Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/7a8a8e49-9907-3dcc-a7ca-1471426166ff.roa
File:                     7a8a8e49-9907-3dcc-a7ca-1471426166ff.roa (raw, json)
Hash identifier:          EWAOLhKpnOuTrfFrmar4/elXPYOEEEG+KTOUDnlBIww=
Subject key identifier:   D7:3B:88:46:C1:A4:5E:FB:0F:8F:96:D7:77:38:00:BF:A5:92:B7:36
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F43285847E3EB4CE7C5DF919CAADA96C0
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/7a8a8e49-9907-3dcc-a7ca-1471426166ff.roa
Signing time:             Fri 15 Nov 2024 18:42:33 +0000
ROA not before:           Fri 15 Nov 2024 18:42:33 +0000
ROA not after:            Thu 13 Feb 2025 18:42:33 +0000
asID:                     7018
IP address blocks:        23.160.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:eb:4c:e7:c5:df:91:9c:aa:da:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Nov 15 18:42:33 2024 GMT
            Not After : Feb 13 18:42:33 2025 GMT
        Subject: CN=7a0e1ac8-a2e2-472f-be3c-c6341bd151e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:93:eb:11:5e:dc:06:bc:5c:3c:02:9d:9d:
                    bc:be:f3:06:3f:67:73:2b:92:03:2a:34:22:21:3a:
                    04:88:73:be:be:83:3d:05:47:e0:b8:c4:7d:d5:79:
                    81:b5:50:a3:96:3f:6e:fa:61:62:db:e5:d4:cc:ce:
                    5c:c2:54:d7:4e:0c:6a:68:29:78:07:4b:d5:bb:1f:
                    98:e2:0c:07:31:69:b1:67:08:3e:e7:2e:08:c6:13:
                    6d:05:96:4d:bd:e2:15:9a:18:bf:0f:f3:38:aa:c3:
                    95:43:57:c1:a8:b3:e3:42:61:7b:ec:6d:8f:24:01:
                    d2:65:c1:d5:48:52:67:e1:e3:b8:01:66:43:5a:4c:
                    5e:d4:54:a5:b9:cf:e9:13:30:bf:a5:ef:6a:98:a4:
                    34:1a:c2:f7:cd:fb:19:7d:1e:3f:d5:9f:a0:50:47:
                    e6:37:74:1b:ff:fe:52:37:21:59:ef:29:2c:5d:a8:
                    72:47:41:0c:66:31:9f:64:82:9d:98:23:73:d0:48:
                    95:43:0d:cf:11:71:53:99:76:7d:68:fe:f6:4a:be:
                    42:75:53:58:25:c7:6f:22:79:f0:cf:1d:5c:12:30:
                    cc:10:82:0d:4a:43:a1:fd:06:6b:23:6f:3e:fd:7d:
                    c6:9a:ea:c9:88:66:05:f2:31:18:d7:18:83:1e:aa:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3B:88:46:C1:A4:5E:FB:0F:8F:96:D7:77:38:00:BF:A5:92:B7:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/7a8a8e49-9907-3dcc-a7ca-1471426166ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:62:99:ac:ae:ed:e1:8c:ac:ca:36:d8:bc:92:0f:73:c7:94:
         9f:26:ca:bd:88:94:f4:93:c3:b8:68:2c:86:7e:f2:7d:25:95:
         d0:48:e2:48:ec:0b:c3:40:c7:ec:50:fc:7e:69:a4:da:fa:e0:
         a2:a7:2a:db:30:7c:20:92:26:19:7a:7f:e0:e9:d9:4b:25:09:
         5c:e9:6a:ee:31:c9:76:6c:f5:13:dc:0b:11:18:b4:1d:06:f0:
         1d:ec:ba:c7:eb:ae:a1:33:02:c5:14:f8:9f:cd:ab:96:86:67:
         5e:04:b2:55:9c:05:55:83:85:f9:a0:9f:8d:a8:82:43:38:dd:
         b5:d6:24:ae:b7:01:61:72:1c:d1:55:dd:c8:69:db:01:6f:b6:
         45:34:2a:7c:27:99:9d:c5:f2:3c:ef:47:86:64:ed:df:03:56:
         7e:b5:9c:0e:bf:5b:35:22:7b:5b:fa:0f:fc:ce:7e:75:49:39:
         48:1c:5c:45:7c:2c:e1:73:fd:00:54:ea:9d:d9:a1:72:70:bb:
         97:94:7f:05:bd:37:bc:30:1e:eb:33:8f:0c:38:0b:8a:04:3c:
         3c:aa:96:66:d3:d5:ba:56:4b:95:b3:50:71:8e:21:7b:28:a4:
         53:35:e3:54:6a:41:31:2b:f1:20:de:6e:8b:3c:39:50:11:77:
         96:2f:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:21 2024 by rpki-client on console-ams.rpki-client.org