Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa
File:                     1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa (raw, json)
Hash identifier:          jiKcDkto4s7aLtVWVg3Ylb9YO2wdvR0/IC78rls47HE=
Subject key identifier:   E9:51:4B:BB:66:6D:74:A1:57:17:1B:81:7F:89:7F:9F:F4:55:37:BC
Certificate issuer:       /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
Certificate serial:       010D0C9F43285847D40496E3C8BC06D8E9983C00
Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     211392
IP address blocks:        23.170.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:96:e3:c8:bc:06:d8:e9:98:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=395234c1-a631-4a66-ad3e-5dfd69043c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:22:06:f0:7d:67:b4:c0:44:d6:59:c9:1b:
                    00:6c:c4:cc:52:26:78:65:2f:bf:b1:9f:2d:5a:34:
                    02:9b:89:c3:1d:dc:17:e7:3c:29:cc:a7:fa:4f:37:
                    dc:82:0a:c6:f3:98:2f:e3:2d:98:30:c4:42:2d:49:
                    2a:44:df:a4:ba:36:53:b5:ad:88:49:8a:23:2f:d4:
                    cf:b7:f8:ec:29:a4:0c:4f:a2:7e:c7:a7:21:30:81:
                    f3:16:ba:ff:39:03:87:00:20:f6:e1:1b:5d:45:f0:
                    0e:2a:4e:10:aa:ef:7c:f0:04:57:e4:62:d2:25:a0:
                    dc:67:e3:09:aa:90:26:a6:84:c1:95:0f:5e:0f:23:
                    05:25:c3:6d:81:1d:d7:51:3b:82:96:4e:6c:63:59:
                    26:c2:99:6e:a7:e8:23:96:a9:56:5e:94:64:61:bc:
                    90:8e:a9:d5:47:a6:b9:0e:dd:f8:e1:14:5c:5b:28:
                    a7:1f:6a:10:81:e5:c8:64:76:70:9b:dc:49:fc:e1:
                    6e:3b:54:4f:5e:f9:af:34:72:aa:b3:ad:68:d7:e9:
                    e9:bf:d6:fa:a0:19:48:36:f4:f1:dd:c8:7f:15:e1:
                    89:59:f0:71:ac:e9:ec:14:3b:b2:6f:63:41:a1:a2:
                    68:f6:3c:45:1c:83:ed:6d:f3:32:f7:93:77:f4:1b:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:4B:BB:66:6D:74:A1:57:17:1B:81:7F:89:7F:9F:F4:55:37:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl

            X509v3 Authority Key Identifier:
                keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:02:7a:3a:84:c4:eb:ee:fc:fd:4c:aa:d4:91:65:4c:ae:
         c6:e6:6f:fc:c7:82:98:23:40:95:71:b7:b4:5f:1a:c6:d3:27:
         ee:ae:3f:60:68:d4:57:dc:4f:a5:54:78:e9:7e:6f:eb:a5:25:
         b6:80:b2:8a:f2:aa:e9:68:cc:f4:e7:38:0c:ac:38:ca:8f:a2:
         f9:c1:9d:61:e7:34:b6:0a:12:29:1f:d1:71:7e:e7:74:93:83:
         c0:cc:32:3d:73:ea:35:68:d3:bb:cb:34:b5:f9:0d:1a:70:5b:
         88:23:b8:63:66:07:ea:bb:19:e2:55:46:d1:8b:4f:4c:f7:ec:
         e6:7e:7e:25:86:1a:af:48:f4:da:72:d8:25:88:72:8a:28:ce:
         58:bc:c5:c5:c4:62:4a:b9:3b:f3:ab:d3:cc:9b:39:e8:69:b6:
         87:fb:cb:26:71:9d:8d:cd:67:94:03:40:fa:c6:b8:e3:31:80:
         0c:c3:7d:d8:e6:11:a2:33:65:59:b5:83:90:6b:e1:aa:76:b9:
         ac:e0:42:e4:71:41:50:5d:0f:2c:78:3c:eb:6e:55:d0:ec:11:
         c6:d8:0c:55:9f:a2:2d:1a:ab:f5:bf:d5:1f:eb:ed:49:04:38:
         a0:a1:5e:6d:1a:6f:cb:e8:99:09:49:94:6b:9c:0e:fb:bf:83:
         fa:40:8c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:54 2024 by rpki-client on console-ams.rpki-client.org