Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/afbee109-a41e-388b-aa64-c1397e1da515.roa
File:                     afbee109-a41e-388b-aa64-c1397e1da515.roa (raw, json)
Hash identifier:          n20sQ6MqIsIIv18iTiTNf4jwEw0oZi3nDTHcwUVAxTk=
Subject key identifier:   7E:FD:D3:4C:67:87:D3:3D:21:34:CD:8E:11:C8:76:8A:FD:BF:02:C0
Certificate issuer:       /CN=6905fb8c-d913-4c31-b30b-835c96c3b5ee
Certificate serial:       010D0C9F432858471A406DE48E55FAB91429D9C4
Authority key identifier: 94:86:D1:3F:BA:C7:62:91:3C:1A:3B:C4:C3:58:7B:2B:8A:13:69:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/afbee109-a41e-388b-aa64-c1397e1da515.roa
Signing time:             Wed 04 Sep 2024 13:00:41 +0000
ROA not before:           Wed 04 Sep 2024 13:00:41 +0000
ROA not after:            Tue 03 Dec 2024 14:00:41 +0000
asID:                     204535
IP address blocks:        23.158.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/6905fb8c-d913-4c31-b30b-835c96c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/6905fb8c-d913-4c31-b30b-835c96c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:40:6d:e4:8e:55:fa:b9:14:29:d9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6905fb8c-d913-4c31-b30b-835c96c3b5ee
        Validity
            Not Before: Sep  4 13:00:41 2024 GMT
            Not After : Dec  3 14:00:41 2024 GMT
        Subject: CN=709929ff-6912-444b-a62e-5ea58c0e247e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:8e:3c:a6:9f:22:0d:7e:a5:43:e3:22:56:
                    09:29:1d:7a:c9:a3:4d:51:71:3d:c0:37:48:9a:be:
                    61:ab:e6:e5:b8:56:80:9c:24:7f:4d:9f:7c:21:df:
                    fc:e3:f1:8b:ba:e3:40:d5:e0:a5:c7:f7:ec:58:52:
                    c0:53:fc:db:92:ea:f0:34:20:d0:b5:de:68:50:8c:
                    30:7c:ee:b2:c8:c9:a3:38:be:df:0d:50:f7:f3:62:
                    65:65:a7:41:fe:0f:bb:c1:a1:cd:4b:62:8d:d7:59:
                    06:07:ee:35:3b:22:4e:2f:db:fc:67:55:cc:06:92:
                    ca:0e:f0:78:eb:a9:f8:d3:f1:78:79:1c:d3:43:19:
                    32:88:58:e7:f5:79:19:cb:95:52:be:7a:19:06:4d:
                    a4:48:e7:43:dc:53:57:5c:2f:4b:6d:74:f2:ff:b1:
                    7e:ed:fa:0d:88:48:fa:6c:19:b4:4c:eb:31:58:37:
                    77:26:0e:4d:dd:9e:c8:40:a3:8d:d0:02:9a:9c:6e:
                    9f:d8:b3:b1:0b:d8:7e:83:26:34:38:29:7e:b4:53:
                    83:68:3d:e2:ac:32:3f:d9:a4:bc:51:1f:99:31:97:
                    d6:51:0a:4f:21:f8:f4:b8:a7:f1:be:b4:78:0c:45:
                    8d:1b:8f:25:8e:97:98:e3:7c:9b:2f:58:22:bd:32:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FD:D3:4C:67:87:D3:3D:21:34:CD:8E:11:C8:76:8A:FD:BF:02:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/afbee109-a41e-388b-aa64-c1397e1da515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee/6905fb8c-d913-4c31-b30b-835c96c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:94:86:D1:3F:BA:C7:62:91:3C:1A:3B:C4:C3:58:7B:2B:8A:13:69:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6905fb8c-d913-4c31-b30b-835c96c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d9:08:4f:43:95:87:a4:80:7d:16:40:2d:14:1a:38:e9:b4:
         5d:13:67:e0:ef:b1:d4:78:5e:6d:83:2a:11:2a:dc:a9:14:a5:
         2a:e4:36:6a:87:a2:fb:56:4d:e9:dc:bf:64:56:c2:8b:c1:35:
         fc:55:a9:c3:89:d5:9d:34:09:f8:c2:fc:eb:83:d6:69:49:29:
         c0:3f:e4:70:ff:30:36:10:1a:ab:72:86:28:68:ab:47:84:92:
         aa:eb:26:dc:d9:88:46:1d:a1:d2:e3:2a:fc:b1:0c:15:d1:73:
         f5:8e:07:62:a3:45:6c:2f:6c:b9:ef:cf:39:16:8a:70:d0:1f:
         5c:43:e9:6f:07:6e:97:79:20:32:17:b4:a0:17:12:24:ad:b9:
         4b:11:3b:05:4b:12:3f:b4:fd:c8:2b:6d:59:ed:5e:1f:32:b2:
         f9:2a:23:b4:d6:53:c8:63:dc:52:c2:51:bd:b3:95:3c:5c:2f:
         be:8a:62:3a:33:c0:03:32:93:6e:8a:50:18:15:3d:cf:75:f8:
         f5:81:75:f0:5a:b9:13:4f:ca:ff:25:0e:f8:6b:38:da:c4:1f:
         eb:aa:45:94:c6:d8:15:74:28:38:dc:87:03:c3:29:86:73:61:
         f6:af:44:86:76:77:ed:bf:0d:2a:8c:87:e0:3d:14:52:2c:b9:
         51:36:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:49 2024 by rpki-client on console-fra.rpki-client.org