Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
File:                     9438e3b6-c8b0-3562-828e-38e2e3227244.roa (raw, json)
Hash identifier:          dy3MmU4t3QyV3UX1EJgRakeH+sf7s5faMmamw9HB2FA=
Subject key identifier:   41:09:33:47:13:61:E7:A4:C3:0B:7F:DE:5E:49:CF:A2:EB:1F:70:99
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F432858475A763D3A6D981826EBD9CA80
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     398698
IP address blocks:        23.165.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3d:3a:6d:98:18:26:eb:d9:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=f38c1936-ca3e-4d0f-baa0-d19e98bbcba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:33:c3:00:6f:a6:07:6d:ae:92:ee:03:3c:d4:
                    1f:3b:26:b7:3e:91:bb:50:51:d3:7e:44:10:62:67:
                    94:96:44:55:6b:9f:d3:b9:ab:96:3d:dd:8b:0b:fa:
                    82:93:d0:37:f1:f1:c2:08:c4:0e:87:e2:9a:8c:5c:
                    f5:2d:74:39:46:e0:d7:9c:db:a8:86:7d:f8:d4:c5:
                    cd:9e:73:ed:0c:75:c2:c9:03:bb:27:08:09:47:c9:
                    19:4a:e6:67:85:e7:55:6e:f4:a6:15:c9:19:58:08:
                    47:77:37:98:af:fa:d9:b7:ac:98:6d:64:6c:4d:0f:
                    ec:9b:37:cd:06:3b:25:b3:4b:81:88:d8:bd:66:1a:
                    f2:25:a2:5c:32:83:24:e2:22:e1:90:61:36:de:51:
                    33:b5:b9:82:33:06:5b:3d:08:59:a2:4c:ec:c9:aa:
                    a5:98:2e:0b:e3:1c:e8:22:55:a0:bd:4c:f1:74:5f:
                    fd:5c:f1:0f:84:1c:50:9e:a6:ca:2e:9b:f5:97:93:
                    1d:f6:1f:d8:17:ee:08:81:fe:54:f5:17:48:ff:69:
                    e2:06:51:8f:68:95:5f:80:25:a5:07:16:37:27:a1:
                    fd:bf:78:20:99:bb:b5:17:7d:11:03:be:30:7d:b5:
                    e4:38:12:96:83:62:87:a5:47:15:5f:03:d3:4a:39:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:33:47:13:61:E7:A4:C3:0B:7F:DE:5E:49:CF:A2:EB:1F:70:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:4b:63:c5:05:31:5c:49:7f:2e:bd:a8:2f:52:da:98:38:
         0d:59:16:1f:6c:1f:8b:58:42:4d:fd:d7:32:b9:a0:f8:51:85:
         a0:9d:a2:42:32:66:94:f1:47:60:2b:8b:3c:33:6e:43:40:94:
         77:60:08:51:82:83:8e:83:ac:25:30:bc:c3:a2:e1:35:9b:ef:
         94:3f:0f:8a:97:a8:4f:c9:8c:ae:31:9e:f2:c5:9e:0f:dc:82:
         9d:04:27:2f:6f:73:01:47:03:41:7e:f8:ce:fc:4d:b4:e4:69:
         9b:94:6e:7d:0e:b0:8a:e1:16:58:b6:f7:88:00:f1:31:3b:3d:
         58:2e:ba:f5:7e:e0:8d:cc:69:37:3c:70:de:0e:47:3f:08:28:
         da:42:eb:ec:61:2f:ef:91:28:6c:5d:49:25:ae:b5:2a:42:2d:
         ef:11:26:ea:e6:f5:23:eb:a1:e0:d0:fa:f8:20:ef:28:e4:74:
         85:72:4b:fe:98:3a:8d:d0:4f:e0:72:fb:bf:9b:6d:6a:75:d5:
         b0:30:1a:e7:d6:4c:92:63:4c:3e:88:af:df:8f:0e:ad:1b:ce:
         fe:4d:7d:62:b6:76:cf:66:2e:94:d0:a2:37:95:fa:3f:3b:0e:
         af:e9:a7:24:f3:71:9a:01:0d:13:14:60:af:0f:0a:ea:22:17:
         bd:f2:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:56 2024 by rpki-client on console-ams.rpki-client.org