Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/33371191-6931-3306-88fe-53da7dd71a42.roa
File:                     33371191-6931-3306-88fe-53da7dd71a42.roa (raw, json)
Hash identifier:          X+IPD9zgH01e9Nrvk/JOQUTYa7h0Fh7rsnGbCQBxFCE=
Subject key identifier:   EF:3F:22:A0:57:4C:BA:E9:91:7E:09:B2:C6:BA:4E:CD:5A:E1:DD:B6
Certificate issuer:       /CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
Certificate serial:       010D0C9F432858472C65DECB1B6FFFC3495CB6A0
Authority key identifier: FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/33371191-6931-3306-88fe-53da7dd71a42.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     140902
IP address blocks:        23.247.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:de:cb:1b:6f:ff:c3:49:5c:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=780d9ee5-914a-4088-b25a-f51ee8683e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:16:c7:ef:49:61:41:55:66:e1:1d:81:af:
                    05:70:29:f6:de:e1:7a:64:5f:a1:3e:2e:16:0f:e2:
                    19:99:dc:cf:18:68:da:7d:50:8b:58:28:21:7e:ef:
                    84:70:96:65:5d:25:0f:5c:a2:a7:8c:37:a4:e4:b4:
                    fc:9c:79:62:6a:97:40:03:1b:01:59:68:c3:f0:bf:
                    cf:0e:01:fe:20:00:1a:96:4e:2b:9d:e5:12:69:47:
                    f6:18:7a:f8:f8:c9:07:17:90:60:55:dd:5d:3f:1d:
                    b7:7c:a8:23:32:93:b7:34:17:b4:78:5d:bd:34:be:
                    e4:4e:9d:79:b9:b7:42:4c:b5:cf:68:9c:23:e8:7d:
                    44:0b:43:8c:74:7c:b0:1c:15:c8:56:31:21:b4:90:
                    d1:84:44:f5:56:a8:db:ec:48:db:3b:a7:e4:c3:20:
                    fb:98:7d:96:07:db:f0:47:f6:81:b4:4f:26:aa:32:
                    2c:3c:06:cf:56:47:e9:3e:8a:43:cb:92:a9:d1:1a:
                    3a:93:ef:ee:1d:6c:d3:2f:73:76:38:2c:00:0e:15:
                    88:60:67:dd:d8:e0:46:3b:4c:89:f9:0f:6e:b6:d5:
                    3c:b9:a5:3e:21:c3:8d:6a:b0:41:d4:ec:bf:05:4b:
                    37:59:8a:1c:49:37:80:f0:02:9d:29:8f:9f:4f:45:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3F:22:A0:57:4C:BA:E9:91:7E:09:B2:C6:BA:4E:CD:5A:E1:DD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/33371191-6931-3306-88fe-53da7dd71a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.crl

            X509v3 Authority Key Identifier:
                keyid:FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:da:14:64:df:49:48:79:75:a8:ff:b8:df:91:39:c1:83:15:
         d4:25:1a:f6:3f:01:b4:9a:c6:36:2b:aa:2f:17:0e:9f:ec:45:
         8f:8a:ef:00:b8:cc:f6:cc:f1:8d:74:01:8b:e7:da:91:d2:d9:
         cf:52:83:9c:bb:e1:82:93:67:f4:bc:b4:11:91:62:90:50:8b:
         25:46:d8:56:10:9a:6a:8b:71:78:cd:88:0a:b0:e5:45:42:14:
         a1:76:2a:b5:b2:db:1e:d5:3b:cc:d9:58:72:3c:9d:c5:da:99:
         27:a0:fd:4b:a2:b5:60:ad:a2:bc:5d:d1:b8:63:e2:0a:1d:1b:
         8d:18:b3:3a:4d:48:dc:b1:14:25:b1:d3:79:a1:f4:de:d5:8c:
         52:78:87:0b:c0:9e:92:ea:79:1c:d8:05:cf:b8:e1:aa:89:79:
         5b:ef:f9:e8:38:18:33:e2:bd:25:b5:21:24:2f:91:f3:3c:e1:
         ed:6e:19:50:3b:a1:93:92:b0:9a:1b:c3:56:a4:3f:77:cd:90:
         57:57:b1:b0:bf:04:a1:9a:eb:9f:6e:cf:8e:27:3b:ce:a3:48:
         29:b7:e3:bb:76:6c:34:39:5c:a2:45:e5:98:e0:7e:1f:45:34:
         5b:02:be:11:66:c8:83:70:aa:04:30:3f:c7:7c:b4:22:6b:d8:
         b7:05:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:38 2024 by rpki-client on console-fra.rpki-client.org