Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa
File:                     2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa (raw, json)
Hash identifier:          ZzYUzzLRe3kD+xHgd3A9Bo77QB95h7hSVOtYqG3a5+0=
Subject key identifier:   B2:7D:8F:3A:17:A8:97:B7:F1:9C:93:E1:2A:E0:B9:F0:F5:9C:9A:D8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584603141910E451E0327D716B80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa
Signing time:             Mon 27 May 2024 13:00:34 +0000
ROA not before:           Mon 27 May 2024 13:00:34 +0000
ROA not after:            Sun 25 Aug 2024 13:00:34 +0000
asID:                     399641
IP address blocks:        165.254.23.224/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:03:14:19:10:e4:51:e0:32:7d:71:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 27 13:00:34 2024 GMT
            Not After : Aug 25 13:00:34 2024 GMT
        Subject: CN=a4e6062a-4a54-4bc8-b98a-eec6006e8c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:26:89:ce:d3:dc:a7:47:04:a1:8c:4d:5e:bf:
                    f1:44:c3:1e:f1:31:9e:e8:99:c3:0d:20:49:b7:27:
                    af:38:51:43:42:45:8d:a0:a3:9c:04:bc:74:cd:e4:
                    05:f3:80:81:17:bb:0e:63:18:14:86:71:70:f0:4c:
                    93:de:61:e7:ba:ea:34:e0:4c:3b:a5:c4:99:9a:73:
                    c2:f8:a2:3b:06:4b:0a:49:d6:0b:88:ef:02:9e:06:
                    16:04:24:5c:a7:08:ff:2f:95:ee:a0:fe:b8:55:f0:
                    e8:7c:b7:73:59:65:53:26:66:fa:b4:49:67:4b:20:
                    e2:5b:53:cb:e4:01:f9:85:7f:95:58:f3:b5:1a:03:
                    68:21:34:cd:c1:4e:e7:4c:77:60:ad:72:1b:45:54:
                    ca:62:b7:36:bb:dd:c3:47:f2:7f:09:ea:1d:04:2b:
                    e0:2d:9c:83:df:af:c5:52:54:25:21:f0:b3:a7:83:
                    4d:5e:d3:c3:45:9e:7f:d4:8c:0d:63:08:39:1b:48:
                    fa:cf:b9:f2:49:2a:4a:24:bd:4e:69:fb:c2:a4:01:
                    2d:03:c1:fa:fd:1e:f0:90:43:fb:7b:ff:03:06:66:
                    be:cf:4c:8c:89:b3:35:cc:e4:6e:6d:70:d5:df:8a:
                    aa:2c:b2:51:5e:a2:6e:cc:d4:9f:c3:95:44:e1:75:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7D:8F:3A:17:A8:97:B7:F1:9C:93:E1:2A:E0:B9:F0:F5:9C:9A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.23.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:84:83:32:35:ad:c8:6c:da:fc:02:1b:ff:49:96:0a:d5:b8:
         26:35:f0:69:da:39:97:8a:b3:a8:81:f1:23:76:fa:93:bb:9f:
         88:f5:18:3f:8b:1a:a4:0f:4a:fc:8e:00:18:86:33:1b:8b:5a:
         d3:04:58:81:f7:22:3a:8c:49:48:13:d5:14:79:d2:f8:d5:a7:
         97:9d:ec:8c:9a:6f:25:4d:e9:ba:fe:a4:bd:43:10:d9:03:5e:
         99:01:ec:27:2e:d8:37:c2:b2:c6:de:84:8a:6c:17:e6:47:a3:
         39:15:b9:f2:75:c9:1d:f4:21:d5:24:73:eb:31:a0:40:af:c0:
         47:4b:52:0f:2a:00:01:5f:f6:5c:3d:ad:0a:17:cf:a3:58:2a:
         ca:9f:16:3b:0e:20:9e:e9:65:52:d2:4b:cf:02:f7:68:a8:76:
         44:c0:90:a2:83:aa:2e:2c:5e:22:93:08:9d:ef:da:1e:7c:16:
         27:d4:20:6d:af:02:9f:31:9b:7f:69:ce:d3:ae:42:94:eb:ce:
         77:5a:cc:89:0d:d4:48:97:39:a8:70:47:db:22:2b:64:cd:af:
         e0:ba:b3:06:8b:f8:46:2e:75:fe:0b:02:30:17:89:e6:76:fd:
         64:54:3f:7d:5b:54:ed:52:7e:0a:10:2d:1d:37:67:c0:bc:ef:
         4b:45:5e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 22:57:06 2024 by rpki-client on console-fra.rpki-client.org