Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa
File:                     aff7f59a-de88-3f24-af6f-6932047f3217.roa (raw, json)
Hash identifier:          ht0zvKjGIx3K7IjvoN4+Ff/NhAS0sYL26wdK9dNLXpo=
Subject key identifier:   AE:46:E5:B3:CC:CA:39:D8:9A:8B:9F:5A:A8:46:2B:82:EA:4E:26:6A
Certificate issuer:       /CN=18f4eabf-2388-491f-922c-4973961dfd2e
Certificate serial:       010D0C9F43285847D999F6BEBA9A7180BF672C40
Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     33099
IP address blocks:        23.157.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f6:be:ba:9a:71:80:bf:67:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=2787d1bb-93b8-471a-8e0d-779e809924b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:96:7a:58:ce:4a:1c:32:ff:3a:01:c7:27:
                    82:a8:60:cb:a0:40:8d:fd:94:f3:73:bf:a1:f5:0f:
                    37:e4:e9:29:b7:31:28:0c:97:2b:6f:36:63:bc:0e:
                    aa:09:e7:fa:e5:dd:63:19:b6:1d:2d:d3:17:c8:56:
                    7f:08:6e:b3:78:0b:c9:42:60:0e:99:0c:3b:15:b1:
                    87:f1:57:a7:f3:fb:f3:29:7f:c1:66:4f:13:2c:0a:
                    3e:da:31:b7:0d:48:3c:bd:6d:18:45:df:5b:8e:6a:
                    10:90:2e:c6:4d:81:de:8f:79:3b:c9:69:25:3d:8e:
                    c3:be:c7:e5:6c:00:4d:60:53:bc:eb:df:1b:f1:49:
                    43:5d:db:b7:b4:dc:e2:fd:3c:6e:c5:49:04:24:d8:
                    20:83:11:d7:d7:f5:a3:05:e5:43:33:57:ad:4e:b3:
                    1a:e7:e2:4f:38:8b:ea:97:52:f7:d3:81:4c:90:fe:
                    08:30:5c:49:73:cc:19:71:65:67:06:a6:0f:c5:15:
                    09:93:39:74:fa:e8:cb:95:46:40:9e:ff:6a:d0:a9:
                    49:91:34:15:e2:fc:18:b5:11:8c:56:01:77:a2:f6:
                    fb:76:b4:5c:bd:75:14:75:43:de:f2:41:03:fe:d0:
                    d7:e2:c0:96:b8:49:e2:96:ad:a7:a7:11:4f:cb:4e:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:46:E5:B3:CC:CA:39:D8:9A:8B:9F:5A:A8:46:2B:82:EA:4E:26:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl

            X509v3 Authority Key Identifier:
                keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:41:cc:49:9f:bb:9a:3d:da:fb:8f:79:fc:50:97:4d:29:4b:
         b7:78:a3:9f:7a:fc:6e:33:ff:cc:bb:e3:a7:f5:b3:3b:1f:d9:
         be:00:10:70:de:4b:a0:6a:c7:c2:dd:ec:64:54:5b:b7:2e:ba:
         58:4d:25:d1:eb:98:d1:30:5e:a7:bd:85:3a:c8:4c:c6:82:76:
         06:36:20:9a:d0:3d:90:be:e3:49:12:7f:bb:4d:91:10:8f:71:
         7c:c1:2c:8a:d3:6c:96:4c:94:8b:8a:b4:94:53:ef:53:98:62:
         65:1a:8f:f2:49:c3:c3:b5:7a:72:89:ab:0c:36:ac:2d:08:89:
         88:f6:c6:19:96:7e:ff:8c:da:d3:3a:ea:66:26:3d:c7:b1:89:
         67:54:af:5f:f5:5c:74:1d:48:6e:de:fa:01:09:84:97:24:22:
         e3:4a:e7:56:46:f8:97:d8:8a:75:6d:88:5e:5c:7e:39:c2:75:
         34:e3:1a:51:69:60:89:54:8e:46:27:9c:a7:20:a1:6b:ea:a5:
         d9:9f:b5:26:46:ee:eb:9a:27:b2:cc:7b:2e:1a:a4:fc:ef:68:
         09:37:d8:d5:58:bf:00:c5:ef:cd:ab:91:9b:cf:2a:2d:22:b2:
         73:74:93:64:72:e8:be:48:c8:c4:c3:a4:4a:8e:76:dd:74:91:
         46:09:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:59 2024 by rpki-client on console-fra.rpki-client.org