Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/9131223f-86e0-31ad-a13c-eae4ee54cdbf.roa
File:                     9131223f-86e0-31ad-a13c-eae4ee54cdbf.roa (raw, json)
Hash identifier:          ae79DUUUUZhAzv9Jwg7ivu4saJNY6ArjPXEG5YDgjZg=
Subject key identifier:   1C:B0:E5:80:10:93:91:3B:83:CF:61:25:CA:61:F3:21:82:CC:62:60
Certificate issuer:       /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
Certificate serial:       010D0C9F4328584744045C04025FC544BC819780
Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/9131223f-86e0-31ad-a13c-eae4ee54cdbf.roa
Signing time:             Thu 19 Sep 2024 12:03:42 +0000
ROA not before:           Thu 19 Sep 2024 12:03:42 +0000
ROA not after:            Wed 18 Dec 2024 13:03:42 +0000
asID:                     400859
IP address blocks:        23.189.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:04:5c:04:02:5f:c5:44:bc:81:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
        Validity
            Not Before: Sep 19 12:03:42 2024 GMT
            Not After : Dec 18 13:03:42 2024 GMT
        Subject: CN=fb0411d9-d506-4280-8a17-17b600cea5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:0c:6a:be:7a:23:99:64:af:52:3a:35:76:
                    b9:56:96:c6:76:e5:32:3f:62:6b:bd:87:6f:e1:35:
                    74:1f:30:3e:f9:06:45:86:ae:5d:b7:88:b3:3d:3d:
                    55:d5:5a:cb:f7:e0:d4:e2:d8:92:82:3f:6f:67:5b:
                    36:c2:e5:ab:f4:c0:05:dd:37:12:57:13:2c:27:7a:
                    81:ed:2a:2b:b4:b8:31:a8:d3:64:93:bb:07:86:48:
                    a4:17:4a:aa:98:9f:0e:3d:d4:ab:0d:56:e5:e2:39:
                    4a:af:67:d2:01:9a:c1:4e:ad:85:38:48:e8:3d:b1:
                    20:42:f2:31:9f:e9:3e:b1:53:be:ea:2d:8e:b5:33:
                    69:d8:fe:09:92:fd:9f:b3:23:da:9e:e0:18:04:e6:
                    78:ad:89:eb:1d:da:e8:63:5d:66:bf:af:9a:b2:f0:
                    87:6d:2a:0b:90:f3:31:0e:e3:57:82:44:a6:4e:b4:
                    b5:9b:d5:5f:73:65:d3:08:9b:2e:f3:20:9d:c5:5c:
                    ab:f9:3e:c3:66:6b:8c:02:31:88:74:c6:c7:04:c8:
                    39:80:3a:d2:07:68:54:b5:ba:a5:69:a7:c5:7d:20:
                    31:14:af:f0:f8:37:69:59:be:37:b2:80:bf:14:cb:
                    5f:a1:e7:4c:ee:66:ab:60:80:b6:d4:99:b5:75:bb:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B0:E5:80:10:93:91:3B:83:CF:61:25:CA:61:F3:21:82:CC:62:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/9131223f-86e0-31ad-a13c-eae4ee54cdbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl

            X509v3 Authority Key Identifier:
                keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5d:8b:a8:67:39:5f:d9:93:7b:b7:25:02:12:98:78:45:e0:
         fd:95:73:2d:e4:43:04:98:de:38:b4:4d:41:35:cc:bd:6e:c2:
         7d:c3:c6:e0:d5:9a:65:ab:c1:17:62:f2:18:be:80:e9:2f:a5:
         b8:83:35:26:33:db:1c:0f:a0:2e:63:a6:7f:42:06:31:81:6c:
         f5:6b:bd:39:e4:6e:2c:2f:5a:7b:23:7b:d6:c6:17:94:25:d9:
         41:c8:dd:30:02:f3:4b:3a:7d:e9:03:d6:01:78:f2:00:eb:40:
         9b:27:e7:9c:16:dd:b5:85:17:83:57:17:89:10:9f:4b:57:d0:
         01:1d:78:db:8c:b4:ba:2e:9c:6a:90:22:42:4d:51:fd:22:f4:
         ac:e2:e5:eb:de:7f:80:52:0a:a0:ee:1b:8d:19:7f:1e:b5:d6:
         46:a1:88:96:59:35:6f:df:f7:26:f0:72:82:24:b0:5d:ae:0c:
         5e:0d:1b:3c:06:93:b9:bf:7d:d8:1b:2d:29:ce:cf:14:6d:af:
         65:57:60:cd:b4:17:4d:8e:23:68:8b:df:73:ed:97:b6:f5:f5:
         ea:dc:2b:b0:48:e9:01:53:55:e1:5c:ae:8d:89:5e:33:b0:3c:
         30:83:99:3e:a2:4a:7d:3e:ab:c8:bf:fe:16:5b:7c:3f:6b:03:
         f8:d2:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:10 2024 by rpki-client on console-fra.rpki-client.org