Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/335be716-cf01-3825-bfab-8258026b8d98.roa
File:                     335be716-cf01-3825-bfab-8258026b8d98.roa (raw, json)
Hash identifier:          PL2SMy71bRozxjRaOC182X7441vVhKI9fDuYq2lCLf8=
Subject key identifier:   05:93:8F:64:7E:24:B8:5C:5D:26:29:2D:B6:CA:B4:7F:2F:7F:98:A2
Certificate issuer:       /CN=17ca7b45-83e1-4a1c-8713-317adea0e270
Certificate serial:       010D0C9F4328584518B044E808FE037ABE540400
Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/335be716-cf01-3825-bfab-8258026b8d98.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        23.144.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:44:e8:08:fe:03:7a:be:54:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=8103106e-abee-4525-842f-ff7ba380228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:76:47:65:9c:26:48:78:7d:07:87:44:55:
                    79:ed:d2:e4:92:50:bd:3a:02:ea:78:10:f3:13:6a:
                    3d:5e:a8:5a:48:22:21:62:6d:77:d4:e0:44:cf:30:
                    85:48:a7:6a:96:c1:97:ea:52:67:7a:45:3c:bd:03:
                    2b:f8:77:d1:a1:fc:31:62:a3:47:1e:17:41:91:4c:
                    ed:ea:d8:17:37:b5:bf:d0:7d:15:d8:93:f3:ed:d4:
                    58:95:e4:7b:b6:b6:28:16:01:e1:d5:c2:4e:cb:2b:
                    14:df:43:fd:88:6c:9b:59:b5:bf:8a:dc:3a:5c:5c:
                    20:a5:2d:a4:f9:89:b0:2a:38:3a:c6:d8:39:2d:09:
                    b2:09:0b:73:9e:f7:ea:ce:4a:cc:1c:9a:d9:89:2e:
                    26:d4:a5:5f:eb:65:e0:f7:b0:47:31:27:13:fc:4e:
                    b4:6c:0d:df:53:51:81:df:2b:32:b7:c0:20:ea:e4:
                    da:c9:f1:7d:c5:25:85:90:45:d5:f9:30:b5:39:36:
                    da:a0:6e:73:65:cd:09:e3:61:e8:38:ea:16:4a:7c:
                    4e:f9:56:f3:75:e3:94:99:33:9c:14:53:6e:86:5b:
                    1b:28:54:b6:33:f5:60:ed:b2:a2:16:ca:cb:19:f0:
                    34:76:63:48:83:65:ae:e6:82:a9:c3:91:ef:24:17:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:93:8F:64:7E:24:B8:5C:5D:26:29:2D:B6:CA:B4:7F:2F:7F:98:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/335be716-cf01-3825-bfab-8258026b8d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c6:3a:c7:d6:ec:80:5b:36:3a:c1:8d:b5:ac:f7:1b:bf:8c:
         19:46:50:4e:c0:93:36:e0:78:b1:8f:4f:41:9f:13:fe:a5:b4:
         69:69:56:af:54:fa:ea:97:f7:d3:0b:2f:c1:a3:31:02:07:0f:
         4f:a2:83:60:51:62:0f:71:39:1e:e2:72:c7:8c:f8:04:84:6d:
         cf:ae:ab:01:a5:a7:a4:d0:49:e8:a0:cc:1d:13:25:ae:17:fe:
         e1:5b:22:20:b9:15:18:0d:c6:54:d1:f0:48:de:c0:c1:dc:20:
         b2:c2:f9:5f:b9:86:c2:9e:7a:5d:f4:28:b2:6a:3a:0f:4d:c7:
         67:be:a0:02:a7:62:31:4a:83:99:e3:fc:bf:9d:2a:85:0f:68:
         30:0f:5a:f7:f9:64:d3:b2:06:07:63:40:ca:88:28:a5:88:69:
         b9:73:5a:b3:11:52:bb:34:09:b4:c6:f0:ae:e8:24:64:2c:c7:
         e8:e3:7e:d4:8b:54:be:58:f9:b2:0b:84:7e:ee:ef:6d:37:2a:
         cf:5c:82:89:c6:9b:8d:6f:9f:51:1c:da:70:14:40:9f:4e:be:
         09:8a:22:30:bc:a8:15:6b:28:1c:17:13:97:b3:0c:02:43:53:
         c9:64:29:dd:37:50:6c:fd:95:3c:07:6b:7b:89:ad:d1:48:d1:
         23:b2:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:42 2024 by rpki-client on console-fra.rpki-client.org