Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/de1f69d6-5de2-3fc0-af99-49dcab5deeca.roa
File:                     de1f69d6-5de2-3fc0-af99-49dcab5deeca.roa (raw, json)
Hash identifier:          TngkqSCaGvZ1qCIyA0sX5RCYtCuZ7zlFx9fL3nvsf6Q=
Subject key identifier:   22:82:15:8A:D5:5A:F3:AB:C1:88:F4:01:71:74:30:C9:97:1E:98:3A
Certificate issuer:       /CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
Certificate serial:       010D0C9F4328584561286BEA4DC91F15958E3AC0
Authority key identifier: FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/de1f69d6-5de2-3fc0-af99-49dcab5deeca.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     16509
IP address blocks:        23.247.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:6b:ea:4d:c9:1f:15:95:8e:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=c1a170e1-c14d-45bb-b88e-65156d6bad67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:22:b5:80:63:ed:71:66:f8:b5:9a:a0:88:
                    80:cb:98:f8:35:f9:b4:31:df:da:5c:a7:3c:87:d5:
                    19:88:8f:5f:c5:ab:6c:eb:44:87:31:fc:be:ed:3a:
                    f9:3a:4b:a7:ab:ec:54:bb:45:ab:01:79:cc:89:69:
                    7a:ac:be:9f:e3:db:dd:09:13:81:42:d2:1f:99:41:
                    ce:92:7b:30:3e:25:cf:43:d7:f2:36:3e:e3:3f:c0:
                    ed:45:fe:33:92:2f:f6:cd:d9:8e:36:cf:7c:37:a7:
                    19:6b:e0:c6:0c:78:80:f0:7d:8a:b5:b7:54:98:77:
                    67:93:6f:e8:c8:e4:6e:d4:69:4d:ff:cd:54:f2:1a:
                    77:86:47:ef:10:a1:73:8b:0e:fe:c7:6d:63:7f:e7:
                    fb:2d:b2:40:f8:3d:b2:ab:13:22:f2:19:f1:47:94:
                    17:76:5f:a0:ac:75:29:11:29:01:d2:c9:15:63:c6:
                    d0:cd:f3:07:df:d9:80:da:5b:ed:aa:9a:3b:7c:a7:
                    52:96:c4:ae:6a:b8:9f:06:5f:1e:4f:98:8a:26:c9:
                    26:40:82:bd:25:ce:45:b1:23:64:41:0a:d6:67:e8:
                    e7:d6:eb:67:24:d6:64:2e:58:eb:41:88:31:37:f4:
                    8c:83:ec:56:f0:07:17:2f:03:da:4d:4c:d4:fe:93:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:82:15:8A:D5:5A:F3:AB:C1:88:F4:01:71:74:30:C9:97:1E:98:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/de1f69d6-5de2-3fc0-af99-49dcab5deeca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.crl

            X509v3 Authority Key Identifier:
                keyid:FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f5:8d:f7:e3:d2:2a:0d:5b:31:66:39:b6:d8:77:87:0a:e4:
         4e:a2:99:0f:92:18:dd:07:35:db:c7:cf:8b:df:4a:27:ce:e5:
         e1:2a:ed:23:03:3e:b4:8c:e1:21:e6:c3:10:4f:87:1c:db:04:
         79:8c:9d:58:3e:f5:0a:c2:eb:92:f3:2e:bd:2d:3a:43:50:62:
         f7:87:97:86:4c:ba:56:4a:72:97:ca:08:35:c4:71:0c:88:5a:
         15:f0:78:b2:35:68:d2:7d:1d:22:90:e3:a9:b6:22:d1:92:2f:
         2d:57:b4:7e:b2:c5:29:13:91:77:e6:6c:0f:ca:26:79:70:24:
         6b:76:be:0c:65:07:c9:d0:e9:a7:69:bd:4a:16:40:35:61:9a:
         31:29:a4:98:5f:2d:7c:f8:7d:93:fe:ff:fe:66:26:9e:ea:88:
         d1:b2:06:73:68:80:d4:f6:0f:2f:29:4c:15:38:cd:52:fd:51:
         e2:2c:31:a3:3b:de:93:67:a6:c4:65:21:78:8e:6e:05:84:1f:
         f4:81:ae:0a:d8:46:ad:7a:d3:31:80:8a:a6:02:7a:af:47:b4:
         de:e6:d8:fc:9d:65:d7:56:08:bb:30:9d:49:6c:42:33:79:8d:
         f2:b4:90:41:5c:a6:cb:5f:56:60:f2:9c:4d:f0:67:9b:52:3c:
         4c:c8:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:56:27 2024 by rpki-client on console-ams.rpki-client.org