Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8df1d8c-172e-30ec-9499-2164cc775c04.roa
File:                     e8df1d8c-172e-30ec-9499-2164cc775c04.roa (raw, json)
Hash identifier:          orioI9XwuWR7U5ilhrWNzz7n4CLT9kYqPq3tW+uu3mQ=
Subject key identifier:   C3:74:57:AA:50:38:8E:06:5F:34:5B:1A:61:0A:DB:BA:CB:1F:48:A4
Certificate issuer:       /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
Certificate serial:       010D0C9F43285847B101626BA8C45261E8381FA0
Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8df1d8c-172e-30ec-9499-2164cc775c04.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397952
IP address blocks:        23.135.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:62:6b:a8:c4:52:61:e8:38:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=c411dd18-6422-4c76-8f3c-48c9bdc07371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:34:72:9d:0c:ce:5f:f8:02:7d:24:22:a7:
                    40:0b:73:09:e7:63:8a:30:3d:43:33:9b:37:7d:43:
                    3f:8e:be:21:f8:e7:8e:6b:2f:eb:1b:b3:fe:2f:f1:
                    42:14:7f:85:10:bd:1f:23:f7:2f:4c:2e:05:cc:dd:
                    19:42:36:f5:5a:f1:d0:54:39:c8:74:f0:fc:25:9c:
                    62:c4:43:09:1b:e5:92:d3:0b:e9:c1:c9:3e:ca:1b:
                    ee:c5:04:31:09:28:ba:4b:b7:14:1f:a7:3d:4d:cb:
                    4c:b2:e7:3c:f6:df:b7:7e:01:6a:e8:0e:b9:c0:4f:
                    97:3f:74:4a:da:86:37:ff:c1:39:3d:b2:b0:05:86:
                    69:cd:19:f6:b6:b3:c8:2a:7b:28:61:be:89:0e:75:
                    cd:1d:ac:c9:a9:a4:d8:6a:7a:04:d5:55:f2:b4:ba:
                    f4:b1:38:55:41:bf:15:67:37:45:5c:66:ef:59:6d:
                    bf:b8:24:67:12:d4:c7:4e:36:09:69:8d:25:f5:e7:
                    3d:8a:b1:da:15:1f:84:96:64:f2:55:d8:33:35:bd:
                    b0:ad:1b:a4:6c:f6:46:fc:2f:6c:1b:89:5a:3d:66:
                    9d:f4:e2:db:d6:e3:aa:4c:f8:f9:bf:54:5b:0f:0b:
                    fe:be:76:3b:a0:98:3d:dd:06:cb:6b:bc:6d:d9:cf:
                    8b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:74:57:AA:50:38:8E:06:5F:34:5B:1A:61:0A:DB:BA:CB:1F:48:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8df1d8c-172e-30ec-9499-2164cc775c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl

            X509v3 Authority Key Identifier:
                keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4b:78:7d:37:cb:73:d2:b9:a8:08:4e:19:28:ae:5d:a7:b5:
         60:9c:13:25:5f:45:ee:30:04:cc:1b:bf:90:be:b0:f6:20:ef:
         79:79:34:68:6f:48:9a:ff:01:2d:d5:37:17:ee:c2:bb:21:ba:
         52:87:c3:19:f1:dd:a0:3b:1a:d2:40:91:c3:7f:bd:a6:49:0e:
         8f:98:4d:0b:0c:ca:42:73:e0:8a:6b:24:e8:7d:59:4e:cd:e6:
         56:85:f3:95:96:52:8a:a6:7c:dc:73:36:0b:4e:41:e5:ba:ac:
         3f:04:65:a5:ac:a1:b8:62:67:96:c1:49:01:d7:38:cb:cc:7d:
         1a:e1:be:db:4e:1d:b1:6b:72:59:da:9f:d1:de:91:be:6f:0d:
         9a:7a:b4:54:3d:e5:e5:f1:02:41:bd:2c:9a:32:ea:6e:de:b7:
         58:d0:d1:24:71:35:6f:a3:91:42:c6:73:45:ca:3f:66:60:eb:
         e6:32:93:52:28:2a:b8:12:2a:6b:f9:1b:fa:8f:6b:ea:6a:18:
         39:86:b1:db:65:0a:f6:c0:20:9a:21:be:0f:11:79:7b:a6:ab:
         00:5e:c6:65:a5:94:5c:ce:83:86:85:db:3a:8f:2f:2d:fd:55:
         74:f3:08:d4:06:24:a2:d3:39:8d:e7:4f:04:62:ce:ef:43:8b:
         48:cc:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:35 2024 by rpki-client on console-fra.rpki-client.org