Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/68b3d500-685c-3e96-9137-6a74b385d1b6.roa
File:                     68b3d500-685c-3e96-9137-6a74b385d1b6.roa (raw, json)
Hash identifier:          fyuixNUX7ktJiyQx16yg2LNPi7uTs5HgGtQwWFGSa0c=
Subject key identifier:   8E:BE:7B:18:5A:13:44:14:0E:09:54:38:CF:03:F8:BA:AF:A6:C3:FA
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F43285847ED24BA87CD3F9AD10A6AD300
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/68b3d500-685c-3e96-9137-6a74b385d1b6.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     399820
IP address blocks:        23.146.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:ba:87:cd:3f:9a:d1:0a:6a:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=ef13fabf-8262-4dbd-86b0-3bda08b1f706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:52:52:a6:dc:aa:68:10:1f:e3:8f:59:b4:
                    4a:70:27:f6:72:83:25:bf:2b:cd:5f:39:cb:69:7c:
                    a0:3e:a6:cb:42:a9:b3:00:66:ff:a9:a4:51:f9:08:
                    86:4e:8a:c1:95:5e:0f:e4:c9:5e:5d:48:32:60:49:
                    77:39:a6:a9:27:a4:9e:d8:ed:be:3e:e6:28:55:be:
                    b5:82:4b:74:35:ce:e4:d3:dd:ec:99:61:3d:37:f0:
                    57:dd:1b:47:41:c8:24:be:9d:e9:88:9d:27:80:af:
                    3b:12:e1:8b:3e:ee:23:f6:96:c0:ff:85:b3:5d:15:
                    23:9c:cc:a8:e0:58:b2:97:7e:4d:51:60:1c:aa:a4:
                    18:d6:da:b8:7b:7c:2f:79:22:a8:bb:7f:cb:51:a4:
                    96:20:27:10:ff:45:5d:dd:8c:29:9e:89:06:44:78:
                    06:98:36:ff:28:0e:cd:c8:9b:e4:6c:b7:a1:9f:82:
                    31:16:56:33:39:19:37:7c:6d:5d:ec:1a:7b:d5:f0:
                    63:51:c1:26:08:ec:f0:0c:3d:43:57:81:2e:6c:80:
                    ad:15:da:ed:c1:26:20:00:8f:1c:d0:52:50:a8:8c:
                    e3:3c:e2:06:e4:bf:c3:12:5c:30:3c:5c:c1:b7:2f:
                    24:00:fe:29:1e:7a:4b:1d:56:26:59:90:32:85:9f:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BE:7B:18:5A:13:44:14:0E:09:54:38:CF:03:F8:BA:AF:A6:C3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/68b3d500-685c-3e96-9137-6a74b385d1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2b:69:c5:1d:e1:41:c9:59:1a:fb:f0:ba:7d:1b:2c:1a:00:
         39:e6:b2:24:a1:bd:93:c9:a1:aa:07:88:83:52:d2:95:f2:eb:
         c8:a7:d9:cb:59:d7:d6:c1:b9:6d:66:d1:6b:22:6a:c9:56:da:
         d0:b8:48:6d:e8:8f:2d:b2:89:07:9f:88:58:43:2b:42:37:12:
         e2:04:9f:04:d5:67:21:9e:e6:cc:45:3e:79:f4:5f:6a:0b:34:
         34:98:6c:bc:ed:ec:56:61:d9:d6:bc:ef:f6:28:73:61:a6:3c:
         52:d9:b1:62:90:26:40:23:c4:10:e8:81:18:15:11:42:26:cf:
         9d:17:0f:6a:a9:93:c6:46:97:9c:0d:21:85:09:fa:b6:17:f0:
         ae:94:83:2a:ea:0d:5f:3f:7e:5e:70:7c:78:b1:1a:04:76:bf:
         93:fc:21:77:ae:e5:e7:05:37:59:c9:66:3b:51:0d:33:ce:cc:
         a7:58:4e:f1:c7:76:43:b3:7a:e8:22:51:ee:c3:e1:49:db:0e:
         93:44:1b:41:b4:04:3f:19:4d:90:c5:59:82:6f:6c:60:c3:2f:
         51:45:70:83:88:ee:dd:0b:23:83:7b:9f:ab:39:52:d2:de:59:
         1d:13:8f:a6:94:87:61:38:9f:6f:df:6e:06:bf:02:2c:2d:55:
         2a:c4:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:30 2024 by rpki-client on console-fra.rpki-client.org