Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ab12010e-df71-3b16-a4ba-b10966c8c9cf.roa
File:                     ab12010e-df71-3b16-a4ba-b10966c8c9cf.roa (raw, json)
Hash identifier:          gAScFV9QCu8PmwoeuU/oh2zdiayVAQ83++p4XKSrAkc=
Subject key identifier:   DF:48:10:60:B9:FF:1E:87:11:7D:86:33:8B:8D:13:F8:BC:0B:1C:92
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858478D15E5A94B2F4C8C55B47AE4
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ab12010e-df71-3b16-a4ba-b10966c8c9cf.roa
Signing time:             Tue 15 Oct 2024 16:13:03 +0000
ROA not before:           Tue 15 Oct 2024 16:13:03 +0000
ROA not after:            Mon 13 Jan 2025 17:13:03 +0000
asID:                     174
IP address blocks:        23.237.53.0/24 maxlen: 24
                          23.237.58.0/24 maxlen: 24
                          23.237.76.0/23 maxlen: 24
                          23.237.86.0/23 maxlen: 24
                          23.237.192.0/23 maxlen: 24
                          23.237.230.0/24 maxlen: 24
                          23.237.240.0/24 maxlen: 24
                          50.7.68.0/22 maxlen: 24
                          192.240.96.0/23 maxlen: 24
                          198.255.2.0/24 maxlen: 24
                          198.255.20.0/23 maxlen: 24
                          198.255.76.0/23 maxlen: 24
                          198.255.78.0/23 maxlen: 24
                          198.255.80.0/23 maxlen: 24
                          198.255.82.0/23 maxlen: 24
                          198.255.125.0/24 maxlen: 24
                          2001:49f0:d025::/48 maxlen: 48
                          2001:49f0:d050::/48 maxlen: 48
                          2001:49f0:d051::/48 maxlen: 48
                          2001:49f0:d052::/48 maxlen: 48
                          2001:49f0:d053::/48 maxlen: 48
                          2001:49f0:d054::/48 maxlen: 48
                          2001:49f0:d099::/48 maxlen: 48
                          2001:49f0:d0df::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8d:15:e5:a9:4b:2f:4c:8c:55:b4:7a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 15 16:13:03 2024 GMT
            Not After : Jan 13 17:13:03 2025 GMT
        Subject: CN=d93afb4e-4c40-4bec-ba21-3f9d3d699090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:48:6e:e3:53:61:54:89:c8:5f:41:a8:f6:
                    0e:c2:1d:45:2d:ae:82:ea:8a:b2:d2:ef:38:01:ee:
                    09:ec:3c:02:18:4d:65:3a:18:d4:bb:76:0e:88:e7:
                    aa:3a:fc:96:c8:8b:fc:10:0f:87:ae:6e:3a:a5:93:
                    17:18:fb:c4:9c:af:06:bf:43:d9:53:4f:34:d5:2e:
                    17:ff:28:2f:5a:73:80:81:4a:2a:69:d7:8e:bf:c7:
                    e7:55:4a:01:4a:ee:28:c6:68:5a:d4:36:cf:1a:c9:
                    4b:05:41:d9:a9:85:1a:f9:82:26:de:2e:6e:2d:2e:
                    dd:61:90:35:47:de:f3:7f:49:cd:79:aa:5f:19:13:
                    de:56:12:36:7c:91:7f:96:96:5a:23:41:e7:3e:c4:
                    1b:be:0c:47:c7:09:c7:75:a5:3b:df:d5:e1:e5:2b:
                    9d:ce:09:6e:80:30:62:7e:14:63:1a:18:14:66:df:
                    8f:0e:30:ba:3a:e3:6f:7d:35:f2:e8:c4:ef:1e:ac:
                    88:4a:79:55:6c:da:d6:a2:33:08:12:4a:8a:ba:89:
                    5a:77:63:f3:89:2c:47:b4:7f:07:69:7d:d6:22:f9:
                    af:70:43:b1:99:16:93:23:34:af:4f:39:3b:ad:6e:
                    d1:d6:af:3e:39:a1:60:65:fa:b2:13:a4:d0:38:4b:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:48:10:60:B9:FF:1E:87:11:7D:86:33:8B:8D:13:F8:BC:0B:1C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ab12010e-df71-3b16-a4ba-b10966c8c9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.53.0/24
                  23.237.58.0/24
                  23.237.76.0/23
                  23.237.86.0/23
                  23.237.192.0/23
                  23.237.230.0/24
                  23.237.240.0/24
                  50.7.68.0/22
                  192.240.96.0/23
                  198.255.2.0/24
                  198.255.20.0/23
                  198.255.76.0-198.255.83.255
                  198.255.125.0/24
                IPv6:
                  2001:49f0:d025::/48
                  2001:49f0:d050::-2001:49f0:d054:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d099::/48
                  2001:49f0:d0df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0b:51:fe:2d:8c:fa:fa:b5:3b:50:6e:4b:b1:c7:71:c8:a1:
         eb:a4:8c:5a:b9:07:20:27:53:07:41:cc:37:a4:86:42:ee:b4:
         a9:8d:46:28:47:d0:14:cc:87:3f:9c:82:c0:3c:87:3e:ee:62:
         6c:f0:30:ea:13:77:6f:37:3d:b3:2d:96:9b:c2:a9:b9:91:e7:
         c6:4b:49:7e:df:7a:0e:7f:86:de:73:1b:f8:54:25:da:85:b9:
         ad:e6:15:fa:6a:d0:20:ce:d7:a6:f6:fc:f6:57:08:ce:14:45:
         cf:59:04:e6:84:41:ef:6e:ff:6c:14:3f:05:85:fd:36:6e:d3:
         38:69:58:aa:fa:82:9a:e3:78:36:1b:1b:58:78:46:77:55:51:
         e0:32:6e:a8:39:72:2e:78:9b:f4:16:83:16:56:32:ca:66:f7:
         8e:5f:3f:75:5c:86:23:d0:23:f7:bb:dc:f3:46:76:fc:e3:41:
         1d:86:40:7a:08:78:bb:6c:bf:49:17:ba:1b:8d:79:d0:c3:2f:
         bc:19:64:92:04:e0:f4:44:7d:b0:a5:44:7f:4e:d5:d4:d2:34:
         f1:ed:3e:4a:93:b9:44:cd:35:19:49:57:9b:d4:dd:6f:c7:65:
         b3:31:78:3b:48:d4:98:aa:0d:56:96:9b:f1:dd:7f:88:fd:4e:
         e0:30:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:24:47 2024 by rpki-client on console-fra.rpki-client.org