Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
File:                     7eab64af-78b7-3d87-9f08-54d27ec7277e.roa (raw, json)
Hash identifier:          tOuCUnO3VGScnr/IE9tyx4VVNZuA5XhOF/V28rtDu5k=
Subject key identifier:   26:06:22:FD:BC:DF:B8:E6:67:F9:EF:8C:2A:47:0F:48:C9:54:A7:FE
Certificate issuer:       /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial:       010D0C9F432858473095E2D7AC7075653A74F68D
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     7034
IP address blocks:        23.152.160.0/24 maxlen: 24
                          2620:13b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e2:d7:ac:70:75:65:3a:74:f6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=7cf5e4c6-662d-4a65-bfc4-24d335d6ed18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:40:cc:49:27:ef:0f:20:8b:53:31:05:c8:95:
                    c1:d2:40:35:42:e1:62:3b:19:98:4d:63:3a:2a:2b:
                    35:1c:2a:dd:33:f4:94:05:44:c2:9f:40:fa:f8:d6:
                    a4:2c:cc:5c:57:a1:4e:8c:67:89:45:65:47:17:6c:
                    ca:da:24:29:7a:ad:a2:62:5e:da:93:8d:d1:6e:30:
                    d6:b4:58:7c:19:e1:bf:10:03:21:1e:80:0f:1a:4b:
                    90:72:1c:f5:85:d8:69:00:08:b7:00:72:c6:7c:1c:
                    4e:7d:ae:6f:13:97:d2:70:c8:18:fa:dd:99:26:6b:
                    79:2d:57:f0:e3:bb:60:7d:c6:97:5a:7b:1b:ff:4c:
                    35:cf:ad:48:11:7e:d2:a1:9a:de:18:ea:da:4f:df:
                    c6:3e:b1:29:3e:25:9c:23:47:a6:a5:3d:4d:e6:d3:
                    c7:32:76:31:46:0b:1c:8d:47:2f:fd:f4:d7:07:1d:
                    06:1c:0d:d6:90:61:cb:05:f6:36:8a:f9:ff:32:c8:
                    19:c6:50:e8:47:8d:d0:ee:69:ba:c0:8c:b0:5d:c9:
                    15:90:c2:7e:08:b8:16:97:af:2d:9b:11:cf:62:ca:
                    c7:ea:ab:30:c1:66:f7:dc:10:10:9e:08:3b:be:a6:
                    6c:27:c1:79:f3:27:69:fd:9d:21:f1:d2:b9:2d:0f:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:22:FD:BC:DF:B8:E6:67:F9:EF:8C:2A:47:0F:48:C9:54:A7:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl

            X509v3 Authority Key Identifier:
                keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.160.0/24
                IPv6:
                  2620:13b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:70:e4:68:bc:6d:db:e8:ce:79:47:4e:23:24:6d:4a:d0:
         d9:9b:d3:a8:b3:88:e7:ea:6d:3f:cd:8a:81:32:5d:ed:b0:64:
         1b:d8:cb:55:87:36:39:d8:87:f5:8e:2b:59:75:c3:de:7d:a9:
         1f:b5:72:f1:ec:b5:0f:4b:2b:b2:3a:13:0c:f5:95:25:1c:a1:
         8f:64:a9:9f:02:14:ed:b6:50:8f:13:77:16:b4:3b:eb:20:07:
         14:ea:16:30:75:15:ac:b9:b4:e8:b4:80:0f:5b:b2:b4:ef:f4:
         aa:d4:8a:43:65:41:ee:f8:35:7d:77:e3:45:89:f3:37:f6:ec:
         f6:43:2c:9f:14:a8:7d:de:89:6f:a3:01:2f:6c:b7:c9:95:c5:
         e4:ce:73:c1:66:b6:85:aa:1a:ca:6c:13:96:9c:5f:d5:03:f3:
         c6:8f:69:6c:07:7f:64:de:78:d0:e5:d0:a4:8f:fb:ac:d9:3f:
         7d:9d:38:a5:bf:44:a2:87:18:90:ff:a4:2e:1e:d7:7e:7d:36:
         be:20:6b:48:71:53:28:ac:61:3a:ee:7c:4a:5a:7e:86:f9:41:
         a0:2d:72:c1:3d:5d:fc:10:77:ce:1e:b0:3f:b7:b9:08:5b:86:
         e6:fc:21:c6:b2:4c:1e:37:76:07:43:02:e5:91:62:63:d8:29:
         c1:24:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:49 2024 by rpki-client on console-fra.rpki-client.org