Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa
File:                     67cd331c-0eea-3d40-96d5-7acc007b8867.roa (raw, json)
Hash identifier:          dgYxxh4xpvHR5MwkbpkMdDyiXBFW66izj8B5ZpS1C4c=
Subject key identifier:   7F:A2:4D:38:30:87:8B:EC:4D:0C:B4:37:E8:D6:61:41:49:32:51:FC
Certificate issuer:       /CN=822f9974-af88-4d0b-a65f-065fdd26c645
Certificate serial:       010D0C9F432858476C9DBCF8FCBDAA9564B53700
Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     58061
IP address blocks:        23.247.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:bc:f8:fc:bd:aa:95:64:b5:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=779f0416-bda5-4777-b9d6-2e99f041c401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:bf:2f:6c:7d:f1:f6:d7:d5:eb:9f:f1:fc:
                    d2:2a:88:20:9a:0c:49:38:3e:73:31:20:d2:6c:31:
                    c3:8c:29:90:a0:2f:38:3d:fd:f6:1c:85:12:a9:26:
                    db:22:ec:84:70:d0:9a:b2:12:7e:dc:42:57:a5:2d:
                    5d:a8:ba:4a:27:58:c4:02:8b:24:8a:7f:88:50:87:
                    27:55:e3:6e:0d:0c:58:a3:08:66:05:18:6a:62:5a:
                    cc:30:d6:e1:63:e2:3c:54:69:03:76:9d:18:51:d6:
                    fd:cc:b2:9e:dc:a4:16:32:5f:04:81:3a:06:d6:44:
                    69:b8:36:23:04:78:2e:e4:18:50:92:ff:c4:ad:f0:
                    2f:58:9e:11:b5:37:37:7a:10:14:2c:ae:d6:77:45:
                    8e:93:bd:d5:24:bd:09:02:e9:e3:dc:01:fd:85:a1:
                    5d:53:fc:1a:fe:89:3c:c4:66:ca:60:f8:65:a6:af:
                    fc:4c:36:9e:02:71:92:13:34:01:be:dc:82:81:52:
                    e5:a0:9f:98:bc:83:8d:a3:47:c5:dc:1a:de:09:fd:
                    24:b9:2e:b1:17:96:6c:2a:cc:d5:1e:5a:24:8f:24:
                    b0:fe:92:cc:97:78:2f:b8:4b:87:13:9d:38:3a:54:
                    5b:97:a6:62:5b:43:9e:e7:25:96:99:64:df:93:6e:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A2:4D:38:30:87:8B:EC:4D:0C:B4:37:E8:D6:61:41:49:32:51:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl

            X509v3 Authority Key Identifier:
                keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:69:36:68:7d:53:b2:40:34:f1:40:18:68:fd:09:19:ea:90:
         b2:99:65:b8:20:ab:a8:47:69:72:92:65:cf:81:e2:ea:f9:85:
         51:87:50:a7:1e:8d:3c:ba:0b:27:ea:dc:21:94:a5:56:77:cf:
         da:a1:97:ef:c9:98:16:15:91:02:6c:eb:da:71:72:de:c6:1b:
         c7:bd:fa:ee:65:52:be:6d:67:53:8f:28:8c:0f:2f:c9:5c:c5:
         51:dd:b0:01:17:d6:c8:7d:ab:e1:8f:a1:f2:77:2c:18:de:5c:
         eb:97:9f:0b:2b:80:8a:19:b3:27:ac:ca:14:a6:e0:b2:b3:6b:
         73:98:99:97:7c:1a:13:3b:76:e3:c6:d5:7c:48:eb:5f:9f:31:
         de:b9:29:9e:ed:d1:94:f7:4a:e8:e8:33:fc:31:8a:15:63:0f:
         ae:31:fb:6f:e5:91:70:58:d6:72:9d:49:d6:e2:71:26:fe:a4:
         07:64:a0:e7:26:dd:d2:71:b9:9d:08:60:27:08:2a:a8:89:e3:
         6f:87:84:7a:ab:4c:87:22:e5:2d:be:3c:89:e7:28:26:00:7e:
         c7:e6:3e:d2:12:d5:3a:40:f0:98:6e:7c:93:85:2e:17:55:62:
         a3:00:f4:9e:d6:5b:9f:bf:4d:bf:6f:ec:6e:4a:27:11:41:5c:
         b6:28:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:05 2024 by rpki-client on console-fra.rpki-client.org