Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/9af58f17-83cc-3766-a979-125c6f81440a.roa
File:                     9af58f17-83cc-3766-a979-125c6f81440a.roa (raw, json)
Hash identifier:          yaCEIWrodQ4rPnaXIDGFboQM1BIvAPwl4VAJGis7ZH4=
Subject key identifier:   92:8F:18:03:C2:8E:79:50:BB:CE:D9:A0:5C:27:83:22:D5:0D:0B:45
Certificate issuer:       /CN=54814827-de65-4311-9f42-994fb992b2c4
Certificate serial:       010D0C9F432858471CEA051E077F2C05A927FB80
Authority key identifier: EF:B4:17:4D:6E:B9:ED:D7:41:6F:BA:98:CC:02:5B:1F:28:E7:A0:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/9af58f17-83cc-3766-a979-125c6f81440a.roa
Signing time:             Thu 05 Sep 2024 11:54:06 +0000
ROA not before:           Thu 05 Sep 2024 11:54:06 +0000
ROA not after:            Wed 04 Dec 2024 12:54:06 +0000
asID:                     400211
IP address blocks:        23.188.200.0/24 maxlen: 24
                          2607:d240::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/54814827-de65-4311-9f42-994fb992b2c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/54814827-de65-4311-9f42-994fb992b2c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1c:ea:05:1e:07:7f:2c:05:a9:27:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54814827-de65-4311-9f42-994fb992b2c4
        Validity
            Not Before: Sep  5 11:54:06 2024 GMT
            Not After : Dec  4 12:54:06 2024 GMT
        Subject: CN=4027002d-068b-4b65-a4cd-6730bf4c2d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:44:48:e2:9f:a9:cb:3e:06:01:00:32:11:
                    44:cc:b3:3e:02:80:5c:d1:3c:59:ce:13:1a:e3:aa:
                    e5:76:00:d7:0f:41:70:88:4a:42:d9:70:78:e6:61:
                    f0:e3:d7:50:a7:74:9e:1f:9d:a1:46:8b:ce:12:71:
                    ca:c1:75:05:54:67:22:89:d8:7f:f1:67:76:b8:a8:
                    4d:1f:bd:4a:99:80:a2:ef:27:75:a3:8d:ee:29:ac:
                    c5:64:7b:5c:01:e7:8e:7b:78:bd:d6:69:67:8f:b0:
                    65:35:66:f3:34:e0:50:85:94:4d:19:07:26:84:8f:
                    83:55:2e:15:8c:8f:4a:17:e5:7b:8c:10:c5:0a:f5:
                    30:8c:ba:58:6c:50:9e:78:3f:9b:e2:7e:f5:18:9f:
                    58:f6:82:e7:f8:1f:38:5e:c9:a8:76:e0:2e:63:8e:
                    0a:ec:8a:a7:89:3f:c4:be:27:55:c5:71:a9:8b:5b:
                    95:2d:3e:44:3b:f2:40:f1:55:c6:2b:74:93:4c:81:
                    af:0d:e0:4f:5a:5d:27:6d:f0:89:b0:86:21:e3:1f:
                    ea:8b:32:44:07:ba:49:f9:ef:e9:f7:cb:87:33:bc:
                    42:98:6f:17:cb:36:39:2b:88:27:2d:da:e3:7a:db:
                    65:e8:de:96:ac:21:f2:14:fb:6c:c7:87:ae:28:40:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8F:18:03:C2:8E:79:50:BB:CE:D9:A0:5C:27:83:22:D5:0D:0B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/9af58f17-83cc-3766-a979-125c6f81440a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4/54814827-de65-4311-9f42-994fb992b2c4.crl

            X509v3 Authority Key Identifier:
                keyid:EF:B4:17:4D:6E:B9:ED:D7:41:6F:BA:98:CC:02:5B:1F:28:E7:A0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54814827-de65-4311-9f42-994fb992b2c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.200.0/24
                IPv6:
                  2607:d240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5d:c2:31:90:4e:f3:ea:a7:88:d5:b1:81:b0:14:46:d8:80:
         26:d8:04:29:56:1c:2c:1c:99:9f:a6:e3:1c:19:e7:79:22:e4:
         58:ac:f2:42:fd:72:24:f0:0f:5a:c5:1a:b6:fb:57:b2:59:4f:
         ad:a1:7f:4c:88:75:51:64:35:83:92:48:e8:59:ab:8b:e6:fb:
         54:ce:47:31:f6:0b:47:b8:8c:55:0a:1e:33:77:25:60:17:d4:
         b8:ce:a3:5f:fd:11:de:ff:a9:f7:77:b0:60:a8:af:bf:5c:d3:
         0c:78:b0:d9:14:62:0f:96:bc:c6:30:74:c7:3e:0a:b0:cd:4d:
         2b:17:1e:e9:af:f9:16:cf:9e:a8:4f:45:70:98:d7:cd:9c:ec:
         9c:0a:4b:9d:2f:be:24:c3:98:fb:ca:a7:e4:36:59:db:69:c2:
         40:08:6a:62:84:3d:86:93:e8:e4:55:67:79:05:cb:38:04:72:
         79:bf:d9:db:14:d3:56:77:d5:ff:e8:7b:ed:3b:46:ef:29:d7:
         13:79:dc:2b:29:5a:04:81:3f:ba:d0:46:06:ff:9f:f8:d1:96:
         d2:60:34:2f:88:9f:da:36:a5:32:76:c1:13:b6:5a:a2:fc:60:
         6a:4e:2b:3e:a3:18:29:7f:2e:79:2a:db:7e:91:e2:52:d9:57:
         68:05:c0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 18:38:52 2024 by rpki-client on console-ams.rpki-client.org