Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/a16a19b1-64d1-353b-8020-8970bee04bbd.roa
File:                     a16a19b1-64d1-353b-8020-8970bee04bbd.roa (raw, json)
Hash identifier:          vnxHdWHdrncLzGeXdElt3kRgPpd8estCRcNLGWLLQ3w=
Subject key identifier:   EE:F4:9C:F6:8E:07:90:6F:99:02:9A:75:30:AF:A9:3D:6A:C3:0D:CD
Certificate issuer:       /CN=b3642034-3a8a-4858-abb3-8e2b429a1376
Certificate serial:       010D0C9F432858483FA3BB690EB5F31A9E507C00
Authority key identifier: 35:82:A7:1E:56:7F:83:97:CC:41:D0:90:E0:C3:03:29:B9:29:09:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/a16a19b1-64d1-353b-8020-8970bee04bbd.roa
Signing time:             Wed 18 Dec 2024 15:12:43 +0000
ROA not before:           Wed 18 Dec 2024 15:12:43 +0000
ROA not after:            Tue 18 Mar 2025 14:12:43 +0000
asID:                     46574
IP address blocks:        23.131.4.0/24 maxlen: 24
                          2602:f76e::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:a3:bb:69:0e:b5:f3:1a:9e:50:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3642034-3a8a-4858-abb3-8e2b429a1376
        Validity
            Not Before: Dec 18 15:12:43 2024 GMT
            Not After : Mar 18 14:12:43 2025 GMT
        Subject: CN=bec10bd3-77db-4e3b-b1cf-e3aab7813815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:31:13:d3:10:cb:bf:e4:9d:57:13:a2:75:
                    cf:c1:ba:44:dd:05:86:d4:59:fb:57:21:1f:d6:9d:
                    74:e0:63:7f:fa:a0:85:c8:d4:c5:e6:58:24:ca:0e:
                    c8:db:35:c4:c8:d8:4d:26:37:9a:46:97:c3:f9:9c:
                    5f:c1:35:af:0d:7e:ba:af:22:a2:97:b9:0d:b6:92:
                    89:ca:1a:57:90:3c:11:95:d1:9f:7c:3c:1b:7e:9f:
                    56:f5:f1:6b:a7:b2:55:3b:55:e8:82:71:49:ed:ba:
                    42:6a:c8:68:d7:bf:37:e6:5e:fa:6c:6a:7c:56:ce:
                    35:c5:e0:32:21:3d:b4:e7:a1:70:54:6a:de:cf:61:
                    9d:85:6c:e3:4a:78:61:85:fb:cf:0f:8c:8d:30:f5:
                    8e:49:7a:55:55:52:4c:bc:f2:e4:e3:e4:bd:96:b8:
                    de:fb:c4:e4:a6:95:f7:1e:61:ef:c6:77:e6:0c:68:
                    a3:30:9c:bf:a7:d2:1f:38:8c:92:1e:9b:b8:d6:91:
                    0a:e2:d4:3a:7d:c2:83:b3:e4:f5:e8:44:34:3b:ec:
                    c4:94:6c:09:6e:ed:5a:96:c8:79:f3:99:2a:3c:f0:
                    bd:96:f3:a7:e0:e0:49:f7:e1:64:08:46:e5:57:3e:
                    96:d9:06:cf:06:3f:70:92:b1:87:5a:61:51:b5:da:
                    2f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:9C:F6:8E:07:90:6F:99:02:9A:75:30:AF:A9:3D:6A:C3:0D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/a16a19b1-64d1-353b-8020-8970bee04bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.crl

            X509v3 Authority Key Identifier:
                keyid:35:82:A7:1E:56:7F:83:97:CC:41:D0:90:E0:C3:03:29:B9:29:09:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.4.0/24
                IPv6:
                  2602:f76e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e9:71:51:cb:83:22:2b:cb:79:84:a9:5d:db:7a:fd:d9:bc:
         2e:d9:97:ab:49:74:4c:5f:54:b4:ff:63:fc:84:65:b2:d9:0e:
         66:82:39:5b:7c:7d:e9:16:ae:64:fb:cc:3f:be:7a:49:b2:67:
         6f:25:b7:97:fe:73:c1:78:0e:e0:80:50:0b:0f:89:14:33:a2:
         10:f9:54:a2:99:72:42:24:d0:bb:bf:2e:dc:a4:6c:3e:ea:e4:
         fc:2d:03:c4:00:cc:db:83:14:11:bf:42:9b:d9:11:06:0e:31:
         e1:c8:e6:bd:1a:88:83:9b:b6:e3:20:a1:17:bd:6f:fb:8a:45:
         13:41:95:fb:c7:59:f4:2a:eb:c9:71:59:7f:29:cb:7c:e6:74:
         0b:4c:92:02:e3:1a:13:d0:84:88:4d:7d:f1:e8:d2:7d:ab:52:
         a4:7d:58:a0:66:d0:61:06:4e:91:d0:7f:0b:f8:7a:43:03:cc:
         a0:e2:e7:83:49:2e:35:38:3a:0c:f3:c4:ca:28:27:2e:f5:e2:
         a3:34:60:4d:e8:ca:2b:06:79:1f:cc:2d:dc:46:eb:d5:1e:0e:
         2f:3a:2b:45:3e:bc:df:85:26:64:60:39:5f:c0:75:49:a9:6a:
         9a:3a:10:78:81:2e:63:43:15:f4:67:dc:21:a5:3f:7b:f1:fe:
         d5:05:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org