Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa
File:                     c247b3ff-276b-3115-bfe5-d2984aaf0719.roa (raw, json)
Hash identifier:          Kvqfsa4nhpgMWCId/pdBpvfsRSTLNYlc/kmWOSN5a4Q=
Subject key identifier:   C1:3F:DF:11:23:BE:C3:10:F5:33:48:3F:43:3A:22:78:B5:9C:D0:E7
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F43285845ECBE834B3564B39285FB5940
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa
Signing time:             Sun 19 May 2024 13:00:33 +0000
ROA not before:           Sun 19 May 2024 13:00:33 +0000
ROA not after:            Sat 17 Aug 2024 13:00:33 +0000
asID:                     32595
IP address blocks:        23.172.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ec:be:83:4b:35:64:b3:92:85:fb:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: May 19 13:00:33 2024 GMT
            Not After : Aug 17 13:00:33 2024 GMT
        Subject: CN=7c8df4b4-7765-4ee8-8e03-1210b0c5d5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:f8:0d:60:26:62:1e:5b:ae:35:e7:71:96:
                    b0:61:2a:97:75:6b:8e:a8:41:10:b1:21:70:86:23:
                    de:a2:0d:f2:34:0a:10:63:a3:3d:42:a4:55:b8:55:
                    3b:15:61:f5:6c:e4:f9:fd:34:03:c2:34:49:fe:b0:
                    c8:34:09:06:90:eb:9f:f2:27:8a:46:c5:bf:12:e2:
                    d8:0d:f1:3f:a0:98:8d:fe:a2:eb:18:b8:86:e1:08:
                    40:75:4f:0a:f5:97:35:d9:2e:25:48:dc:bf:4a:44:
                    c4:2a:ad:2b:79:9d:a7:1d:27:a0:f3:a4:fb:e3:aa:
                    61:78:d5:36:b0:9d:9c:93:7e:d2:ce:2b:3f:e8:ee:
                    76:45:6f:6e:32:e3:fd:99:10:de:95:78:d5:ba:0e:
                    a6:91:b4:c3:9c:42:9a:53:b1:4a:0c:19:61:06:86:
                    69:6a:47:e8:55:47:b1:5f:3f:94:4a:c3:51:9d:6a:
                    a8:19:d4:78:d0:28:99:76:f4:d5:86:e6:64:f4:b7:
                    c1:67:8c:e1:0c:36:00:95:e8:b6:2a:cb:39:e9:15:
                    5e:c3:8f:57:a0:f4:2e:9f:a4:e8:1c:37:58:38:3f:
                    c2:06:b1:2b:8f:ad:d5:5c:ad:2e:72:af:de:c9:88:
                    83:88:0f:88:5f:17:4c:b8:90:99:d4:6a:15:db:e3:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3F:DF:11:23:BE:C3:10:F5:33:48:3F:43:3A:22:78:B5:9C:D0:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:92:02:66:e2:3b:fe:f2:cd:5e:02:bd:57:7c:a6:72:77:d4:
         ef:26:b4:41:94:27:ed:bb:3e:27:f0:ef:6e:ac:1c:1d:fb:c8:
         2a:1a:60:0c:79:22:88:d1:96:4f:85:b6:ee:bc:51:ea:51:76:
         00:7f:c5:12:80:5a:62:70:a4:69:56:f0:81:e1:ec:3d:64:18:
         aa:8c:15:e8:69:c2:c0:f0:32:82:00:e1:f1:eb:e1:67:f3:d5:
         d0:7a:87:0f:99:c2:35:74:28:ff:fc:90:30:dc:c0:a6:c5:b7:
         28:3a:6e:05:f6:0d:d7:a8:8c:72:05:c9:44:34:45:65:5b:ba:
         d9:b5:c1:33:f5:6f:ac:d0:72:fc:fd:14:13:25:1a:55:08:11:
         c9:56:b1:60:59:33:a6:8d:ef:53:ac:74:fa:33:2e:66:f7:7e:
         74:2e:15:df:d6:f2:fb:bd:a1:64:65:ab:51:50:e3:bc:64:b4:
         63:66:30:49:39:6f:a3:a0:03:09:bf:7a:2a:20:d6:71:b0:c9:
         97:87:c4:7a:44:dc:6f:86:39:c3:9e:a6:d4:8d:e3:25:8a:85:
         27:83:17:f2:b7:d1:25:ab:26:b4:0e:4f:d4:77:36:5a:0d:d6:
         10:01:e7:91:4d:6e:30:e6:08:2e:92:4b:0f:b1:43:c4:02:df:
         93:19:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:12:07 2024 by rpki-client on console-ams.rpki-client.org