Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa
File:                     e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa (raw, json)
Hash identifier:          CIZCfjlV+BVpPrPLB2aWlRTyzw/jbo4jCXg9d7oZvcA=
Subject key identifier:   F3:A5:36:50:F2:44:0F:EE:15:03:26:0B:2B:8C:A1:FF:53:6B:25:A4
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285845C17917AB24A603A48DAC1D80
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     3257
IP address blocks:        23.234.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:17:ab:24:a6:03:a4:8d:ac:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=0e2aabea-51d8-430a-b9a7-e623268c2a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a4:18:42:8b:62:70:16:78:5a:3b:09:fa:c4:
                    c7:f8:84:bd:93:26:a8:4b:86:6e:ed:10:04:31:a3:
                    25:ad:44:52:78:49:be:0b:97:14:92:f8:f7:26:b8:
                    99:28:4c:62:e5:2d:2c:d2:4f:8e:2b:31:84:9d:1e:
                    10:8e:d6:0a:6c:22:92:db:6e:03:e7:05:ad:b7:29:
                    7b:25:2e:de:77:0e:58:77:72:2b:79:7d:e8:57:64:
                    07:77:bc:94:f8:ec:c8:34:2c:f6:27:cb:c7:27:2f:
                    42:1e:a3:ae:1c:f3:f2:1a:d7:9d:b2:b0:07:61:a4:
                    c1:25:67:c1:d8:fa:f1:87:0c:10:86:b8:a3:93:07:
                    03:01:ca:ec:1c:20:aa:98:fd:25:b3:cc:73:10:e1:
                    d7:7c:0f:49:78:20:3c:17:6c:b4:a7:f2:4d:c8:3d:
                    e9:78:ee:fb:d9:56:a3:bd:b7:a4:cd:bb:a4:31:ec:
                    97:ef:44:48:cb:f9:f9:a2:b0:38:fa:f8:45:45:55:
                    d7:68:89:e8:a3:72:30:17:1d:ca:53:13:ff:5d:25:
                    55:ca:cc:92:0b:24:2f:b6:b9:a8:fc:1f:de:9f:20:
                    f8:4f:e5:9f:41:9e:0f:e1:13:41:a4:32:97:cf:80:
                    f1:c7:a6:2a:cb:39:f9:9e:f6:81:b5:b0:9c:e7:98:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A5:36:50:F2:44:0F:EE:15:03:26:0B:2B:8C:A1:FF:53:6B:25:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f9:d1:37:3e:4d:bd:3e:17:3b:32:9d:e2:3a:ed:4a:cf:85:
         80:df:95:62:f4:a2:19:c1:20:0d:f0:2b:e4:52:e9:a9:a7:7a:
         82:7e:20:d2:9c:8a:3b:5c:6f:ac:bb:7e:19:fc:c6:bc:db:99:
         66:e1:29:24:06:a1:b5:09:e4:2a:fb:e7:27:7e:09:b6:cc:43:
         f4:94:4f:55:a8:2f:36:fb:22:e4:d9:ee:b7:5a:f1:72:a6:fe:
         94:aa:9b:95:3e:47:63:82:91:6c:7e:40:1b:bd:b5:f1:30:3d:
         1e:6c:ff:a7:1b:33:39:7f:80:bb:f8:4a:4c:5d:62:c7:2b:ce:
         d1:b9:b8:96:2b:c9:40:e1:65:7d:f8:05:b8:cb:2d:a5:ac:a6:
         42:42:6c:87:30:00:31:1e:75:6e:1b:ed:38:ab:1e:e8:42:de:
         75:3a:fd:fc:c6:89:b7:e9:6b:fd:f6:48:61:79:ed:78:45:4b:
         c2:20:44:34:60:0c:80:cd:00:8d:3e:10:e0:c7:29:be:50:22:
         9d:d5:dd:ff:cd:41:3f:ae:ab:7d:b2:ad:c1:4c:a7:ca:19:b2:
         54:db:9a:62:9b:f4:e4:bf:e7:14:d8:d6:d2:34:a4:84:81:60:
         cf:8a:88:00:b4:40:a9:62:d9:42:61:7f:61:58:19:48:4a:a3:
         f0:62:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:59:50 2024 by rpki-client on console-fra.rpki-client.org