Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/4f12d025-5ab0-32ff-99d0-a24e9c373ccc.roa
File:                     4f12d025-5ab0-32ff-99d0-a24e9c373ccc.roa (raw, json)
Hash identifier:          eEfX0U/aW4T99LwOYFwGAVbNahLD/TKDlS3KIvQS13U=
Subject key identifier:   ED:4F:2F:22:FC:26:5B:3C:18:35:E2:4E:91:07:C4:52:D2:C9:8C:13
Certificate issuer:       /CN=ca4cb307-c1ce-4780-8903-6931cc40426b
Certificate serial:       010D0C9F4328584754E0E426BCF894D0507A8880
Authority key identifier: C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/4f12d025-5ab0-32ff-99d0-a24e9c373ccc.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     54804
IP address blocks:        23.169.48.0/24 maxlen: 24
                          23.182.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e4:26:bc:f8:94:d0:50:7a:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca4cb307-c1ce-4780-8903-6931cc40426b
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=33211a09-35d5-4251-9c58-37705b86e6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:67:a4:b8:69:37:70:a0:d6:0b:5f:76:e7:
                    74:f8:87:52:c1:dc:08:b8:56:87:7c:aa:c9:f6:4e:
                    de:e0:97:16:2c:96:f7:57:32:fb:3d:75:7f:b2:43:
                    45:a3:b6:26:cf:02:9d:59:ee:3c:66:73:51:a9:09:
                    a1:8f:8e:00:ae:41:06:22:63:bd:8b:e9:cc:d9:5d:
                    cf:53:6a:de:1c:0a:1a:12:a9:3e:4d:1a:11:6b:f3:
                    8c:23:e0:db:4a:70:ed:42:a6:84:96:53:f6:e0:7b:
                    6e:a7:be:7c:51:d1:53:02:af:f1:3e:b6:a9:a6:f9:
                    0f:b9:92:d3:19:2f:d4:cf:1c:7c:29:83:cf:a1:92:
                    08:17:f3:ad:95:af:1e:16:ac:d5:bf:8c:ce:90:6e:
                    8a:00:83:c5:a1:ae:f3:da:b7:a5:04:43:0b:74:35:
                    44:ab:a6:19:18:f1:12:65:61:95:8e:c1:46:67:84:
                    67:eb:31:02:11:80:98:87:12:b2:6f:aa:b5:1e:fd:
                    9f:5d:14:68:97:21:11:19:70:7d:70:2d:d4:82:ad:
                    fe:a2:7e:36:c3:ac:7a:c0:3b:d3:a6:7e:ae:96:70:
                    09:79:1a:70:ba:8d:19:65:d1:bd:2e:7f:63:f2:45:
                    a1:9b:aa:91:2f:ef:6b:eb:f4:0c:3d:c4:1e:3e:e6:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:2F:22:FC:26:5B:3C:18:35:E2:4E:91:07:C4:52:D2:C9:8C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/4f12d025-5ab0-32ff-99d0-a24e9c373ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b/ca4cb307-c1ce-4780-8903-6931cc40426b.crl

            X509v3 Authority Key Identifier:
                keyid:C6:ED:97:39:08:84:2D:D9:0F:6C:91:FB:6C:82:83:ED:D4:3F:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca4cb307-c1ce-4780-8903-6931cc40426b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.48.0/24
                  23.182.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:64:02:ff:e6:85:1a:13:ca:d2:9c:3d:ed:57:e8:d7:c9:23:
         82:95:17:88:00:60:77:1c:5a:de:62:62:b1:c6:e2:db:8b:4f:
         6d:17:1a:62:13:bd:22:87:a0:4c:b9:18:aa:27:80:ca:2b:77:
         52:78:99:40:03:ef:57:a9:53:d3:71:97:5f:3e:ff:3c:40:63:
         f6:29:a8:34:7a:1d:85:a3:a4:d8:34:90:fb:55:13:3d:88:12:
         2b:7e:0a:b7:49:1b:b6:d2:e7:64:d4:01:71:44:50:db:62:de:
         a1:1e:d1:d4:f5:da:bd:cf:63:5f:f7:6b:40:2c:e2:0b:ab:a5:
         b7:21:6b:ad:bf:26:f7:3b:a7:d4:f4:c7:09:c0:aa:a5:3f:52:
         3d:2b:74:ff:fb:4d:17:8f:12:b5:29:4b:1c:5d:07:ff:e6:6c:
         0f:73:0a:d0:2d:50:af:97:ab:00:4f:f7:e1:3d:b4:98:b8:8d:
         f9:13:d0:f3:b0:d3:90:88:a0:8f:fd:f9:68:b1:eb:fb:fd:ba:
         8c:74:d7:24:ce:ce:29:c7:61:1d:95:5c:92:43:fc:d6:74:78:
         1a:1d:fa:29:11:97:b5:9f:b6:7d:ff:b1:e4:fa:74:8a:22:21:
         e6:76:28:dc:d3:96:b4:f3:dd:b7:71:c4:92:63:a3:ca:0e:6b:
         df:1d:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:20 2024 by rpki-client on console-ams.rpki-client.org