Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa
File:                     d859550a-458f-3e37-bf97-e6cd52ef8427.roa (raw, json)
Hash identifier:          frI4Ek/dY3mTjt+qKSBvWAASyPu2uSjgHYQ1eofG/10=
Subject key identifier:   24:39:19:A0:A3:CD:84:DA:8C:ED:5B:3E:50:23:42:DB:DD:F6:63:09
Certificate issuer:       /CN=a5e2d89d-6269-4405-9578-836517825b32
Certificate serial:       010D0C9F4328584793B1181A16C74DCABE2F7D9C
Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     13347
IP address blocks:        67.223.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:18:1a:16:c7:4d:ca:be:2f:7d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=7301f085-3d64-4a66-b486-3d593fb48ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:29:08:78:2a:37:57:d2:5c:4c:15:52:c3:
                    5c:c1:35:78:07:6a:67:57:1f:d0:7d:3d:ba:5b:35:
                    fc:1c:20:b6:af:b7:7a:ef:01:4b:c1:cf:ae:e3:41:
                    92:a1:f6:fc:fd:6a:64:26:e3:b5:56:e4:fe:18:e9:
                    9c:ba:6b:69:cf:82:17:66:2d:8a:b7:6d:9b:82:a1:
                    dd:19:41:c2:10:41:a0:e6:4e:43:dd:c5:39:da:c6:
                    4b:ce:fb:a8:03:39:6a:c2:8e:2a:e7:35:6a:d8:77:
                    bf:70:99:10:8f:9f:bb:8b:a5:88:0c:22:d5:2f:df:
                    01:be:eb:92:28:d9:74:2f:4f:3d:b2:28:23:0c:c7:
                    65:74:4d:ea:26:35:93:8d:9b:64:4e:b2:79:55:41:
                    37:bf:41:06:c0:67:87:6b:1f:a1:4c:87:9a:83:2a:
                    0c:7b:32:cd:86:3a:50:b1:a9:da:d8:f2:41:bd:f8:
                    9b:4f:c0:a8:00:ee:cd:bf:e6:97:ff:74:fb:d8:52:
                    4b:d3:1a:94:c7:61:a8:68:a8:d4:07:88:97:cd:82:
                    36:22:df:94:91:1c:f5:09:81:f8:13:b6:0a:79:82:
                    0d:d9:f9:77:8d:59:ae:41:82:fe:4c:ee:e5:ff:5d:
                    d8:14:fd:57:4d:a5:01:09:4e:62:7e:72:a3:d1:43:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:19:A0:A3:CD:84:DA:8C:ED:5B:3E:50:23:42:DB:DD:F6:63:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl

            X509v3 Authority Key Identifier:
                keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.223.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:d8:bc:40:7b:45:7a:79:ad:cd:d5:a8:be:f8:24:21:44:
         22:d9:ea:a5:ef:63:fa:d0:54:a0:e3:b4:a6:b7:8b:22:35:bf:
         4e:8f:58:1c:0e:fb:b6:10:71:a0:87:e2:80:65:2d:f0:77:fb:
         c4:65:f6:49:c1:fc:8e:c1:20:2a:e1:c5:dc:5b:f2:67:98:12:
         40:92:ea:43:fb:a0:eb:a3:0f:4c:2b:7d:ba:de:96:fb:cf:fa:
         3b:90:19:ed:6f:a5:6c:3b:23:32:b2:c8:e5:c8:f5:cf:e2:b5:
         6a:98:1b:a4:ac:8f:7e:f6:d5:2c:a7:ec:38:37:65:46:37:91:
         ba:38:42:ae:b3:02:e9:4f:cd:ab:c7:d9:37:84:eb:9e:c3:64:
         28:d6:2a:0e:e3:ff:93:10:60:98:7b:10:68:fc:35:18:b6:c5:
         e4:27:8b:aa:1d:c1:9c:4f:8f:fc:d8:3a:cd:79:29:2e:17:95:
         84:f3:65:d2:b6:db:d1:19:1a:d1:2a:37:0a:04:99:46:9a:37:
         a3:34:e0:cd:4e:40:95:be:80:11:1b:f4:03:88:84:f2:29:fc:
         da:cc:a9:13:80:36:52:fe:cf:52:35:e6:ea:44:3a:08:dd:3d:
         b0:66:3e:98:bc:8b:51:ca:19:d4:b4:85:7f:e9:6b:a3:34:be:
         01:ed:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:22 2024 by rpki-client on console-fra.rpki-client.org