Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/72d14a3e-4507-384c-81f7-c208190816cf.roa
File:                     72d14a3e-4507-384c-81f7-c208190816cf.roa (raw, json)
Hash identifier:          /59SVgDeqJZWm0zRsEkf+yY9+EYFwO4SUrTYG+xLwNQ=
Subject key identifier:   D4:F5:02:BC:E5:B3:A8:8E:EC:2C:3D:CF:6F:33:60:9E:93:D6:DA:27
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858475BDB85F2475E27E2B6A21380
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/72d14a3e-4507-384c-81f7-c208190816cf.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     63023
IP address blocks:        23.174.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:85:f2:47:5e:27:e2:b6:a2:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=b6d7bd32-2cca-4a07-85ee-b30cbbb97bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2a:cc:05:c2:b3:d7:69:fd:4a:9c:ed:35:54:
                    41:82:e2:db:d3:4f:0e:7d:7e:44:ee:52:e5:7d:3b:
                    fb:2f:6e:aa:02:1e:41:78:7f:c6:cc:f7:61:90:08:
                    b6:ca:d8:c1:0c:50:49:9c:b7:17:ff:2e:ff:82:fc:
                    e7:b9:d4:8a:e1:29:6c:7c:5f:00:cd:b8:b8:53:03:
                    d0:b8:86:fb:13:a2:c2:e4:f5:b3:a1:84:ba:58:3f:
                    9c:36:ff:48:e7:a8:9c:d5:78:7a:fe:a1:c1:a7:b0:
                    ab:75:8a:a1:9c:98:87:27:1e:92:6b:3f:e6:5e:03:
                    77:5b:b4:b6:5b:d3:ec:96:78:81:fa:54:af:9e:11:
                    7c:b9:70:9c:1d:31:d7:b3:db:c4:7e:a5:c2:b8:e9:
                    5d:32:aa:79:75:78:a6:e1:16:1a:1f:23:76:ea:7c:
                    19:dd:df:12:eb:b7:b2:fe:99:77:27:35:7c:64:39:
                    8f:5f:9a:8e:94:2f:75:3d:b8:7e:22:d7:c4:4a:18:
                    a6:46:f7:32:f2:c4:3c:bc:d4:ea:7a:f7:1e:43:c4:
                    d0:30:0a:64:f4:dc:4d:b2:ed:fa:72:b9:c7:17:ce:
                    29:f1:57:10:4c:e7:1b:6e:2d:31:b4:f0:a0:7b:7a:
                    e8:00:d0:c2:54:e4:f0:2d:e4:6c:20:d7:7a:e4:d8:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F5:02:BC:E5:B3:A8:8E:EC:2C:3D:CF:6F:33:60:9E:93:D6:DA:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/72d14a3e-4507-384c-81f7-c208190816cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:b9:c7:5c:ee:59:6f:65:3c:10:93:c9:45:e2:d9:07:e1:3d:
         3e:44:d7:7a:88:37:c7:64:ac:54:ce:e9:30:86:83:69:f0:22:
         86:28:b7:dc:ba:3d:d9:a6:93:e3:88:65:ad:e9:c0:ee:35:43:
         50:31:14:be:a0:cd:98:22:80:15:7c:a3:c7:ae:5d:c3:1d:46:
         de:ef:db:e4:72:6b:2a:05:da:f0:e4:ae:a2:85:7a:74:7c:b1:
         ed:36:ff:0c:cb:9c:bf:fb:e0:c0:6f:60:56:03:f4:34:b8:77:
         a0:96:7e:a6:5b:8f:04:9b:25:a6:e8:e4:b5:2d:c9:91:ab:79:
         75:b4:21:39:e2:b2:d3:7f:81:a5:3f:76:94:b5:f5:9c:63:97:
         86:ef:6f:44:9b:b2:d2:87:e2:10:85:31:59:54:88:1d:4e:37:
         24:98:4f:ed:71:8f:75:44:3b:6c:4c:f3:a8:59:75:25:86:49:
         22:e5:95:2f:03:d6:14:f4:5c:51:2e:b6:e3:eb:08:43:57:eb:
         3b:94:9c:50:0c:43:42:8b:b1:68:ba:1b:03:53:a3:54:33:64:
         1e:90:30:69:5d:88:48:91:67:54:47:4c:d2:ae:26:47:eb:6a:
         c8:1b:69:f9:a0:da:9f:c2:ee:1b:8e:ac:21:b6:af:8c:e2:02:
         8e:0e:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 20:34:18 2024 by rpki-client on console-ams.rpki-client.org