Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa
File:                     7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa (raw, json)
Hash identifier:          ILjWb2PPP5KOkDPx6QAavmyMGGBYfPNbhqPRd137tjg=
Subject key identifier:   E7:53:AD:76:D9:72:D1:54:CF:53:D2:5C:1F:E0:C0:E0:51:A8:02:6B
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584777C639275F4A0C6DA60A9940
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     174
IP address blocks:        23.237.126.0/23 maxlen: 23
                          23.237.130.0/23 maxlen: 23
                          23.237.136.0/23 maxlen: 23
                          23.237.138.0/24 maxlen: 24
                          23.237.191.0/24 maxlen: 24
                          23.237.218.0/24 maxlen: 24
                          23.237.244.0/24 maxlen: 24
                          23.237.250.0/24 maxlen: 24
                          50.7.0.0/24 maxlen: 24
                          50.7.8.0/24 maxlen: 24
                          50.7.9.0/24 maxlen: 24
                          50.7.10.0/24 maxlen: 24
                          50.7.11.0/24 maxlen: 24
                          50.7.12.0/24 maxlen: 24
                          50.7.13.0/24 maxlen: 24
                          50.7.15.0/24 maxlen: 24
                          50.7.16.0/24 maxlen: 24
                          50.7.18.0/24 maxlen: 24
                          50.7.19.0/24 maxlen: 24
                          50.7.20.0/24 maxlen: 24
                          50.7.21.0/24 maxlen: 24
                          66.90.124.0/24 maxlen: 24
                          192.240.122.0/24 maxlen: 24
                          198.255.16.0/24 maxlen: 24
                          216.227.131.0/24 maxlen: 24
                          216.227.142.0/23 maxlen: 23
                          216.227.144.0/23 maxlen: 23
                          216.227.146.0/23 maxlen: 23
                          216.227.148.0/23 maxlen: 23
                          216.227.150.0/23 maxlen: 23
                          216.227.152.0/23 maxlen: 23
                          216.227.154.0/23 maxlen: 23
                          216.227.156.0/23 maxlen: 23
                          216.227.160.0/23 maxlen: 23
                          216.227.162.0/24 maxlen: 24
                          216.227.163.0/24 maxlen: 24
                          216.227.164.0/24 maxlen: 24
                          216.227.165.0/24 maxlen: 24
                          216.227.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:39:27:5f:4a:0c:6d:a6:0a:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=3371ad60-1e62-4c80-81a6-bbc96e0663de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:65:17:30:39:ea:9b:9c:10:ec:f3:f9:b5:52:
                    32:d0:86:81:fb:f1:20:29:7a:76:d5:93:a7:a5:e9:
                    aa:6f:aa:f9:96:ec:0d:c0:2d:f8:b9:60:6e:b6:a1:
                    c3:b2:b0:64:4a:f7:6b:6d:90:1f:b3:4a:1f:05:57:
                    74:95:a8:8f:dd:39:60:1e:5b:66:39:78:e9:e7:15:
                    bf:65:f5:05:e4:bf:8c:1f:75:5f:18:b4:6e:e7:5a:
                    8c:38:b5:d7:54:99:f7:a3:46:ab:5c:84:e5:bc:c0:
                    ff:ad:68:d6:7e:aa:dd:9f:3f:d0:15:a5:35:c9:21:
                    e8:1f:9f:71:d9:62:3d:f0:14:95:f8:62:90:f4:74:
                    00:fd:4a:6f:15:37:72:52:ea:be:75:51:74:d1:81:
                    8f:0a:51:f7:3c:60:96:e5:d8:da:f0:36:46:11:1e:
                    1a:65:20:e7:c8:5f:cb:ff:1e:dd:a4:7c:a7:ef:33:
                    01:65:22:1d:d7:54:31:a9:13:ff:5c:4d:0e:03:f3:
                    19:9d:9d:b8:d0:2b:89:c7:16:f4:97:92:73:76:cf:
                    e4:a4:90:33:92:85:b5:5d:99:fb:df:05:c7:e8:38:
                    a4:7f:e0:d7:1b:6e:77:c8:c4:55:56:62:dc:1a:0d:
                    e5:cd:32:76:37:67:6c:db:fa:69:63:16:8d:d4:75:
                    f4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:53:AD:76:D9:72:D1:54:CF:53:D2:5C:1F:E0:C0:E0:51:A8:02:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7786dd4c-8521-3411-b5ea-ccc36e60d2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.126.0/23
                  23.237.130.0/23
                  23.237.136.0-23.237.138.255
                  23.237.191.0/24
                  23.237.218.0/24
                  23.237.244.0/24
                  23.237.250.0/24
                  50.7.0.0/24
                  50.7.8.0-50.7.13.255
                  50.7.15.0-50.7.16.255
                  50.7.18.0-50.7.21.255
                  66.90.124.0/24
                  192.240.122.0/24
                  198.255.16.0/24
                  216.227.131.0/24
                  216.227.142.0-216.227.157.255
                  216.227.160.0-216.227.165.255
                  216.227.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:cb:58:ac:0d:76:26:90:81:e9:df:6c:ff:05:1e:97:d5:ee:
         76:11:f8:65:cd:81:b4:e7:17:e0:43:e8:33:bd:b5:b6:c5:7a:
         be:0f:dc:79:a2:cc:7f:4d:76:55:2d:99:f6:4c:1b:12:f4:9e:
         be:6a:4f:a5:8b:a5:49:87:be:b8:49:4b:51:1d:fc:cd:19:45:
         b1:e4:31:3d:21:16:e6:00:ae:20:b7:d5:97:70:16:2a:88:a7:
         5c:8e:eb:54:c7:fa:65:06:ae:93:28:35:e5:b4:59:95:1f:c9:
         17:9f:8d:16:28:17:38:68:02:a4:ac:e1:58:57:96:06:a9:74:
         d5:08:f2:5a:d1:e4:21:de:7a:a3:3a:9c:85:cf:d8:0e:b9:1a:
         6f:88:fd:b3:ba:26:5f:2f:0b:46:00:37:22:f6:42:09:45:3a:
         83:be:08:95:ee:39:07:56:d1:36:dd:f1:6f:fa:3c:1f:02:de:
         c7:55:6f:cb:e6:97:97:43:9e:7c:15:05:ee:05:2f:3f:91:a6:
         96:3a:da:ec:11:69:16:04:16:f1:b6:4a:01:11:0c:ba:5c:8b:
         ac:45:38:6e:73:80:93:74:d4:5f:b6:56:86:29:f2:79:6c:61:
         4d:2c:35:45:20:87:6d:47:ed:94:cb:db:9f:b2:75:07:4b:c4:
         d0:d6:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:24:47 2024 by rpki-client on console-fra.rpki-client.org