Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa
File:                     db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa (raw, json)
Hash identifier:          KA6jh1rv13P0gHrPzFEPTttU6A8wWRuqsECJA9ckLBc=
Subject key identifier:   F4:81:8E:F9:8B:5C:A9:FD:BD:92:22:68:21:3E:3C:C4:83:70:0F:6C
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F432858461C7142CE6AAD745FBC1B7F40
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa
Signing time:             Wed 05 Jun 2024 15:03:51 +0000
ROA not before:           Wed 05 Jun 2024 15:03:51 +0000
ROA not after:            Tue 03 Sep 2024 15:03:51 +0000
asID:                     134365
IP address blocks:        23.247.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:71:42:ce:6a:ad:74:5f:bc:1b:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Jun  5 15:03:51 2024 GMT
            Not After : Sep  3 15:03:51 2024 GMT
        Subject: CN=491fc714-0030-46c6-aa4d-37bdee48201b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:84:af:f0:7c:be:a1:b6:7e:a4:1b:a3:9d:
                    28:eb:7c:f7:a3:ba:a5:15:52:4e:8a:63:a6:62:7b:
                    7e:2b:36:ba:07:ca:a1:a9:f1:ff:d6:b7:49:24:d2:
                    6b:a7:02:14:47:99:c7:49:99:e4:cf:ec:55:b9:40:
                    2b:ac:70:5c:b5:d4:bd:25:4e:db:09:3e:be:1e:91:
                    d2:4b:a1:fb:94:50:d9:cb:f9:78:3a:4c:cc:e5:23:
                    d5:44:42:42:2c:d9:ae:77:64:06:84:27:3b:b0:4f:
                    50:c5:a2:4c:3e:bb:5f:fc:8d:1e:99:5e:44:bb:6e:
                    96:92:f1:ef:29:2f:ec:e5:de:d2:74:18:99:16:65:
                    0b:5b:0a:ba:de:57:e6:8f:4d:58:b5:37:03:20:72:
                    c0:72:24:c0:c0:a0:e7:38:de:d2:c8:78:71:52:dc:
                    33:92:7b:e0:a2:d6:c4:09:30:8a:09:d0:17:14:41:
                    fb:23:80:32:11:1f:ee:8f:08:1c:ad:9a:22:e8:84:
                    d5:86:6f:5b:06:81:5c:58:84:2b:14:a7:02:6e:66:
                    6f:b8:07:a4:34:8b:fb:e7:d8:28:ed:a3:e1:1e:b9:
                    be:1d:94:2f:b4:8d:e9:0d:e2:05:c4:e1:58:54:c8:
                    c7:d2:81:a8:cf:0a:ef:85:6c:82:8b:c8:85:2a:93:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:81:8E:F9:8B:5C:A9:FD:BD:92:22:68:21:3E:3C:C4:83:70:0F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:a8:0f:d9:5d:3f:b7:32:fd:a3:96:fd:7f:d1:ba:d8:a2:
         38:e6:c0:14:28:f7:a4:f5:10:ea:68:fa:be:72:41:5e:37:11:
         32:17:8a:8c:e6:32:a2:f5:7f:d2:60:c2:77:f6:c6:87:37:d1:
         4f:97:99:d1:6d:ea:97:74:bb:62:88:27:c9:78:a1:3f:89:b0:
         29:fe:42:c3:c0:76:2c:a0:46:24:50:47:d4:96:c1:57:58:55:
         40:f1:14:b2:ce:86:69:3f:1a:f9:d7:ea:82:58:ea:b3:d3:b8:
         57:18:02:c4:da:4b:5e:e0:00:91:1a:39:e6:e3:0e:2a:f0:78:
         f6:c7:2c:43:17:7d:f4:c0:5b:99:dd:db:ef:b7:66:04:71:36:
         3e:e6:d0:0b:97:47:1f:ac:95:43:ac:33:86:7c:02:87:04:ee:
         64:39:32:a5:97:b4:b9:d2:d3:39:c1:80:fa:4e:a8:91:b2:f8:
         bb:b2:cf:d7:07:2c:3c:2a:35:2a:86:88:09:7d:7f:1b:26:d0:
         4e:3b:c5:68:05:15:0a:c4:80:35:1e:93:cd:5b:ee:d8:55:2b:
         d0:96:be:a4:bd:ba:b8:fa:c5:8f:2f:27:4e:ed:f0:37:8b:91:
         4d:54:e9:f6:17:97:87:20:5a:af:e3:60:8b:18:66:15:a1:79:
         07:b5:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:44 2024 by rpki-client on console-ams.rpki-client.org