Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/aab117e7-6f3e-35f9-8096-1e64dc959812.roa
File:                     aab117e7-6f3e-35f9-8096-1e64dc959812.roa (raw, json)
Hash identifier:          B7srx4ElWl5wXcW34qpcz/eZN39kEB/hdAp9YTVmgAY=
Subject key identifier:   9D:0B:9A:D5:32:9B:5A:33:4F:DC:B7:B7:EA:8E:97:75:2F:B3:71:78
Certificate issuer:       /CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
Certificate serial:       010D0C9F43285847D999FA1A7EF0C5BC53A69D00
Authority key identifier: 95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/aab117e7-6f3e-35f9-8096-1e64dc959812.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     138997
IP address blocks:        23.173.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:fa:1a:7e:f0:c5:bc:53:a6:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=06975ed3-4945-4494-bb48-2209418f0e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:15:53:ba:3b:46:d0:2f:c7:cf:33:40:46:
                    ed:be:24:29:9c:72:90:da:77:10:4d:6e:70:46:d8:
                    de:81:58:05:08:e9:46:c3:13:64:fc:2c:92:5d:22:
                    bb:f0:1b:43:18:c3:7f:f9:b8:03:26:87:a6:7c:a8:
                    25:ee:af:f1:00:11:cb:2c:2d:97:06:18:69:7d:eb:
                    42:2b:54:6e:40:24:b9:bc:19:c5:b0:c6:3a:f4:5c:
                    55:32:3e:88:24:b4:64:cb:b4:df:15:81:6e:9b:c5:
                    0f:ce:cd:75:6b:77:10:0d:52:22:d6:61:20:41:f6:
                    25:60:d8:cc:e4:04:8b:01:11:03:41:f2:fb:e1:76:
                    32:d4:8c:32:0c:77:4b:b2:41:66:f9:0f:4d:3e:7d:
                    85:fe:c5:ff:7b:ba:53:56:86:4f:ca:d1:58:1c:3f:
                    39:66:a2:f8:b0:c3:8f:31:cb:0d:c4:9d:d3:d7:8f:
                    0f:53:7e:9a:2d:35:8d:a6:7e:a0:98:2c:c8:f6:fd:
                    b1:7c:62:15:c1:f0:ae:d0:ce:b1:80:df:9d:07:9b:
                    9a:77:4f:63:10:ca:19:19:58:79:2f:8f:22:85:dd:
                    76:e2:e3:ec:88:ee:84:52:9e:56:8c:7f:89:a4:bd:
                    4a:aa:ae:a3:5b:01:23:fa:12:2b:91:44:89:70:7d:
                    1e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0B:9A:D5:32:9B:5A:33:4F:DC:B7:B7:EA:8E:97:75:2F:B3:71:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/aab117e7-6f3e-35f9-8096-1e64dc959812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl

            X509v3 Authority Key Identifier:
                keyid:95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:8a:2b:8e:c7:0c:f2:f0:b9:74:d2:97:53:74:7b:62:21:
         cc:da:f7:06:21:5c:2f:8b:8b:b6:5c:fa:a7:d6:0b:0b:5c:c2:
         1b:cf:f9:0f:a3:f2:ea:37:c8:bc:5b:c5:e3:c9:e8:83:71:0e:
         7e:6d:f2:c9:a8:14:50:5e:83:b3:de:40:47:36:19:1d:d2:86:
         c8:74:48:47:ac:ae:58:3e:ea:f8:db:c1:e8:83:30:a9:59:0d:
         91:79:e9:79:8a:c7:b8:fc:8f:b1:d0:84:17:8f:95:ec:6e:7f:
         99:3f:56:9d:3b:e8:e6:c4:24:78:f8:fa:1d:db:21:e9:f3:7b:
         8e:ef:ea:26:f1:ba:dc:fa:03:c6:2e:69:3c:33:e2:1e:a6:df:
         69:7e:00:b4:ed:d8:20:bd:1c:b9:6d:a5:54:d9:d3:ba:7e:96:
         66:04:28:c0:19:4e:6d:6c:59:70:51:c8:cf:47:5a:98:9e:ca:
         26:b4:bd:7f:f3:39:2a:f6:19:24:9f:83:5d:2f:42:34:f9:aa:
         d4:89:17:63:04:43:99:cb:43:6b:1f:1a:b2:d0:8d:02:3f:7e:
         d8:86:dd:e6:83:ea:b1:86:20:a7:ab:a7:77:88:3b:4c:e9:1e:
         9a:94:14:f0:7c:4d:da:33:49:a7:95:d8:79:9b:b5:e3:bb:49:
         c2:92:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:29 2024 by rpki-client on console-fra.rpki-client.org