Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa
File:                     34ea7717-0935-34ec-8511-5e5273f1e4d9.roa (raw, json)
Hash identifier:          rNtm8X1h2t4vHSx7EDC03E4Cq8To4GLA5ufpNYgJz7I=
Subject key identifier:   2A:F9:EC:8F:41:9F:FE:A0:C4:FC:B9:D7:61:9B:1B:BF:48:1B:EC:D2
Certificate issuer:       /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
Certificate serial:       010D0C9F4328584613D40BBD3B02BF4C67564600
Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa
Signing time:             Sun 02 Jun 2024 13:00:36 +0000
ROA not before:           Sun 02 Jun 2024 13:00:36 +0000
ROA not after:            Sat 31 Aug 2024 13:00:36 +0000
asID:                     211392
IP address blocks:        23.167.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:13:d4:0b:bd:3b:02:bf:4c:67:56:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
        Validity
            Not Before: Jun  2 13:00:36 2024 GMT
            Not After : Aug 31 13:00:36 2024 GMT
        Subject: CN=d9089565-dc6c-4ac9-9b9e-d685bc9c72c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:83:ff:34:7c:6e:7b:85:2f:e9:a1:74:89:
                    91:3a:66:6d:b2:7f:6a:e6:5a:d3:74:14:27:fe:97:
                    ca:2e:dd:bd:88:dd:4d:a7:a3:3d:61:7c:3a:f5:33:
                    40:1a:0f:a1:5e:63:64:85:dd:8c:c0:6b:73:6a:75:
                    81:d1:60:85:f1:bb:71:02:a3:65:47:32:b7:88:7f:
                    46:6a:09:1f:78:02:28:bc:9a:ea:c1:41:e3:2e:d1:
                    82:a0:80:b0:4d:3a:86:63:f1:93:c4:13:fb:4d:76:
                    e2:89:e2:a5:45:4b:34:f3:55:5c:a2:e8:b2:52:0a:
                    00:63:3f:25:af:50:07:42:6f:3e:fe:54:2c:0a:4a:
                    2e:b3:76:ac:68:cb:e0:e7:71:26:eb:92:f0:e8:b6:
                    00:87:43:5b:a1:e6:7d:ba:71:f8:41:6c:7d:e0:7a:
                    d8:eb:60:71:81:2b:55:f3:a3:49:cd:f5:d5:c3:a8:
                    d2:68:f5:45:72:46:72:e6:94:34:29:65:b3:57:ca:
                    13:50:c4:7c:5a:13:ab:81:a8:50:e9:c9:a6:02:b4:
                    59:45:1a:b0:4c:91:9b:d5:87:84:ed:29:18:2d:98:
                    a4:8d:a6:9a:0d:1b:c0:0a:ad:1a:28:9d:bc:39:6d:
                    ce:07:dd:07:b5:5c:1b:cc:16:b6:90:ae:1d:01:ab:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:EC:8F:41:9F:FE:A0:C4:FC:B9:D7:61:9B:1B:BF:48:1B:EC:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl

            X509v3 Authority Key Identifier:
                keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:85:ce:d0:8a:7f:c1:f5:98:b1:90:d2:d3:9b:6c:07:8d:a7:
         b1:91:e8:8e:5c:5d:3e:f3:86:d0:4e:63:d5:39:40:03:82:f3:
         f9:9c:99:10:0c:a5:45:4c:b5:62:40:75:9c:f7:51:1d:f2:1f:
         71:c9:06:ab:33:36:1f:dc:fd:64:3b:69:ff:53:ed:7b:08:2b:
         71:49:22:41:14:95:0d:63:0f:76:90:87:1f:12:29:7c:6d:bb:
         70:85:36:e8:1a:5f:5e:ca:6a:23:81:2b:6f:10:91:96:de:63:
         b1:e9:32:6a:31:e4:6f:56:af:56:fe:1c:dd:27:0d:42:73:4f:
         0b:89:f4:b4:fb:39:c5:03:4e:b4:ee:6d:03:c7:4d:d6:b7:42:
         17:0d:2f:f9:65:1d:fa:03:9e:a4:46:3b:35:fb:97:e0:3d:b0:
         6a:c4:d0:e7:a8:87:2d:e7:72:5e:84:3a:17:1f:e6:18:69:d9:
         28:00:5b:e8:9d:b4:e2:4d:c2:68:6c:03:bc:e7:77:20:6d:85:
         cf:9d:a2:77:50:b4:f6:0d:ab:08:d2:fa:ce:9c:de:8b:e7:63:
         65:95:20:8a:5a:30:f8:bc:d6:b7:90:11:ff:5e:0a:d0:3b:6c:
         24:5c:8f:81:36:c4:bd:87:58:0e:86:84:1a:0b:7b:4b:b7:9f:
         79:6d:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:24:46 2024 by rpki-client on console-ams.rpki-client.org