Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa
File:                     861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa (raw, json)
Hash identifier:          FyvITY3BQ77/q+Gz5Zep4xviPvQuVTOV2y1Z28NnY1M=
Subject key identifier:   32:8B:66:D5:69:00:EF:E5:4A:EB:48:8E:22:B4:44:3D:CA:EC:F7:68
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F432858461C7BE9ACA6CE54C9CD800900
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa
Signing time:             Wed 05 Jun 2024 15:25:19 +0000
ROA not before:           Wed 05 Jun 2024 15:25:19 +0000
ROA not after:            Tue 03 Sep 2024 15:25:19 +0000
asID:                     137443
IP address blocks:        23.247.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:7b:e9:ac:a6:ce:54:c9:cd:80:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Jun  5 15:25:19 2024 GMT
            Not After : Sep  3 15:25:19 2024 GMT
        Subject: CN=ded45a2b-64b5-460f-afb3-5715f84fe00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:23:d9:2c:93:84:04:17:87:14:69:b1:b8:
                    77:d6:86:e7:40:8d:ec:9d:8a:b7:22:3d:39:3c:24:
                    fd:1b:32:90:9b:50:18:e6:ec:ad:60:4e:c9:15:4e:
                    37:0a:25:d7:26:e1:63:c2:1d:a5:fe:17:d4:40:9a:
                    fd:2e:44:13:5c:24:a4:9b:3e:c6:76:7b:c8:33:8f:
                    86:3a:6e:7c:9f:8c:4c:12:b8:65:9f:01:61:6f:c2:
                    a9:c8:fa:b5:8f:07:9b:49:ae:2f:61:5b:8f:58:cb:
                    27:44:9c:11:0d:73:70:7d:94:d0:50:9b:11:0c:2e:
                    43:8d:ba:0b:00:e0:c8:81:a7:c3:b9:55:8d:23:24:
                    d6:b8:8c:cb:af:de:10:34:3e:ef:bc:8a:1c:1b:dc:
                    b1:c3:7c:97:f0:88:1f:43:01:bb:5d:d6:77:4d:f4:
                    19:7e:2f:36:86:5b:2a:e6:4d:fd:a9:ce:2a:89:0e:
                    31:5b:d5:b9:c3:98:0d:8c:ae:16:4f:83:2c:fe:a1:
                    f7:d0:a5:bb:8c:8f:81:6c:ba:e1:a0:e0:5a:b5:01:
                    fc:48:a5:e1:95:b5:a6:17:e1:ec:11:3a:ff:f4:b8:
                    d8:49:b8:c3:d3:21:5c:05:63:6b:6a:e7:c4:bd:c4:
                    0e:5e:d2:4d:82:d9:f9:f6:8e:03:3f:aa:db:ca:be:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8B:66:D5:69:00:EF:E5:4A:EB:48:8E:22:B4:44:3D:CA:EC:F7:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/861d60a3-53c9-3e0b-b926-503d8c0cfeb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:5a:81:d9:f7:79:52:99:b1:2b:fc:66:94:98:48:58:09:
         bd:d4:c4:d1:bc:d1:55:13:71:e7:b6:4b:55:da:78:b0:a7:c9:
         3b:b5:0d:12:88:ae:b3:52:0e:a6:cc:06:3e:97:63:ef:ca:b9:
         e4:1b:3d:b0:37:6c:12:5f:56:c8:44:4f:b0:50:80:03:ec:51:
         c6:13:81:17:b8:96:cb:fe:d1:4a:3d:59:b6:98:ae:c5:6e:d5:
         05:b1:81:0c:51:fa:ba:3f:0a:c3:52:3c:b1:a1:bb:0f:29:f1:
         15:bd:ec:32:4e:4e:ba:f9:7f:8f:5d:47:dd:ba:41:66:f6:bd:
         b6:03:4b:a8:fd:82:ad:db:cb:ff:8e:d5:ff:2a:6d:07:5e:83:
         03:cd:27:a8:fa:76:77:1d:b8:ca:42:ec:82:11:9c:da:48:d1:
         20:e6:c6:bc:12:a8:73:0a:75:96:63:4e:c2:a9:9d:95:8e:79:
         58:10:e9:c6:da:bf:4a:9d:cf:bc:5e:9f:e4:c1:68:6b:cc:70:
         e4:18:9a:34:47:8f:56:f2:95:73:70:11:60:78:fc:1b:3b:23:
         fc:b1:ee:57:a1:4a:9b:19:4e:7d:e8:df:53:a2:f3:6f:5e:49:
         05:b4:8d:18:45:dd:d2:66:1c:a4:33:75:89:28:0a:8f:c0:e7:
         2a:21:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:44 2024 by rpki-client on console-ams.rpki-client.org