Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/94b26837-184a-30cb-8311-194f75be68b5.roa
File:                     94b26837-184a-30cb-8311-194f75be68b5.roa (raw, json)
Hash identifier:          SFRtlIKGiInQPng5/7hJoPBRJ5dgW7b7L2FSrvIo384=
Subject key identifier:   00:C7:F2:79:60:25:B1:1B:38:74:45:27:9D:33:1E:F9:A3:F6:A2:B8
Certificate issuer:       /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
Certificate serial:       010D0C9F4328584523DAFA00E83956ABBBE3D340
Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/94b26837-184a-30cb-8311-194f75be68b5.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     207420
IP address blocks:        23.144.248.0/24 maxlen: 24
                          2602:fb3c::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:fa:00:e8:39:56:ab:bb:e3:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=ae9f2064-5dff-4750-8070-770f26c6f5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:db:28:9d:2a:79:0a:55:06:f7:ab:a0:5c:
                    53:ea:91:80:8e:20:6e:9b:83:39:13:39:32:a1:aa:
                    70:d8:b9:c0:7c:c3:2f:86:b6:78:7d:56:0b:e4:73:
                    73:4a:d3:5a:06:06:45:d7:60:58:2d:72:0d:84:ca:
                    70:6b:83:ca:b5:5d:40:59:00:59:c1:51:0c:3b:87:
                    fb:e9:9b:94:37:36:c5:04:62:ce:02:d3:15:ff:7e:
                    23:a5:ac:6a:e5:f5:9d:28:59:7d:f7:e7:6f:f1:2d:
                    ad:41:75:ab:4e:e2:53:e9:3d:72:ee:d8:c3:31:e6:
                    70:d0:df:fc:04:6a:ff:7b:5b:22:f2:00:bf:45:c8:
                    c6:83:20:0f:73:da:6a:2f:de:eb:10:68:d4:da:4a:
                    41:d6:cc:e6:43:14:26:2d:3b:1f:96:e1:59:9b:ac:
                    99:5e:53:a6:d7:4a:7d:d3:24:07:83:e2:f8:98:fb:
                    79:21:1e:c8:af:9a:3d:69:54:d2:5d:de:be:8d:3c:
                    ef:64:03:4f:07:65:80:d4:f4:48:5c:83:23:42:c9:
                    0d:b1:d9:36:b6:e4:ea:0a:5e:66:a7:bd:74:01:70:
                    11:13:87:fb:60:60:85:e0:21:fd:61:08:81:ef:ae:
                    95:af:f3:7f:65:65:19:22:06:27:e2:3c:c7:d9:b8:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C7:F2:79:60:25:B1:1B:38:74:45:27:9D:33:1E:F9:A3:F6:A2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/94b26837-184a-30cb-8311-194f75be68b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl

            X509v3 Authority Key Identifier:
                keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.248.0/24
                IPv6:
                  2602:fb3c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:66:c0:4d:87:59:f5:23:d9:b1:46:71:79:e3:42:66:fe:af:
         95:f7:57:64:a6:cb:f9:2c:fd:ec:7e:e0:3c:6c:3d:e6:3e:4b:
         2a:7e:37:97:68:60:f9:67:b6:be:40:ba:a4:e8:4f:80:28:f5:
         dc:14:5a:8a:fb:56:db:ff:80:8a:ba:ad:a0:e2:a3:7b:1a:b9:
         3c:bc:de:f7:50:45:a4:b8:29:54:a4:6e:6c:3a:80:b9:eb:e4:
         4c:18:b5:75:b9:f9:aa:3a:30:e2:c4:cb:39:72:09:b1:ed:eb:
         ec:ae:ec:b9:b1:47:7f:d7:05:e5:b1:a7:39:34:08:cf:c4:1f:
         5c:d7:99:a3:31:d0:b7:26:8f:35:cf:2e:b0:bf:18:67:3f:1d:
         d3:bd:09:86:c8:4b:a8:18:b2:d8:99:cb:ed:01:bc:29:00:9a:
         75:5e:82:a0:b2:df:d7:72:a3:e7:c3:0d:8d:30:f8:37:e3:a2:
         7d:c8:cd:c5:39:55:b3:c9:14:61:f0:01:45:17:db:d3:90:95:
         51:9c:7b:2d:88:77:b4:76:6c:5c:e3:1e:d0:b3:72:15:b2:f3:
         c7:e5:c6:8d:32:e9:ba:d3:dd:e2:be:cf:0c:16:7f:76:b4:16:
         a1:c2:09:e6:3b:c3:5f:5e:3d:a1:79:d1:23:a8:e1:99:67:55:
         99:a7:18:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:40:45 2024 by rpki-client on console-ams.rpki-client.org