Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/803c2bde-202f-3547-ad20-17206b7710e2.roa
File:                     803c2bde-202f-3547-ad20-17206b7710e2.roa (raw, json)
Hash identifier:          GHtKv/K4cvTtNc5As/+JNlaKZR0iAwQvDGoka3Pe8FU=
Subject key identifier:   E9:91:9E:72:90:18:72:D0:8D:78:70:64:89:56:08:40:A8:4D:A8:2F
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F43285847888658D9D3070C9639BDC050
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/803c2bde-202f-3547-ad20-17206b7710e2.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     396982
IP address blocks:        23.141.96.0/24 maxlen: 24
                          2620:1d8::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:58:d9:d3:07:0c:96:39:bd:c0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=d6701d06-a714-45d9-9c88-c3fa1f2d54e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:4f:5c:a1:0a:ae:08:7d:15:e4:a1:94:fe:
                    b9:b4:59:7a:f1:9d:1b:62:98:df:8e:ad:98:39:a8:
                    0b:50:02:37:3d:ac:31:bc:ec:70:ab:a1:bd:55:1a:
                    28:62:f7:c4:e9:56:3a:2e:d1:85:a8:aa:b2:f5:8d:
                    21:ab:6e:3f:79:cc:7a:a6:45:8e:f7:c8:61:db:01:
                    33:f2:ed:9f:05:81:24:3d:3c:cf:e9:b4:62:74:b5:
                    33:d6:93:7e:7f:52:8c:e5:22:e7:e3:2c:27:36:d4:
                    82:f9:49:26:cc:d6:ed:4d:87:fb:13:40:b0:d9:1c:
                    f2:6f:9c:a6:2a:bb:db:5d:1e:be:08:9c:28:a0:be:
                    5f:30:28:0e:18:41:78:50:d8:ad:4c:11:a0:62:fc:
                    6d:89:30:1b:ab:dd:52:54:89:09:27:5a:3f:35:29:
                    31:0a:85:32:fd:ea:2b:af:9a:6d:d2:d5:61:05:b9:
                    51:90:0c:b1:e6:d3:76:16:60:ef:0d:e3:a8:23:c1:
                    72:c2:08:5d:7d:64:36:8f:41:02:21:ae:a8:87:d8:
                    4b:7a:76:9b:8d:e4:c9:66:59:ba:33:1a:78:1b:b4:
                    7f:da:67:24:5c:0c:d7:6f:91:7d:dc:41:4b:25:3d:
                    18:aa:1f:ef:62:fa:f2:48:c8:59:03:af:dd:42:5f:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:91:9E:72:90:18:72:D0:8D:78:70:64:89:56:08:40:A8:4D:A8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/803c2bde-202f-3547-ad20-17206b7710e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier:
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.96.0/24
                IPv6:
                  2620:1d8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:6b:74:cd:38:01:10:3a:88:dc:b9:e5:c5:19:4c:0f:7d:
         bc:3d:e9:a6:7e:29:6b:31:65:cc:96:8e:7f:df:99:37:09:44:
         0b:e9:cb:b2:92:03:83:50:98:78:44:b0:85:3b:28:0f:89:b4:
         b3:49:d2:42:34:e8:35:51:9b:f7:7d:dd:4f:95:f7:26:4b:bf:
         ef:e6:38:44:60:af:01:12:0c:01:e0:95:41:00:c4:b1:78:ef:
         9b:71:1f:cf:69:0e:3b:65:b3:e3:e9:23:1c:23:57:b6:6c:df:
         73:6e:5d:26:d6:1b:24:6a:2b:c9:e5:b5:0a:c1:60:7c:3b:a5:
         c8:ba:83:9a:70:32:2d:bd:0f:be:c8:4e:a5:a7:78:e5:59:c3:
         78:e4:b9:a0:3a:7d:54:a1:c3:65:8f:3f:ff:87:a6:52:da:28:
         78:4e:e7:0a:b4:1d:34:88:13:57:1d:ba:13:18:3e:fb:0b:3b:
         55:63:59:7d:09:32:36:ab:95:76:73:9a:0d:b5:2e:3e:b5:37:
         18:5e:56:b6:b6:19:63:e7:6e:a4:2c:b5:34:f6:f9:c1:fa:af:
         ab:64:c9:7d:0f:09:bf:13:c8:a6:e5:fd:34:90:62:96:0e:30:
         aa:55:5e:9f:fd:6f:07:e9:10:16:33:09:84:8c:fc:cc:0f:19:
         9d:ce:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:03 2024 by rpki-client on console-ams.rpki-client.org