Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa
File:                     c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa (raw, json)
Hash identifier:          r2rlM4uePCEP0eXc6l/8KLe9zZEautKd+VYAyndGUqY=
Subject key identifier:   16:54:2A:91:3B:13:89:7C:B5:77:A2:28:98:7F:98:34:5A:59:24:70
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F43285847CD09F6673C564B73E91281C0
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     29802
IP address blocks:        23.179.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f6:67:3c:56:4b:73:e9:12:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=2440f721-8146-447c-813c-e61d749494f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:20:14:bd:fb:f5:15:81:b1:2c:f5:af:ca:f6:
                    ce:2c:a1:db:41:8c:11:1f:23:53:b0:97:7f:1d:17:
                    bf:29:8d:fa:81:78:62:b6:e7:21:42:b6:f8:84:64:
                    5a:7c:50:27:8a:7e:ab:fb:c0:8e:2c:a9:5d:45:6f:
                    8c:c6:f0:98:d1:12:0b:55:74:ac:72:11:22:f4:f4:
                    74:9f:39:1c:1e:03:83:3c:c9:5c:a2:4b:0e:df:be:
                    68:f3:aa:29:9b:5c:a8:34:1d:e5:b6:79:5a:d8:40:
                    18:8c:cd:c1:01:39:db:85:7d:ef:36:fc:77:99:7d:
                    a7:72:6f:cc:35:2e:6e:54:6e:bc:d9:ea:eb:22:88:
                    b3:e7:d4:e4:85:25:8d:3f:bd:ba:10:88:a9:9a:e5:
                    45:77:26:41:79:04:b0:bd:e2:58:62:c8:f7:01:17:
                    6e:38:5f:ad:aa:73:79:9c:31:0a:44:7e:ed:ce:63:
                    7b:d2:0d:08:2a:10:f8:ac:15:94:17:6d:64:63:31:
                    7d:e0:dd:b4:d8:67:36:ef:17:53:da:83:db:78:56:
                    f3:9b:a7:a1:57:8a:f8:42:bf:45:ee:32:65:22:41:
                    a2:72:71:44:68:7a:cc:59:3e:10:6b:98:30:a8:96:
                    49:82:0a:7e:1a:b2:19:a2:f4:2f:ca:fe:6d:c7:77:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:2A:91:3B:13:89:7C:B5:77:A2:28:98:7F:98:34:5A:59:24:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/c553e00d-4392-39ae-9ae5-0cc1f65b8244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:dc:95:90:38:e1:86:7c:b4:12:0e:14:ed:fc:b7:91:2a:2c:
         7e:cf:03:17:fe:60:15:c2:fe:86:c2:05:57:c2:bf:f0:d6:e2:
         3e:08:9b:59:0e:88:63:6a:a0:60:c0:be:e4:88:1a:ba:d0:61:
         44:cd:6d:b9:f2:b4:ab:ca:6f:38:66:05:c4:d7:fb:d0:ac:22:
         49:61:e3:3e:05:f5:ee:ca:fa:2a:40:21:c3:70:72:39:c4:a8:
         26:80:9c:04:85:ed:d9:bb:c5:c3:c3:08:e4:b3:1b:b4:08:f7:
         d0:0a:f0:b0:c6:35:16:92:9c:01:e5:b1:cb:77:05:63:60:17:
         d7:9c:ee:36:ab:a0:c2:8f:d6:7e:98:9b:42:21:97:e2:b6:ce:
         17:1f:90:6f:4f:49:e4:0d:62:7c:2b:1f:a2:21:c9:6e:87:f1:
         e1:b7:ca:e8:1d:18:05:30:f0:a9:04:9e:3f:0b:d2:55:45:35:
         24:8a:23:e1:51:6d:65:aa:15:b8:32:83:28:ac:1f:e8:23:cd:
         d8:8e:e4:64:08:7c:d0:d9:b6:be:19:be:57:1f:5a:75:7e:d1:
         02:e3:f0:88:56:50:d1:55:42:59:e2:47:2e:04:78:d3:50:1f:
         a9:79:3d:ff:c9:4c:d4:3c:59:27:d6:c1:32:7d:8e:17:60:3d:
         79:2a:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:46 2024 by rpki-client on console-ams.rpki-client.org