Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
File:                     8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa (raw, json)
Hash identifier:          /+p3tafuPBJb+eqzcj8k2hm1StYKn+5ufxX50WEJ8GY=
Subject key identifier:   E9:EE:DB:DD:B6:6C:79:66:E3:AA:56:D9:CB:90:7F:24:CD:1B:73:C5
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847699DC80969F90E9D667ED038
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
Signing time:             Wed 02 Oct 2024 23:17:44 +0000
ROA not before:           Wed 02 Oct 2024 23:17:44 +0000
ROA not after:            Wed 01 Jan 2025 00:17:44 +0000
asID:                     174
IP address blocks:        23.237.48.0/24 maxlen: 24
                          23.237.68.0/23 maxlen: 24
                          23.237.70.0/23 maxlen: 24
                          23.237.102.0/23 maxlen: 24
                          23.237.104.0/23 maxlen: 24
                          23.237.140.0/23 maxlen: 24
                          198.255.86.0/23 maxlen: 24
                          198.255.88.0/23 maxlen: 24
                          198.255.122.0/24 maxlen: 24
                          2001:49f0:d04d::/48 maxlen: 48
                          2001:49f0:d04e::/48 maxlen: 48
                          2001:49f0:d055::/48 maxlen: 48
                          2001:49f0:d0a9::/48 maxlen: 48
                          2001:49f0:d0aa::/48 maxlen: 48
                          2001:49f0:d0bf::/48 maxlen: 48
                          2001:49f0:d138::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:9d:c8:09:69:f9:0e:9d:66:7e:d0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct  2 23:17:44 2024 GMT
            Not After : Jan  1 00:17:44 2025 GMT
        Subject: CN=e694bb39-0449-4a26-947a-15903ea3106f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:14:08:25:4f:b3:20:46:69:54:23:b5:b8:
                    85:53:68:b3:75:be:fb:d3:e2:af:c9:3f:79:a1:bd:
                    cb:46:d9:1a:40:d2:8e:87:1b:3b:9f:e2:cb:3b:a8:
                    31:85:b5:02:c8:a9:56:c5:42:a9:24:3a:61:f3:82:
                    75:63:51:e6:92:a8:1a:6e:07:b9:ff:17:c3:5e:0f:
                    62:04:1b:0b:6c:68:1e:bf:da:57:00:7e:3b:8c:9f:
                    ef:19:c0:c8:43:a2:c9:cd:39:e0:da:46:0a:bb:66:
                    af:29:5f:e2:2c:e2:9e:66:9e:76:77:e9:16:b6:b7:
                    eb:b3:96:60:a4:b2:4a:f2:3f:5e:07:6a:f1:2b:84:
                    2a:19:1e:db:38:66:2d:df:9c:40:63:31:54:9f:5f:
                    70:66:e3:bb:b1:74:ba:a1:ff:80:47:c8:50:e2:b7:
                    34:90:e4:45:c5:6f:ca:1f:c7:48:2d:60:90:8f:44:
                    8f:45:e4:37:3c:bf:fb:45:34:1b:96:5d:1f:a2:38:
                    82:23:65:31:4f:54:91:bb:cd:03:ff:a9:5b:96:f8:
                    2f:07:6c:ed:c9:3d:3a:05:8c:f8:f3:36:ca:cb:e1:
                    a1:df:0f:fb:82:06:f6:60:e4:52:04:20:fa:ae:03:
                    68:f1:c2:bd:95:03:ad:63:e0:06:f9:e2:a7:95:ef:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EE:DB:DD:B6:6C:79:66:E3:AA:56:D9:CB:90:7F:24:CD:1B:73:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.48.0/24
                  23.237.68.0/22
                  23.237.102.0-23.237.105.255
                  23.237.140.0/23
                  198.255.86.0-198.255.89.255
                  198.255.122.0/24
                IPv6:
                  2001:49f0:d04d::-2001:49f0:d04e:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d055::/48
                  2001:49f0:d0a9::-2001:49f0:d0aa:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0bf::/48
                  2001:49f0:d138::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:28:e0:58:e8:cf:22:29:c1:14:22:76:90:54:7b:c3:8c:5c:
         be:79:fe:ea:7c:b4:35:02:d3:2e:7c:0e:5c:24:fa:1f:c9:fc:
         a8:00:3a:d6:fb:6b:dc:01:b8:c2:40:01:5b:02:04:45:33:4a:
         b7:7f:d2:59:35:22:f3:db:ee:dc:cd:b8:a9:34:87:3f:eb:96:
         15:a5:62:e1:89:d3:9c:a9:0b:d3:98:42:8f:40:df:5e:09:a8:
         12:6d:17:bd:b7:ee:32:f5:ce:94:16:e9:a5:5e:df:9c:70:86:
         d6:17:f1:e0:44:85:3b:0d:f7:d7:18:57:da:5d:10:c8:c9:35:
         7c:cc:5d:95:89:1d:62:86:2f:13:02:77:4a:00:43:4f:c7:aa:
         7c:4c:d8:7a:3e:8f:1b:12:57:cf:36:83:48:1f:92:a7:f5:13:
         c5:24:0f:1c:7a:bd:a3:4d:b9:90:99:07:cf:29:f5:d6:9c:d3:
         41:62:a4:4d:2c:d2:ff:ce:90:37:2d:8d:53:9f:26:56:fd:8b:
         9a:99:61:fb:02:5d:e0:e6:cb:2c:67:18:6b:cd:f3:c2:e6:b8:
         49:a3:19:a4:c2:eb:a6:c2:28:2d:40:0a:9f:59:7f:d4:ab:24:
         32:c2:ee:ea:4f:d2:eb:81:3d:01:2c:f2:65:c8:f5:47:ef:25:
         24:cb:2b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:24:47 2024 by rpki-client on console-fra.rpki-client.org