Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa
File:                     2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa (raw, json)
Hash identifier:          inXiatySmzEYMUUGhjjsT6fL2l9csEfl6+j/cnWI4Ls=
Subject key identifier:   CB:CB:89:A8:C0:80:B2:B2:B0:77:DF:32:3C:D8:0F:45:13:1B:B8:8A
Certificate issuer:       /CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
Certificate serial:       010D0C9F43285847B3CC0FAFB5AA1D9C6B2E44A0
Authority key identifier: 70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     396423
IP address blocks:        23.143.200.0/24 maxlen: 24
                          2602:290::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:0f:af:b5:aa:1d:9c:6b:2e:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=357217ca-fa51-436d-b1ba-6353e91b8d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:01:66:6c:5a:75:5c:1f:9b:d8:f0:18:37:
                    d6:d1:14:4c:db:e7:08:88:78:c6:56:5c:46:ba:53:
                    3d:ee:ca:3e:e1:af:10:10:f5:96:1a:88:cf:63:ad:
                    e2:4e:ff:9e:ec:94:b0:2a:1d:e5:e8:3e:4b:7b:c2:
                    e5:9c:67:49:c4:bd:82:31:4e:b8:bb:6f:36:8a:66:
                    5b:7f:51:74:75:a6:f6:89:0b:f7:c3:6d:b4:f7:c9:
                    33:79:23:1d:5f:f6:67:63:16:f9:0f:6b:9b:d6:ff:
                    1f:fb:b3:cc:51:17:94:54:79:2a:01:a6:67:e0:35:
                    4f:2b:9a:26:c8:60:63:4f:4f:df:e2:d2:87:0a:f6:
                    52:e1:06:c1:be:05:3d:0c:c9:e4:52:2b:3e:b3:56:
                    2c:ce:fb:5f:aa:ed:da:d7:f3:fa:d8:e1:14:4e:d6:
                    30:59:6f:8a:ef:27:3b:f8:c9:04:e9:a1:73:c1:ce:
                    24:8d:05:0f:ca:02:a3:d5:a4:7c:6f:25:23:64:88:
                    dc:61:98:1c:a3:9b:39:5f:91:16:c5:bb:70:5f:4e:
                    26:5c:5c:8b:17:d5:8d:ef:08:0f:3b:9e:f6:40:eb:
                    08:44:74:4d:8d:75:b9:cd:ee:1a:0a:aa:3f:fd:5d:
                    34:c0:5f:24:38:f1:45:b2:55:9d:03:83:96:23:78:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CB:89:A8:C0:80:B2:B2:B0:77:DF:32:3C:D8:0F:45:13:1B:B8:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl

            X509v3 Authority Key Identifier:
                keyid:70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.200.0/24
                IPv6:
                  2602:290::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:51:90:66:e7:a3:db:32:e9:c0:09:65:4a:12:94:b1:13:a1:
         80:d5:ba:fd:83:29:2c:20:a4:3d:b2:d8:e7:aa:b4:08:75:dc:
         85:68:0d:a8:84:cf:c2:57:77:b4:25:3b:e3:43:dc:39:72:fe:
         ae:85:65:e2:de:91:2c:fc:8f:d3:ee:74:7e:ba:46:35:a3:74:
         27:53:7f:8e:a4:ca:5d:9b:46:7f:3f:22:25:59:e1:ca:22:2b:
         f3:13:de:d5:bf:58:bf:61:5d:cb:46:1a:1e:74:b0:8f:7a:2a:
         de:97:25:3c:e5:30:d4:e9:39:02:4e:2d:f9:49:9c:8b:8a:49:
         ee:a8:4f:18:b8:f2:11:fa:03:54:0c:59:57:39:5e:79:1d:6e:
         bf:3d:cd:04:cc:b7:91:c6:ee:02:93:3c:d2:9f:36:ef:ce:57:
         87:43:bc:19:df:66:5d:21:af:99:32:f1:cb:2d:1e:20:d7:9b:
         2c:4b:9a:e5:2a:88:c6:8f:8f:d6:95:5f:83:6d:52:7a:7e:ec:
         a6:bf:bb:3d:15:a8:58:2d:c6:08:00:98:d4:cf:15:08:98:54:
         c9:89:6c:99:9f:02:40:63:31:7c:21:3b:5f:86:09:f5:33:5d:
         1a:b7:9b:7c:9c:0b:0a:c2:63:e6:6b:62:56:5b:92:d0:18:24:
         64:51:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:01 2024 by rpki-client on console-ams.rpki-client.org