Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/b8a7d888-149b-3f0d-aa88-d66ccdea8b7c.roa
File:                     b8a7d888-149b-3f0d-aa88-d66ccdea8b7c.roa (raw, json)
Hash identifier:          BHd7vDe/2gTEQqdMZwoGQW1AcNNXUmAlXm8Mcne+2XI=
Subject key identifier:   64:BF:47:E5:DC:26:6A:8E:33:08:A5:EB:41:EA:35:51:89:F6:E0:5F
Certificate issuer:       /CN=01498755-7057-4d26-ae43-80f30a8a9011
Certificate serial:       010D0C9F432858454272C5AFD1CF10854D240980
Authority key identifier: B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/b8a7d888-149b-3f0d-aa88-d66ccdea8b7c.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     199948
IP address blocks:        23.148.200.0/24 maxlen: 24
                          2602:2a9:20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c5:af:d1:cf:10:85:4d:24:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01498755-7057-4d26-ae43-80f30a8a9011
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=dbcda459-a709-4737-80b6-cd0302cb0394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:8e:43:26:2c:f9:15:b5:d2:67:d0:cb:b5:
                    d6:ce:30:e2:9a:6c:57:7c:08:4d:fa:b8:f5:56:18:
                    b6:24:cb:7a:55:ba:55:60:ae:e0:5a:8a:58:8f:5a:
                    aa:c4:75:74:16:e7:11:a8:fe:cf:c1:c3:51:70:51:
                    01:bf:3b:80:96:14:4e:4e:24:d6:59:fe:40:25:82:
                    3b:ee:64:2e:60:c5:f5:41:2c:f7:6c:42:4b:07:0d:
                    a0:d8:9f:ae:a3:00:03:61:32:86:4a:4f:db:e5:33:
                    76:4d:5f:27:b0:ae:32:6a:49:41:91:d9:0c:db:0f:
                    81:a6:4d:5b:14:69:c8:73:fd:3a:ac:e3:ad:27:b7:
                    a1:ae:ee:b0:58:21:11:3f:4f:55:2e:b2:eb:a9:b2:
                    bb:7d:b2:f8:2d:b4:d8:46:9e:91:0a:fb:56:94:c3:
                    65:32:ac:9d:ea:a8:ef:99:9b:c1:2f:54:f0:5a:61:
                    f4:1b:48:c8:3b:73:c6:b3:95:84:dc:4b:e3:f6:2e:
                    73:2f:f5:a3:fb:8b:33:7c:06:e4:a1:a4:71:68:b4:
                    b2:dc:e9:3c:9c:cb:b2:f8:b2:71:64:de:3f:62:83:
                    17:cb:d4:08:24:fc:25:89:aa:d5:a7:65:59:85:8b:
                    be:b1:eb:3b:dd:9c:d4:25:5b:14:71:c2:13:7b:2b:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BF:47:E5:DC:26:6A:8E:33:08:A5:EB:41:EA:35:51:89:F6:E0:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/b8a7d888-149b-3f0d-aa88-d66ccdea8b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.crl

            X509v3 Authority Key Identifier:
                keyid:B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.200.0/24
                IPv6:
                  2602:2a9:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:51:d2:cd:ee:62:00:1c:60:80:6f:51:5a:2f:55:51:e4:76:
         de:43:51:31:14:08:14:de:5d:ae:74:64:b5:a9:92:58:b1:ce:
         b7:55:09:be:55:8d:d0:f1:32:c4:5b:60:25:e3:47:5a:4e:0a:
         31:08:e4:24:b4:8d:77:9e:6e:1c:77:d0:20:1f:4f:ac:bf:75:
         8b:82:b6:9b:fe:1b:10:b7:fc:ca:65:38:2e:b7:d8:6e:81:60:
         5e:64:c2:b9:d7:92:e1:7f:e0:03:e8:de:98:56:70:87:54:89:
         6c:3e:08:f6:fd:dc:6e:a0:c6:9b:8f:93:76:d6:4d:e4:2c:fe:
         24:ed:09:6c:c6:fa:4f:1b:53:59:56:8b:c5:39:23:85:d5:40:
         d7:74:8a:43:b7:fe:73:dd:36:ac:e6:1d:25:86:65:03:11:34:
         a0:b4:cb:3b:75:00:5f:3b:c1:37:c5:d4:03:00:d4:11:09:47:
         88:8a:bd:2d:f3:ab:cb:4c:1a:26:c9:a4:1e:ce:1a:33:8b:48:
         8b:7b:8b:30:a9:17:c8:4a:6b:48:ac:d3:c8:14:1d:a7:2a:92:
         7f:46:eb:66:bc:b4:bf:3b:b0:57:c7:c4:4b:7e:be:f9:27:13:
         7c:fd:bb:51:e7:b4:6c:49:65:61:4e:bb:f9:8f:33:f5:b5:ca:
         25:b9:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:02 2024 by rpki-client on console-ams.rpki-client.org