Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa
File:                     d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa (raw, json)
Hash identifier:          e9GW11Z9sHLsnom0OkFiPfD68xzcSPJkM68bNO1JGQI=
Subject key identifier:   43:F8:6E:92:1F:1E:58:F2:42:57:E0:50:1F:B3:AC:47:15:43:6B:DB
Certificate issuer:       /CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
Certificate serial:       010D0C9F4328584550682E715CDEA21B767CA000
Authority key identifier: 0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa
Signing time:             Sun 24 Mar 2024 13:00:33 +0000
ROA not before:           Sun 24 Mar 2024 13:00:33 +0000
ROA not after:            Sat 22 Jun 2024 13:00:33 +0000
asID:                     133199
IP address blocks:        23.155.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:68:2e:71:5c:de:a2:1b:76:7c:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
        Validity
            Not Before: Mar 24 13:00:33 2024 GMT
            Not After : Jun 22 13:00:33 2024 GMT
        Subject: CN=318deb34-5675-4cc5-80c7-37d6a130c673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:6c:01:91:02:4c:71:c0:57:f3:b3:c5:1e:
                    b3:67:ce:be:7f:a6:6b:f8:72:a1:81:30:5f:81:23:
                    72:9e:87:cf:6b:24:aa:fa:78:ee:62:5e:51:f9:eb:
                    77:23:1f:5e:a8:37:a4:9c:86:34:75:a4:d8:8b:5e:
                    3c:0e:7f:bf:0d:4f:df:6c:fa:c3:34:3f:9e:a6:7f:
                    f5:ad:a6:da:3c:f1:b7:4c:2a:b4:35:dc:ff:9c:45:
                    6c:e4:35:3b:19:8b:79:ad:bb:e1:3a:9c:86:1f:8c:
                    50:e9:3e:7e:20:d6:2d:63:d1:2b:50:d3:2c:85:0e:
                    e1:38:1d:d4:96:3a:69:e6:83:25:8b:d4:5e:e3:1d:
                    86:db:f2:cd:34:ae:a3:7f:45:fb:8a:37:e1:a3:09:
                    79:d0:82:cd:43:d9:fd:a8:ed:43:98:8e:82:c2:e2:
                    27:e0:17:8d:af:b0:ee:b0:c1:02:c6:0f:e7:03:16:
                    14:ed:e1:18:ca:00:a1:ff:0b:57:99:a2:1f:4f:c8:
                    7f:6b:2d:81:6e:0b:6e:ca:a4:13:a8:a5:e8:90:8e:
                    f3:96:8f:ab:05:ea:b2:a1:cc:19:fa:18:3f:2b:65:
                    6e:35:57:59:a3:78:c1:70:82:b3:07:fa:68:88:a8:
                    3e:58:b6:b7:0c:70:b2:62:f0:e4:66:5e:09:db:53:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F8:6E:92:1F:1E:58:F2:42:57:E0:50:1F:B3:AC:47:15:43:6B:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl

            X509v3 Authority Key Identifier:
                keyid:0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:95:f7:d9:ee:7b:1f:ce:f6:1f:26:28:c0:66:e7:92:5c:a1:
         62:a7:63:ca:66:8f:61:6c:4e:18:89:72:79:11:58:f3:4b:e8:
         de:d2:90:57:1c:7e:2b:fd:f8:ef:17:2b:53:82:6d:b9:52:18:
         31:98:cb:76:8a:14:a2:4e:1c:b0:7f:e8:c8:a2:d7:01:c8:02:
         c0:c4:9b:90:7e:6f:73:d8:fd:f7:1e:ff:db:f8:bf:f1:64:ab:
         f4:cb:28:5a:f2:61:99:0e:e2:06:74:4b:4d:dd:79:88:be:81:
         4e:02:40:92:d8:92:c8:9c:8b:2f:0d:68:23:fe:c7:b6:ec:6a:
         07:b0:c1:93:14:b7:24:2a:b9:09:06:b6:e1:91:82:f9:ab:cf:
         13:06:33:24:35:86:79:68:01:e8:9c:37:6e:ca:22:ef:48:5b:
         87:bb:cd:24:b1:f1:fd:a9:48:74:fc:9f:bf:10:71:82:48:7b:
         5e:4c:6d:7a:7a:b6:24:7f:ba:ea:64:c0:5c:84:ab:41:2f:d2:
         fb:a8:3b:3d:f7:b0:df:de:9c:da:04:08:2d:c5:18:8b:5f:cd:
         a7:76:ee:b5:37:f6:94:cf:55:4c:d1:4f:a5:c6:d5:41:a8:8b:
         64:f4:42:fc:b6:57:c1:7d:16:36:21:a6:7b:b5:87:30:7c:e2:
         ca:3d:02:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:45 2024 by rpki-client on console-fra.rpki-client.org