Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa
File:                     34ea7717-0935-34ec-8511-5e5273f1e4d9.roa (raw, json)
Hash identifier:          UITFupeMLGIwgyPXwyrCBjkndvWi6kP+cgq8Vhi8tbA=
Subject key identifier:   14:98:8D:09:B2:E8:4B:64:F5:4E:D0:8C:D7:27:3C:E2:F3:01:5E:67
Certificate issuer:       /CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
Certificate serial:       010D0C9F43285847D40496BC368404029AFF9840
Authority key identifier: F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     211392
IP address blocks:        23.167.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:96:bc:36:84:04:02:9a:ff:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=c85b9b4b-e496-4721-b7e9-d5b66baaf96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:b1:db:47:39:47:7c:22:06:10:86:0f:2b:
                    e5:ee:43:d8:f9:c7:e1:6f:78:17:29:df:b2:6e:b0:
                    67:37:3b:28:f6:a5:d6:2d:ee:81:55:b0:90:d2:93:
                    54:9e:32:a8:b3:3a:62:be:13:0a:49:92:ec:82:81:
                    f2:c8:84:1e:d2:1c:85:20:df:e4:c6:b1:30:b5:d0:
                    f3:bf:c9:b3:cf:d9:16:c4:e5:89:b2:0c:9c:42:85:
                    f8:e5:f1:98:d0:77:fc:c2:d0:e4:d8:5f:1d:1f:35:
                    3e:15:b7:a6:30:d0:bf:b0:2c:95:51:86:28:fd:b6:
                    19:84:ff:3e:73:11:7f:df:20:8d:63:2c:7d:40:a0:
                    df:5f:fc:d2:fd:4f:d8:3f:36:83:1c:f4:4a:1d:97:
                    7d:46:69:c3:3a:49:4a:41:69:b4:ca:b2:a2:19:29:
                    e4:1b:34:52:f5:b8:ba:0f:db:c6:77:78:9d:04:07:
                    7a:e6:25:86:b6:f4:61:08:60:17:30:6c:85:28:47:
                    30:ea:a2:be:da:b7:1e:b0:a5:37:ae:57:9c:8b:64:
                    9c:61:6b:0d:95:17:23:f4:5a:49:9f:50:ac:86:a5:
                    ed:02:4a:db:f9:25:ff:32:75:a4:bd:e9:21:c0:4b:
                    84:97:4f:83:71:85:2c:81:09:80:6e:9a:3d:d4:cd:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:98:8D:09:B2:E8:4B:64:F5:4E:D0:8C:D7:27:3C:E2:F3:01:5E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/34ea7717-0935-34ec-8511-5e5273f1e4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.crl

            X509v3 Authority Key Identifier:
                keyid:F0:FC:B9:9D:2D:67:D3:74:6C:74:D4:FD:29:5B:D7:48:1E:6C:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3421c74c-ad0b-43b9-9ea3-bdac4bf6bc7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:13:48:d8:1e:85:eb:f9:02:8d:8d:0e:f4:75:7b:49:6b:
         38:8c:f3:ef:84:04:d9:16:c7:5e:f1:44:92:d9:f0:65:ba:36:
         72:69:62:bd:d1:a1:8c:80:3e:15:d5:84:7d:88:f8:35:9c:2e:
         98:bb:1d:a3:16:7e:7e:c3:3b:bd:66:5f:16:fc:37:2e:31:d0:
         dc:bb:b5:64:19:d9:64:85:ac:3a:5a:12:a0:d0:70:72:21:da:
         9f:42:b7:3e:f5:57:bd:9a:31:28:2e:78:98:0c:a7:6f:d7:0e:
         71:bf:ed:11:9a:ee:c2:b5:ba:ba:03:b4:f8:1f:48:60:8d:d1:
         06:10:38:f6:6b:cb:b0:29:14:e2:a8:30:f5:74:04:b8:85:3a:
         7d:c0:6d:bc:b6:51:9b:1e:40:17:80:68:6f:fa:ec:02:7a:d2:
         15:a3:1a:ce:80:6a:69:67:22:2a:16:58:10:da:cf:cf:a9:73:
         e9:59:1a:ee:f7:e2:15:50:01:87:7d:35:5c:df:02:4b:5e:cc:
         01:7f:83:c2:6d:39:f8:3b:7d:3a:5a:e3:1a:c7:13:f1:26:80:
         0c:44:a5:b3:a6:99:e8:fd:d3:1b:97:b2:94:6f:be:1f:df:c0:
         02:90:09:a8:58:30:e7:47:e8:1c:77:9e:ba:7a:0d:86:20:e4:
         1a:77:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:40 2024 by rpki-client on console-fra.rpki-client.org