Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa
File:                     14bd33ec-ec91-396b-b0e6-927ef8be3191.roa (raw, json)
Hash identifier:          /35CQ8x7h5wFn0RvxdFCW71HCL7s9lGX241HF6nX0NI=
Subject key identifier:   7E:8B:97:E1:EF:F7:CF:C2:B4:ED:A2:94:84:48:DA:C5:C4:3A:F1:7A
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F43285847F2BA2BD2665CD570707A6EC0
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     203729
IP address blocks:        23.142.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:2b:d2:66:5c:d5:70:70:7a:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=75270f16-ce23-4139-928b-d72e2f7959fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c8:e0:27:9f:0d:94:17:a2:2d:48:48:10:6c:
                    c4:fd:b1:78:a4:64:91:b3:c8:8d:8a:e2:e4:0e:8c:
                    2b:0c:d6:c4:e5:26:93:df:36:52:32:f8:71:7f:72:
                    49:fd:bb:66:c3:df:88:29:6e:24:38:92:84:c9:6b:
                    b8:21:0b:85:3d:80:d7:df:c4:a8:a4:81:a5:87:18:
                    12:96:84:55:9a:cc:49:2d:86:a7:bb:79:bd:44:f7:
                    e3:fc:c1:1a:8c:76:03:23:28:a3:8d:bb:be:73:6e:
                    f2:92:6b:96:fb:1c:74:e4:8d:b5:82:c2:c8:d8:bb:
                    7e:2c:fc:1f:06:74:a5:60:9b:e6:75:b0:38:f6:6c:
                    17:f6:5c:a5:3a:ba:e5:87:4c:df:dc:11:d7:be:62:
                    33:aa:6a:e6:62:a7:51:73:c5:96:49:f5:cc:38:1e:
                    84:ca:13:fe:54:b2:e9:94:49:c3:32:4a:a5:71:2f:
                    29:1d:d3:35:e1:bf:a1:a6:5b:93:bb:37:85:01:6a:
                    10:d9:4a:7a:06:02:dd:b8:b6:67:67:b5:cd:39:38:
                    6f:6c:37:92:07:a3:6e:c4:2f:cb:7e:c7:c1:da:b7:
                    fb:f4:f2:7b:7d:d7:4c:cd:da:ae:2b:d6:1e:f2:b0:
                    48:d0:12:7c:69:67:ae:a8:c3:33:8e:d9:8d:48:18:
                    ef:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8B:97:E1:EF:F7:CF:C2:B4:ED:A2:94:84:48:DA:C5:C4:3A:F1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/14bd33ec-ec91-396b-b0e6-927ef8be3191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ab:65:ba:23:8f:0a:bb:79:24:b9:57:22:40:50:7e:6e:df:
         df:91:96:0a:34:e9:12:1b:15:c9:80:1e:32:ec:e7:e0:43:4e:
         2d:25:13:bf:dd:65:7e:dc:5f:85:b1:91:dd:88:53:26:c4:aa:
         af:61:f1:b7:3a:1b:54:38:ab:ad:24:91:60:46:f0:11:c5:9d:
         06:eb:78:c2:2b:91:45:8d:21:d4:dd:2f:86:33:99:f5:fb:32:
         22:85:d6:2e:73:9f:8e:69:4a:2f:6f:c7:a9:4d:c6:6e:4e:eb:
         e8:1c:f1:a6:5c:72:bd:81:29:4b:7d:58:e1:8c:0e:f3:44:ea:
         56:10:90:ba:ec:50:e0:59:b0:d7:1e:2f:8f:a4:65:4e:01:48:
         60:ee:f1:f5:fc:e7:04:04:09:40:66:37:a4:92:85:12:e5:f3:
         87:03:13:80:c6:25:84:a7:13:65:ba:0d:94:a4:07:97:1e:c7:
         d2:92:c8:80:1b:93:34:1b:2b:2a:a5:43:60:d0:2d:d0:f2:6d:
         85:50:8c:ae:a3:b2:61:9b:d0:c1:58:cd:a2:d6:31:73:a6:21:
         62:58:38:99:8e:2f:d7:46:bb:55:a1:46:cf:a1:c8:db:f1:8a:
         b2:17:c3:fc:f1:78:1a:70:89:51:0f:0d:b4:b6:97:dc:cb:14:
         9d:45:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:23 2024 by rpki-client on console-ams.rpki-client.org