:d5:af:f0:a2:
         1a:6f:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:10:18 2024 by rpki-client on console-fra.rpki-client.org