Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa
File:                     89c1d277-7641-3c70-9cea-851fdd81b4f6.roa (raw, json)
Hash identifier:          FWTrECGnvm8lK/1TcNCBRG4hf/hV6LfoCWDmWo7BPfM=
Subject key identifier:   FF:54:75:87:DE:6B:74:9B:61:F9:3E:0C:25:6A:66:CB:E9:15:E0:16
Certificate issuer:       /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Certificate serial:       010D0C9F432858478CB67F220388BC271AFEE600
Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     12243
IP address blocks:        23.172.0.0/24 maxlen: 24
                          23.176.16.0/24 maxlen: 24
                          158.51.76.0/23 maxlen: 23
                          158.51.76.0/24 maxlen: 24
                          158.51.77.0/24 maxlen: 24
                          198.98.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:7f:22:03:88:bc:27:1a:fe:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=8957bb93-1a0e-489b-b2f6-4f8867fa3635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a1:8a:c3:f6:26:54:4f:9c:65:c3:c2:be:8d:
                    03:45:ac:e1:dd:1d:98:de:68:3e:1b:8d:72:04:65:
                    0c:76:ff:d3:ad:91:66:a5:ac:74:f9:02:0c:76:9b:
                    f5:ab:90:94:7f:b7:b7:e1:97:ac:aa:b6:74:af:bc:
                    8a:ff:5d:71:7f:13:1d:c3:71:5b:7e:34:ae:93:b9:
                    de:55:cb:66:c5:9e:cd:a2:fa:44:0c:2d:d3:2f:3d:
                    22:89:2a:0c:64:fd:d4:d0:5c:ea:ac:c3:62:0d:f0:
                    76:78:bf:9e:cf:a9:6d:81:be:5a:1e:7f:b1:20:9b:
                    5b:a8:52:c5:14:16:41:91:88:7d:af:79:ff:d6:89:
                    7d:79:16:80:76:69:ed:db:77:5b:43:b4:70:56:bd:
                    e1:64:92:95:93:7a:4d:52:19:28:fa:90:7f:9e:e2:
                    79:81:19:07:4e:b2:8a:b9:76:91:7d:7a:f5:17:9f:
                    15:74:79:ec:4d:9b:da:cc:33:ba:a4:20:5f:3d:e6:
                    06:11:f2:3d:e6:1c:08:32:f9:db:60:a7:5c:de:a1:
                    ac:cb:73:36:ff:e0:d0:4f:9a:b0:bf:22:1d:7b:e7:
                    6a:5f:cf:f1:52:35:fd:a9:fb:63:0e:6a:42:15:48:
                    b6:ea:93:aa:93:71:55:a1:5c:d3:a7:ff:bb:f3:67:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:54:75:87:DE:6B:74:9B:61:F9:3E:0C:25:6A:66:CB:E9:15:E0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.0.0/24
                  23.176.16.0/24
                  158.51.76.0/23
                  198.98.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:b8:c7:37:b4:66:9e:34:5a:87:0b:58:bf:8b:6d:04:b1:
         54:2d:1d:9c:9d:c8:47:de:c6:27:de:0e:cf:17:ae:0c:96:73:
         34:b7:3a:08:c6:8c:bb:f3:4c:b1:b1:d2:2d:6c:87:89:6e:6a:
         16:d5:fe:c7:f8:54:7a:b0:27:af:ec:3a:9a:0b:31:c4:df:96:
         1b:0d:07:ca:db:99:e1:92:ff:23:1b:cd:27:a0:a5:23:cd:76:
         59:04:79:dc:22:db:48:d1:9b:93:9b:d7:0b:5d:d6:9d:3b:a8:
         3c:0b:d2:de:63:e7:3e:76:8d:07:df:c6:cf:89:97:c6:77:d0:
         fa:06:73:9c:09:4b:df:b9:21:fe:4d:f0:26:3d:5a:6a:32:7c:
         64:5e:a3:e0:a6:3a:66:22:2b:ec:f4:51:bb:d0:cd:1d:65:42:
         15:1b:ce:0d:b5:29:53:cd:51:6e:18:d1:68:0f:32:6b:95:9d:
         a6:f4:78:5a:95:2b:57:36:b6:86:5b:a2:f1:7d:64:54:cd:f0:
         92:57:b6:e3:a9:fd:a9:2b:e5:6e:8d:78:df:c1:5d:94:65:a2:
         29:1f:14:25:ad:2e:2d:f3:94:39:fb:59:aa:1f:aa:b2:12:3a:
         07:21:3c:79:ab:9f:99:52:0b:67:8e:1c:9f:e1:96:5c:5a:a9:
         3c:f7:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org