Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/fc3e0244-de13-3a76-85d8-9e4968d59b5e.roa
File:                     fc3e0244-de13-3a76-85d8-9e4968d59b5e.roa (raw, json)
Hash identifier:          E3FwfWvHWpf3EKABb3UIEgM7KidBqja/oonKT9szy8I=
Subject key identifier:   29:FC:C8:59:17:FE:EA:00:7F:45:3B:85:B9:C1:12:FF:F6:87:71:5F
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F43285845131ADCD53265132A57DFEF00
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/fc3e0244-de13-3a76-85d8-9e4968d59b5e.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     397666
IP address blocks:        23.145.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:dc:d5:32:65:13:2a:57:df:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=30084d61-0781-449e-959d-c91d80f85aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:9f:63:7b:0e:7e:37:cd:e7:21:a7:c7:96:
                    bb:94:d8:bf:5d:49:46:91:39:83:89:b3:5b:1d:85:
                    60:42:af:cd:88:ea:cc:07:06:25:6e:ea:d3:32:f3:
                    da:13:29:bc:a8:ad:a5:30:d3:a9:9c:91:57:69:84:
                    a7:e3:30:1e:c7:65:6e:00:ed:c9:ce:83:3d:d2:9f:
                    94:f9:05:fd:70:4a:fb:9f:ac:2a:fe:3b:c2:6b:1b:
                    b5:48:5d:d9:96:a5:4f:2d:62:43:25:f6:95:99:b6:
                    d5:2d:f3:17:97:fd:c6:52:ff:88:53:dd:7c:ef:d5:
                    b4:35:c1:47:c3:84:7f:af:26:c0:c8:c4:a6:2d:61:
                    7c:df:58:88:26:c0:81:2d:27:56:26:9c:cf:10:6c:
                    ea:d5:c9:60:72:32:0d:aa:53:8f:53:dd:1b:8f:03:
                    29:3b:0e:be:72:ae:82:35:ca:51:43:0e:59:f0:17:
                    e7:24:aa:4d:49:e2:ff:5b:d2:4d:74:ea:ce:30:eb:
                    b2:83:9c:2d:58:29:91:bd:45:a3:f1:8e:a6:01:63:
                    c4:f5:69:0a:51:91:aa:24:42:72:ac:54:18:c4:a4:
                    8d:30:83:65:14:68:e5:a7:f2:61:f7:1e:d0:ec:e4:
                    88:20:d2:c7:8e:c4:a2:00:a7:5d:33:27:60:37:d3:
                    db:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:C8:59:17:FE:EA:00:7F:45:3B:85:B9:C1:12:FF:F6:87:71:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/fc3e0244-de13-3a76-85d8-9e4968d59b5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:55:18:15:61:ca:97:3a:dd:ca:45:2f:cd:65:ad:6b:1f:57:
         eb:97:da:67:e5:ef:b8:22:de:a8:4e:a1:12:0e:d0:14:ea:35:
         d1:1e:77:eb:7f:e8:20:64:d8:da:08:35:03:31:28:b7:de:c0:
         cd:b4:0f:92:38:59:6e:64:2b:ac:f1:df:80:e9:0a:5a:7c:4c:
         07:95:09:5d:af:94:92:f7:5c:bb:37:70:a2:78:b5:8b:52:d3:
         d3:5d:eb:07:08:2f:70:a8:71:11:6f:48:bc:aa:c4:59:28:d4:
         3c:60:ef:0a:d6:a2:7a:3e:93:b8:06:19:9d:02:ae:0b:bb:0c:
         79:4d:b9:9a:be:8e:38:b1:b9:6f:9e:05:7d:f2:a1:d7:88:f4:
         52:86:52:7f:d6:c4:21:d1:b7:cf:78:63:b6:f4:64:01:e1:92:
         5d:ee:a5:a5:34:8c:de:00:78:8b:05:77:60:f5:34:d7:ab:60:
         85:91:ff:95:8d:e4:da:be:c3:4f:94:83:af:51:73:4c:53:bd:
         a9:13:c6:dd:0e:00:97:e1:8b:a6:d2:50:15:5a:c8:5b:88:b9:
         70:ea:28:c0:ef:d2:f7:9f:02:c5:bb:ef:59:3d:4d:02:b1:6c:
         2e:4e:f8:27:43:80:cd:90:cd:cc:78:16:d2:96:f4:83:34:01:
         01:bc:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 02:25:16 2024 by rpki-client on console-ams.rpki-client.org