Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
File:                     ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa (raw, json)
Hash identifier:          421YWx2MW13P4xoRR01H2cPVUH+2Nf5FnGYInjp9A5Q=
Subject key identifier:   37:08:59:41:93:52:90:E9:4F:CA:95:A2:CE:28:67:09:51:58:2F:14
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584578E304069737DFD647E27B00
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
Signing time:             Mon 08 Apr 2024 01:00:25 +0000
ROA not before:           Mon 08 Apr 2024 01:00:25 +0000
ROA not after:            Sun 07 Jul 2024 01:00:25 +0000
asID:                     400919
IP address blocks:        23.169.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:e3:04:06:97:37:df:d6:47:e2:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Apr  8 01:00:25 2024 GMT
            Not After : Jul  7 01:00:25 2024 GMT
        Subject: CN=1017aec0-0540-4df1-a9e5-4d405f066483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:71:4b:45:4f:ef:2b:ff:39:e0:bd:d7:8f:
                    68:4e:28:4f:b4:63:21:30:9b:e4:9e:9b:dd:ca:70:
                    21:5b:90:2d:64:11:44:56:15:25:c9:f6:94:5a:c3:
                    39:92:67:3f:5b:55:df:2f:b5:06:a6:18:23:dd:54:
                    3f:97:03:c1:19:9b:80:ca:22:fe:50:00:29:79:1d:
                    cc:d9:07:a1:c5:eb:31:4e:33:e6:d8:40:40:d5:ca:
                    7b:27:40:24:ab:e9:99:cd:2c:b8:ee:39:1a:f9:57:
                    47:d8:dc:ef:50:a6:72:52:79:af:85:ac:92:db:cd:
                    2b:0c:90:12:5f:18:b8:16:6c:30:67:4a:13:4c:b2:
                    4a:1a:1f:4d:98:b1:a5:c2:e4:eb:f5:21:03:47:3a:
                    e5:a5:af:66:fa:e3:5b:03:d7:1d:01:10:29:ed:41:
                    36:70:05:cd:f2:09:b0:63:fe:17:6e:c2:0d:46:c7:
                    e5:77:6a:06:01:93:a7:27:96:52:b7:1e:ec:9e:f8:
                    49:8b:ba:b3:f8:79:68:3c:38:ff:25:ef:98:50:ca:
                    f9:63:de:7b:d0:3e:22:b9:3d:59:93:5a:51:b5:31:
                    5b:fa:03:6a:c9:17:bd:0f:80:09:4e:9f:44:43:ed:
                    73:94:2c:3e:49:af:e9:74:20:74:86:2e:ad:1e:d6:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:08:59:41:93:52:90:E9:4F:CA:95:A2:CE:28:67:09:51:58:2F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:50:47:ea:7a:f6:9c:ff:ad:7c:bc:13:0a:5d:fa:dd:e0:
         2a:63:04:f4:0a:83:82:ea:52:c1:f5:f9:59:6c:5c:a0:05:1d:
         03:d9:0c:c5:b5:04:50:26:06:1a:8b:95:a0:75:ba:f1:fe:b3:
         28:63:18:f4:4d:2d:88:f8:c0:b0:ea:c8:2a:8f:00:a9:df:16:
         a1:6d:df:36:37:66:6d:c9:99:11:95:5b:43:98:19:b2:41:bb:
         b9:83:5c:4f:c3:ca:3b:c2:86:56:65:a9:e9:58:7d:96:70:24:
         b5:67:ba:31:6e:e4:95:56:d7:48:36:dc:0b:3b:96:97:8d:15:
         1c:09:60:74:db:b1:d5:43:2b:dc:5e:cd:ef:76:7c:2d:54:71:
         6d:dd:f4:7e:7b:09:b0:33:9d:a5:21:c3:a2:d7:db:0d:c5:04:
         a9:42:0e:61:5c:3a:b3:95:09:f1:d2:32:df:d9:f8:13:13:20:
         ed:d0:fb:45:22:51:c6:1f:36:00:23:c4:c0:92:97:a9:a1:39:
         ca:9b:ca:33:e6:f2:c9:2c:61:fc:79:fc:e8:a9:b3:cd:b4:ce:
         41:4f:ec:c9:ad:4e:77:29:b7:54:c6:8d:27:dd:7f:c1:4d:61:
         03:9f:66:77:86:1e:f2:83:02:d9:aa:f8:1e:f0:6d:d0:8c:2d:
         fe:26:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:36 2024 by rpki-client on console-fra.rpki-client.org