Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
File:                     52166749-1228-3cb2-be42-612a2e17d6bc.roa (raw, json)
Hash identifier:          R5fAQnTSS4UI/VHJcxIJuNMDS7t2sNW4rnlgx826m+M=
Subject key identifier:   09:6E:3E:C6:EF:6C:48:C1:6F:70:8A:3B:D6:C1:CD:D6:DE:2A:B3:88
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F43285846A234EDB0D70ED3FA933A9B00
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
Signing time:             Tue 23 Jul 2024 13:00:36 +0000
ROA not before:           Tue 23 Jul 2024 13:00:36 +0000
ROA not after:            Mon 21 Oct 2024 13:00:36 +0000
asID:                     401009
IP address blocks:        23.177.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a2:34:ed:b0:d7:0e:d3:fa:93:3a:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Jul 23 13:00:36 2024 GMT
            Not After : Oct 21 13:00:36 2024 GMT
        Subject: CN=70171488-e382-4e23-9d49-e02caf8d34d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:27:df:97:b9:3d:25:68:81:1d:b3:1d:c0:
                    86:0a:e7:37:74:a9:86:9f:2d:19:89:7a:d4:88:72:
                    45:17:bb:a4:12:72:19:07:62:1c:fe:46:54:20:65:
                    4e:18:16:63:84:38:34:2c:6e:1b:44:db:e3:a9:f1:
                    37:9f:b8:81:5c:f1:f5:6b:bb:0a:45:80:a2:49:3d:
                    4e:1e:65:6f:ec:5b:7a:18:50:0e:e4:0f:4f:d6:c0:
                    ab:79:9f:8d:98:f2:65:7a:b0:74:5d:06:31:0e:3a:
                    19:4e:ef:36:b9:ee:15:d4:fe:7b:84:57:14:56:60:
                    68:a2:05:eb:01:fa:5f:84:fc:92:ab:ff:bd:09:91:
                    af:b4:24:73:a0:2a:87:4f:d7:04:cb:80:cd:8c:48:
                    b9:65:8f:d5:fb:45:73:c0:5f:66:0d:c5:e0:4a:60:
                    47:42:00:0b:77:07:20:ca:37:b2:52:65:3e:b3:f6:
                    e9:e9:8c:b2:94:52:b0:cc:e2:96:df:c3:37:67:d0:
                    f3:19:7d:97:32:53:c5:91:01:36:4c:6a:77:6d:3f:
                    45:e2:46:f7:f4:31:d4:13:b6:a9:dc:7b:ea:25:f8:
                    22:92:3f:61:e5:e0:01:77:ac:98:6f:d5:41:f6:46:
                    a1:1e:9e:c7:66:4d:87:bc:2d:df:ac:73:2c:97:10:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6E:3E:C6:EF:6C:48:C1:6F:70:8A:3B:D6:C1:CD:D6:DE:2A:B3:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3d:1b:88:b9:a7:bc:8f:30:c5:98:a3:16:5c:80:1f:99:fb:
         d7:67:ef:af:78:e1:8f:dc:b6:3f:d9:bb:80:d2:63:da:90:a8:
         ae:8e:1d:02:72:7e:19:7a:f6:18:47:33:ac:43:71:d8:8e:55:
         55:59:d0:56:ed:7f:86:b6:2b:ea:c5:ca:6a:9c:d7:2e:7b:f1:
         2d:bf:61:06:90:19:c5:a3:67:8a:55:57:7a:95:98:54:1d:9d:
         66:1e:37:12:1a:fa:86:59:c9:4b:8a:c8:1e:a9:87:ec:8c:b7:
         9a:6f:d0:45:26:cb:a6:a9:ec:eb:44:5e:ec:3f:81:2d:0d:b4:
         95:4f:8e:47:72:7d:16:3e:3b:0d:af:75:68:09:01:f4:0e:99:
         3f:f0:a5:15:7b:d0:b6:4a:44:f4:63:7b:c0:cc:f4:9a:2e:87:
         a3:2d:72:66:be:70:ef:dd:1a:7d:b1:cd:67:f6:d3:6e:d0:73:
         5f:12:be:f3:09:d6:78:46:a1:0a:b9:d1:4d:bb:98:dc:63:ff:
         c7:e0:10:04:f4:43:05:f8:77:3a:02:f4:58:33:65:66:32:f4:
         57:da:58:1a:46:04:11:30:5a:0b:09:3d:b6:45:eb:c7:e7:08:
         0b:3b:8c:58:97:cd:d8:f4:2a:95:2f:3b:d0:24:9f:e0:b0:59:
         48:54:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:18:21 2024 by rpki-client on console-ams.rpki-client.org