Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa
File:                     791c2f5d-4258-3b3d-82a7-78c6a688c098.roa (raw, json)
Hash identifier:          lvR7c3gTaOJpbXXzjqYeRa3ElodI3/nS01XcaTBTqbY=
Subject key identifier:   1A:BF:F4:E2:DD:B8:AD:3E:FA:2B:B6:2F:8E:08:37:F6:66:67:1E:31
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858476D935A8472E16122ACF1B1C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa
Signing time:             Fri 04 Oct 2024 09:19:58 +0000
ROA not before:           Fri 04 Oct 2024 09:19:58 +0000
ROA not after:            Thu 02 Jan 2025 10:19:58 +0000
asID:                     30058
IP address blocks:        23.237.74.0/23 maxlen: 24
                          23.237.82.0/23 maxlen: 24
                          23.237.158.0/23 maxlen: 24
                          23.237.208.0/24 maxlen: 24
                          50.7.72.0/22 maxlen: 24
                          192.240.100.0/23 maxlen: 24
                          198.255.121.0/24 maxlen: 24
                          2001:49f0:d002::/48 maxlen: 48
                          2001:49f0:d048::/48 maxlen: 48
                          2001:49f0:d090::/48 maxlen: 48
                          2001:49f0:d0c9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6d:93:5a:84:72:e1:61:22:ac:f1:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct  4 09:19:58 2024 GMT
            Not After : Jan  2 10:19:58 2025 GMT
        Subject: CN=0c3a6bcd-5159-441e-ba26-80ffc8ce5687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:4b:f3:c1:b6:4e:1c:98:6d:86:2e:40:d6:
                    8c:fe:6b:4c:f7:e1:e2:e0:3d:54:cc:ea:8a:33:b7:
                    f9:1d:47:e6:24:ab:e6:e3:21:3f:9e:97:55:87:80:
                    ab:6e:d1:6b:73:26:90:16:8d:7d:53:66:70:a8:88:
                    ea:c3:bf:25:65:f7:a8:a0:eb:2d:39:ac:b2:eb:4d:
                    15:a9:cb:29:71:57:16:b8:0a:48:81:01:1d:ce:7c:
                    94:05:65:96:05:1c:d2:3e:bb:47:26:cf:14:3d:f2:
                    5a:a2:27:cd:ad:35:ae:7d:a0:1b:d8:e9:75:43:5d:
                    5d:d9:8f:c6:dd:34:2f:4b:30:f5:6a:1e:f4:50:04:
                    30:34:28:c7:c1:c5:b1:86:0f:b5:cb:92:c4:ca:84:
                    b4:03:70:2f:14:06:e3:f5:aa:88:c3:da:b0:3e:20:
                    2a:0f:a6:66:1a:56:4e:4e:4c:a3:c6:54:d3:a2:1b:
                    b2:e5:7f:88:1b:75:81:6e:f2:9b:e3:a3:1d:38:5a:
                    94:fa:30:94:99:b5:4f:57:e9:cd:c7:e1:e7:3d:04:
                    f4:a5:63:71:ab:d1:7d:8d:51:a4:e3:44:95:71:d2:
                    0f:69:b3:cd:25:b6:13:de:22:c8:cf:09:6c:29:50:
                    25:43:51:97:2b:4e:2b:b9:d8:f0:46:ef:ff:48:65:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BF:F4:E2:DD:B8:AD:3E:FA:2B:B6:2F:8E:08:37:F6:66:67:1E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.74.0/23
                  23.237.82.0/23
                  23.237.158.0/23
                  23.237.208.0/24
                  50.7.72.0/22
                  192.240.100.0/23
                  198.255.121.0/24
                IPv6:
                  2001:49f0:d002::/48
                  2001:49f0:d048::/48
                  2001:49f0:d090::/48
                  2001:49f0:d0c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:49:d1:e9:26:ae:c1:be:90:59:a5:a6:e3:a0:95:b7:8d:7c:
         d4:a1:d9:0b:df:bf:8d:88:e4:4a:22:ba:02:b0:31:b4:32:b1:
         97:b7:a4:5d:89:30:9e:38:a5:3c:68:64:7f:13:ec:68:6b:a6:
         e4:00:2c:81:f5:cc:bb:e8:a5:d4:eb:bb:51:51:d7:60:d7:82:
         06:d9:54:6c:42:d5:b8:b2:83:d9:b3:cd:6b:16:0a:81:fa:0f:
         c7:ba:eb:ed:35:2d:35:c5:4a:5c:ec:5e:17:08:18:f8:df:b5:
         3c:6a:c7:59:f8:6b:80:8d:64:50:3b:55:83:e7:ee:8b:c6:0d:
         c5:aa:2a:1d:89:1b:7f:0e:20:94:16:98:47:3a:0b:f8:0b:3b:
         ec:b7:5a:6c:66:00:27:21:87:dc:bf:ba:94:57:c1:68:e4:38:
         c1:1a:e9:ab:5d:f6:5d:50:99:7c:a6:c8:9b:25:c1:6b:16:be:
         f4:34:ea:bf:e9:60:37:96:37:df:7d:cb:63:03:b3:e2:7d:42:
         4b:d2:97:2c:c0:ee:cd:98:21:49:c9:1e:82:e0:11:db:50:23:
         ad:c6:50:50:39:00:1e:b3:2d:bd:74:43:bf:a5:ef:89:d4:14:
         d0:1c:91:61:f7:46:b8:53:0a:52:b1:e7:f3:64:b9:26:ec:20:
         66:07:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:17 2024 by rpki-client on console-ams.rpki-client.org