Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
File:                     ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa (raw, json)
Hash identifier:          AQi8JSSXsyd48PtamDHaLIOHrRJMv+GKdssoncon/Ms=
Subject key identifier:   95:09:AF:AE:70:EF:4B:03:00:72:E8:1F:44:91:5A:01:20:97:11:55
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584738F5FF320CCFAD8F54F1DF80
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     400919
IP address blocks:        23.169.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:ff:32:0c:cf:ad:8f:54:f1:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=1be259f0-996e-4bbd-8976-16ffb721cfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:3b:6c:1d:14:6e:9f:a6:32:64:54:1c:fa:
                    50:7d:17:d1:37:2a:8a:23:dd:cf:5d:fd:a1:57:1e:
                    bd:e8:36:07:dd:39:e4:07:50:89:c8:78:22:da:13:
                    f0:f9:8f:54:ab:96:0c:eb:20:b3:a6:c8:5c:94:d9:
                    6b:de:66:24:ea:61:97:b1:ae:6f:e5:22:83:a9:2e:
                    8d:05:8b:65:93:2b:ed:72:11:84:f6:d0:07:1b:85:
                    19:b2:3d:7a:a5:1b:64:ec:41:cc:32:0b:95:10:cf:
                    59:28:86:45:5d:ba:85:8f:a6:22:66:e8:1f:d8:7c:
                    8b:31:ca:8a:b4:32:51:c8:4f:ed:04:ca:40:77:9d:
                    41:5d:44:13:73:c9:8b:03:5d:58:e9:0f:0f:7e:1f:
                    4a:1f:b8:44:15:9a:d6:65:4e:d5:68:54:48:f3:9a:
                    fc:05:c4:b7:55:0b:91:c0:70:92:f8:bc:14:2d:a3:
                    e9:9c:b1:18:b8:cd:39:ee:43:65:89:99:b1:6c:9b:
                    8a:13:16:73:a0:4e:9f:5e:df:8a:b5:00:18:26:76:
                    28:4a:77:91:e1:42:c7:fd:c6:4b:61:5d:f9:b5:cf:
                    22:0a:9f:10:8f:cc:a3:08:c7:ac:28:16:51:12:8d:
                    11:4c:9e:b1:1c:44:88:83:c3:b0:b8:99:9d:e1:4e:
                    70:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:09:AF:AE:70:EF:4B:03:00:72:E8:1F:44:91:5A:01:20:97:11:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:05:13:90:54:46:87:d3:6b:d8:bf:66:3b:c5:3d:20:29:f7:
         54:ab:60:7d:49:a2:a4:43:a2:3c:cd:44:3b:fd:b9:72:b3:80:
         a8:b6:b6:a5:27:23:fa:a1:23:51:21:57:2f:07:ff:07:64:b2:
         0a:00:5f:c9:3e:72:49:d5:94:69:43:ef:10:c8:18:6f:3a:15:
         8f:d1:9b:8c:16:56:9d:a7:d8:0b:37:92:d4:9c:18:24:9e:3d:
         59:80:8c:60:39:ef:1c:72:8f:c7:c3:7a:9f:a6:eb:bd:3b:11:
         c5:63:e1:a3:18:71:00:7e:8a:d6:dd:ed:09:39:1a:2c:c4:2a:
         ad:dc:ca:fc:2a:bd:51:0a:5c:ee:b8:15:c2:e2:f2:9d:b5:9b:
         dc:87:c1:45:eb:ae:0c:b0:b3:29:17:5a:ba:d4:2a:2a:61:d4:
         5e:fc:9a:92:20:09:e8:75:f4:02:93:67:25:7b:de:b4:fc:b8:
         98:fa:63:dc:30:08:93:ad:7d:9f:47:bb:96:91:bd:c9:88:e6:
         4c:58:06:d3:79:b4:18:7a:61:63:2b:14:d6:95:cb:4f:80:95:
         88:d6:22:07:bf:40:6d:36:b7:a1:47:f7:3b:78:68:a0:91:29:
         2e:85:a4:61:f0:09:a0:68:f4:d8:a9:e8:9f:33:50:0a:e1:06:
         01:97:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:29 2024 by rpki-client on console-ams.rpki-client.org