Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa
File:                     9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa (raw, json)
Hash identifier:          Ox26m+zt1bpxxYbPM5HLEsDLm4pe7/RABnbhDHnaW58=
Subject key identifier:   F0:D9:C5:FE:06:D1:F1:7D:37:6F:66:EF:7E:66:8E:29:DD:C9:E6:0A
Certificate issuer:       /CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b
Certificate serial:       010D0C9F4328584774FBAA76B225A383A6553906
Authority key identifier: E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     63023
IP address blocks:        23.168.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:aa:76:b2:25:a3:83:a6:55:39:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=37358073-64ed-4bba-9c37-1664d4035700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:0d:45:54:5a:e0:49:52:a4:29:cc:d7:dd:
                    52:02:25:58:f4:d3:03:bf:79:f0:ef:76:9c:25:04:
                    f0:58:42:fa:97:f0:78:e9:23:b5:d5:63:6d:6b:42:
                    b6:5f:44:39:21:9b:a3:03:ee:fc:af:e7:91:7c:f8:
                    dd:31:ee:72:65:03:20:de:a4:df:0e:08:23:b7:41:
                    d6:88:4d:ff:dc:b1:bf:fe:a7:d3:b7:9c:03:50:26:
                    48:06:6a:04:12:5b:cf:b4:e1:26:71:56:62:b1:b9:
                    90:b1:2c:c7:5b:a3:b0:82:c7:ba:ea:79:d6:5a:39:
                    eb:ad:1b:a3:d2:6b:1d:12:18:27:1a:93:fa:55:2b:
                    25:a5:81:34:6d:1d:d1:f5:94:85:dc:66:8c:72:63:
                    84:fd:02:e2:13:ea:31:08:3d:01:c6:d0:63:79:ce:
                    fc:37:86:3e:e4:57:58:4e:b4:6c:6b:1c:e2:6f:f3:
                    d3:ca:6f:29:85:8b:52:33:f3:01:9c:0c:24:37:3e:
                    54:d9:11:cd:9b:6b:ed:38:f1:d8:ab:03:2a:68:02:
                    fa:6f:1b:50:c4:b7:ba:a5:0f:d1:f8:df:9e:8f:9b:
                    b1:53:a1:6a:b2:66:44:25:2e:f7:77:17:f7:2e:a2:
                    74:30:ef:0f:0e:73:a5:3a:7c:d3:92:59:f4:70:ad:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D9:C5:FE:06:D1:F1:7D:37:6F:66:EF:7E:66:8E:29:DD:C9:E6:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ed:ce:f0:5e:cd:65:fb:5e:83:7e:c9:98:15:3b:73:75:4c:
         06:2f:c6:2a:2e:be:7c:b2:54:92:37:62:59:01:fc:94:b4:83:
         55:9d:c0:1e:32:b6:c2:24:fd:2f:47:03:39:1f:01:22:51:c9:
         dc:f7:78:7c:74:d1:29:ae:4c:0a:13:64:cc:41:d7:d6:12:90:
         cd:1a:ce:6a:3a:c5:02:ea:0c:3a:33:44:b6:12:96:21:ab:8a:
         6c:f1:49:c5:7f:b1:fd:30:03:84:fb:ef:91:68:d4:c2:91:20:
         66:18:80:0f:b3:f5:70:95:b0:45:49:1a:9a:a4:21:bd:9e:dd:
         52:63:93:fa:07:4d:de:e8:2c:f9:be:6a:b0:6a:47:ba:ff:62:
         93:ed:50:be:35:74:05:bf:81:1b:8c:07:5a:56:ae:47:46:f1:
         e4:37:bb:6d:7d:15:70:4d:e0:32:89:60:87:d8:b8:9b:77:f0:
         3b:b8:5f:19:5b:eb:bc:0a:74:b3:71:dc:35:f7:2c:cc:12:2f:
         89:f6:3e:55:a5:a3:91:83:b0:11:d3:89:69:b5:7a:71:44:cb:
         c9:66:29:ac:a9:8d:d6:21:eb:07:34:06:e2:7a:f8:c0:b0:b2:
         c0:bc:6b:47:b8:82:cb:ad:84:5b:ab:7f:a0:4b:0b:61:37:e2:
         a7:19:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 21:29:26 2024 by rpki-client on console-fra.rpki-client.org