Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa
File:                     1c469c0a-d4ca-346c-acf1-814ba866a653.roa (raw, json)
Hash identifier:          KWlBI+MttcDFOLKB6lHjcZUKgS4cbJzeOuJNxB2RUQg=
Subject key identifier:   7D:80:AA:D2:14:7A:A9:89:23:D3:E9:D9:F1:40:85:FD:BE:60:83:91
Certificate issuer:       /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
Certificate serial:       010D0C9F43285847D40496D04C16E7A6CD1C8380
Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     209242
IP address blocks:        23.167.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:96:d0:4c:16:e7:a6:cd:1c:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=71905525-2b99-482d-bb6e-549477bd9c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:2f:92:0a:7d:35:38:da:78:a1:c2:8e:de:
                    14:cf:96:ad:bd:3e:bb:1e:86:06:d2:f8:fd:1b:ad:
                    df:f0:4a:7f:fb:9d:28:83:a3:1b:44:b6:c6:66:8b:
                    18:20:8c:18:ae:75:32:bf:bc:73:d8:50:c4:df:e0:
                    df:c1:a4:9a:72:f1:09:78:28:22:a1:5e:77:87:f4:
                    75:ac:0d:a4:73:b4:36:0d:90:2c:02:35:42:f0:51:
                    e1:f3:df:87:4b:24:09:a5:77:e0:47:95:a5:ec:2a:
                    55:76:52:9b:92:f2:2b:e1:72:c3:d0:c8:1e:50:3b:
                    30:0c:77:0a:2c:cd:d4:24:41:b6:95:0e:ed:99:78:
                    7e:c9:49:f0:27:9c:43:e8:4f:d0:af:5e:16:a9:b4:
                    e3:d2:cf:63:e6:aa:c7:74:93:7c:74:20:56:8d:f3:
                    6b:6e:89:16:5b:84:e1:e8:eb:b4:ed:fb:c0:00:27:
                    1c:88:dc:e8:06:c2:37:ea:c2:db:8c:34:1f:44:ce:
                    26:69:99:05:a0:9f:f7:6a:98:3c:33:54:ad:74:7d:
                    84:64:0c:2c:fa:af:68:84:1f:c8:29:40:9d:17:8d:
                    f8:f8:93:9d:e3:1d:1a:d6:74:b6:dc:38:e2:14:b1:
                    02:88:f7:ab:9a:16:48:2d:24:77:bd:91:76:58:34:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:AA:D2:14:7A:A9:89:23:D3:E9:D9:F1:40:85:FD:BE:60:83:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/1c469c0a-d4ca-346c-acf1-814ba866a653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl

            X509v3 Authority Key Identifier:
                keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:69:c3:0c:ab:b8:2a:c9:62:38:f2:b0:27:d0:fd:c6:00:7c:
         df:53:40:a3:88:af:94:2d:97:30:8d:4b:11:bb:79:2c:ad:22:
         b7:de:62:35:37:90:7c:81:34:06:80:14:e9:37:15:8e:f7:97:
         40:89:ea:94:97:24:dc:03:2f:88:6e:1f:ca:3b:b5:5f:01:43:
         77:4c:83:94:ac:38:e5:ad:58:90:ac:93:f0:0f:8c:48:43:b2:
         8e:88:d2:1b:55:96:a7:0a:00:e2:c7:80:38:6a:98:93:06:9f:
         b2:7f:c6:a0:fa:dc:57:03:26:dc:8c:c0:62:d2:01:37:a8:bd:
         e1:7a:3c:f3:ca:ca:dd:e8:2b:88:75:a2:67:95:5a:66:81:6e:
         b9:4a:64:12:55:5f:59:2d:82:d3:25:3a:9d:eb:47:79:5f:c0:
         b1:d1:e5:14:54:6d:8f:8f:d6:3e:56:0d:7f:8e:cb:bc:ff:a4:
         a8:84:dd:53:4c:39:5f:a7:27:07:be:69:a8:25:49:13:4b:7e:
         15:64:a1:ee:94:67:5a:20:f6:cc:61:a9:71:51:50:0c:76:7e:
         d5:f4:3f:12:dd:44:98:e7:0a:01:87:53:2f:cc:2b:b3:46:ea:
         6a:0d:87:ae:99:9b:de:fe:c0:58:2e:2d:6d:87:dd:00:fc:56:
         16:6d:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:40 2024 by rpki-client on console-fra.rpki-client.org