Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/9a92defb-887e-38cd-b9c7-39e18f624a18.roa
File:                     9a92defb-887e-38cd-b9c7-39e18f624a18.roa (raw, json)
Hash identifier:          rcijCFPhlyR9o7CMIbehrKmX8V75965BTW0mcHW6h40=
Subject key identifier:   C9:BB:23:D7:AD:D4:3D:61:C7:6F:87:6E:8F:23:22:C9:D5:99:AB:AF
Certificate issuer:       /CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722
Certificate serial:       010D0C9F43285847F584DC39D57CA42718CB2B58
Authority key identifier: 96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/9a92defb-887e-38cd-b9c7-39e18f624a18.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     46998
IP address blocks:        23.174.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:dc:39:d5:7c:a4:27:18:cb:2b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=a8fbbee4-16a1-40c3-9f0d-176f0d64bf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:45:7a:b1:5e:a6:96:e8:a0:9d:67:91:4f:
                    8d:43:be:6c:d1:21:9e:9b:58:35:f7:90:d6:91:38:
                    02:17:6c:6f:f1:51:78:dc:a9:6e:47:c5:ef:f4:bf:
                    e4:a2:dc:74:15:31:95:46:7d:3f:12:7f:cb:8d:a1:
                    f2:9b:c1:a8:32:69:ca:b3:9d:df:4c:7e:e7:27:4f:
                    5a:39:0d:c0:ce:cf:77:c1:32:12:d2:d3:44:e5:2e:
                    45:c7:79:ad:cb:c3:aa:19:27:ee:45:3f:0d:32:70:
                    2a:d4:21:76:11:7e:66:db:c2:d9:49:61:15:18:de:
                    d7:5d:1f:d5:d2:c8:cf:22:56:48:fb:bc:02:7b:05:
                    b4:a3:66:66:1a:54:6f:ba:2d:7b:a9:20:e0:2a:0f:
                    9d:84:33:5f:32:d2:ee:1a:9c:0e:ef:04:a5:1a:bc:
                    70:e8:8c:59:31:6d:4e:d6:46:c4:2c:22:76:93:e5:
                    cb:0e:6e:ce:da:e8:b5:f1:33:75:59:0e:e6:b0:4f:
                    20:25:21:bd:05:be:ea:a3:ac:f8:08:76:94:97:11:
                    93:10:9d:9c:a0:5e:e5:e8:bb:47:f6:82:7d:4f:d0:
                    6e:a7:cc:4b:86:19:77:cf:0d:94:bc:58:39:c1:1d:
                    e4:d0:56:27:88:ab:c2:dd:c7:16:c3:1d:3d:0d:57:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BB:23:D7:AD:D4:3D:61:C7:6F:87:6E:8F:23:22:C9:D5:99:AB:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/9a92defb-887e-38cd-b9c7-39e18f624a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl

            X509v3 Authority Key Identifier:
                keyid:96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:dd:b3:69:49:3d:20:b3:29:32:5c:13:ae:e9:38:26:88:
         24:3e:ca:bf:81:a2:eb:24:07:fc:7a:70:84:90:bf:2b:4d:07:
         f8:50:bc:65:2d:42:38:5e:e7:62:f6:4c:51:e0:53:f8:2f:b1:
         8a:00:0c:09:ea:2d:56:4e:16:b4:df:96:ba:98:25:6d:1d:6c:
         d2:09:96:f2:2c:1e:35:ca:38:a8:a8:32:e1:ba:9e:7c:60:1f:
         85:06:e4:3a:f3:c6:94:e7:75:35:eb:fc:99:01:36:fe:ed:6e:
         40:0b:d3:86:14:03:60:17:66:2b:15:ad:4b:48:18:4a:07:20:
         37:6d:38:d3:b6:fb:8a:ab:23:ea:5f:9d:80:dd:69:01:8f:1f:
         db:81:c3:11:da:92:e1:5d:39:7c:9e:0e:fe:eb:13:bb:7f:7d:
         76:70:86:1a:de:10:3f:78:88:f3:39:e7:30:46:ff:35:48:03:
         db:24:31:4c:30:7b:5c:47:de:6c:29:ed:8e:58:58:59:fc:10:
         1d:6a:76:82:93:69:55:30:0e:75:a8:1d:ab:5d:ec:1c:af:c3:
         78:74:36:dc:72:f1:52:76:e6:e9:9d:f0:92:f1:7a:a6:da:9c:
         8e:9f:a3:e0:e8:d1:f2:fc:00:88:c7:26:43:47:0a:a0:92:c8:
         d9:a4:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:58 2024 by rpki-client on console-ams.rpki-client.org