Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/755fe728-3d11-444c-b21f-db3360ef543b/98574e4d-d84f-38ae-b0e2-49d40ea0907d.roa
File:                     98574e4d-d84f-38ae-b0e2-49d40ea0907d.roa (raw, json)
Hash identifier:          rqGM0Vb94lwL3hkBtHSwvtp+UFTurtWS1T3GnJvDwvk=
Subject key identifier:   3E:03:80:3E:75:45:BA:C2:CA:52:3E:3C:55:B8:8C:A4:BF:4C:B6:AE
Certificate issuer:       /CN=755fe728-3d11-444c-b21f-db3360ef543b
Certificate serial:       010D0C9F43285847283300813071375EBE4EC700
Authority key identifier: B5:37:F4:3E:8A:20:FD:97:B3:E9:F2:6E:F7:ED:75:47:D4:9E:DD:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/755fe728-3d11-444c-b21f-db3360ef543b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/755fe728-3d11-444c-b21f-db3360ef543b/98574e4d-d84f-38ae-b0e2-49d40ea0907d.roa
Signing time:             Mon 09 Sep 2024 12:55:03 +0000
ROA not before:           Mon 09 Sep 2024 12:55:03 +0000
ROA not after:            Sun 08 Dec 2024 13:55:03 +0000
asID:                     7029
IP address blocks:        23.188.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/755fe728-3d11-444c-b21f-db3360ef543b/755fe728-3d11-444c-b21f-db3360ef543b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/755fe728-3d11-444c-b21f-db3360ef543b/755fe728-3d11-444c-b21f-db3360ef543b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/755fe728-3d11-444c-b21f-db3360ef543b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:33:00:81:30:71:37:5e:be:4e:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755fe728-3d11-444c-b21f-db3360ef543b
        Validity
            Not Before: Sep  9 12:55:03 2024 GMT
            Not After : Dec  8 13:55:03 2024 GMT
        Subject: CN=55992466-b6df-4e6f-a615-2c4dca6563dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:e5:05:93:82:8c:07:4d:01:40:10:6e:df:
                    f9:8d:30:2c:15:d8:aa:62:57:c0:e8:47:92:9f:e1:
                    46:57:3b:72:fe:3e:9f:7c:57:a8:6e:bf:48:ea:9b:
                    7e:12:f4:5e:38:74:86:97:54:5e:62:f5:07:52:2c:
                    2b:73:d7:64:d0:a1:24:23:41:d8:70:ce:fc:0a:ca:
                    0d:e6:36:a4:b6:55:9b:ad:51:62:7e:21:77:95:9f:
                    bb:67:d9:c9:aa:75:1f:1d:f1:c8:6a:74:76:3b:aa:
                    3c:f0:96:21:46:c4:67:cb:63:cf:54:62:23:6b:b6:
                    1f:35:7c:21:9e:a5:7c:67:28:77:3e:c0:38:04:9e:
                    7b:d8:57:6a:48:8a:00:8b:d6:0f:ff:e4:47:43:7f:
                    94:15:bb:ce:68:4a:72:6c:d1:d7:ca:3b:d5:1d:c9:
                    c5:92:a0:cc:ac:97:03:2c:fb:06:a7:a7:48:ec:48:
                    0c:c4:95:c4:1d:22:53:9a:b7:a4:42:02:b4:13:08:
                    f9:3c:0b:3a:e0:8a:5b:b8:67:28:75:5e:8c:dc:ea:
                    bf:0d:ab:0c:26:17:d7:b3:35:d9:97:ad:d0:97:4d:
                    05:91:dd:2b:9a:12:3f:74:c3:e3:0d:fc:50:13:06:
                    08:93:77:cc:6e:98:7e:f0:91:86:ff:24:dd:c2:b9:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:03:80:3E:75:45:BA:C2:CA:52:3E:3C:55:B8:8C:A4:BF:4C:B6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/755fe728-3d11-444c-b21f-db3360ef543b/98574e4d-d84f-38ae-b0e2-49d40ea0907d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/755fe728-3d11-444c-b21f-db3360ef543b/755fe728-3d11-444c-b21f-db3360ef543b.crl

            X509v3 Authority Key Identifier:
                keyid:B5:37:F4:3E:8A:20:FD:97:B3:E9:F2:6E:F7:ED:75:47:D4:9E:DD:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/755fe728-3d11-444c-b21f-db3360ef543b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:81:bd:28:d5:31:78:9f:f4:54:a8:ab:42:4f:dc:17:3b:
         ae:f9:86:4f:8b:47:91:76:a2:aa:e0:29:6f:01:3b:f0:0f:7e:
         99:5b:70:2e:83:d6:44:1b:5b:be:56:63:55:5c:d7:69:98:90:
         05:e2:c8:5b:93:b3:9d:0e:aa:7d:cd:db:cc:a4:e3:b0:16:90:
         ee:c1:7c:b4:68:67:a8:7a:9b:f6:dd:b4:2c:c7:16:6c:8d:a1:
         f2:11:10:f3:7b:c2:25:61:9b:f2:bd:af:73:cd:36:47:10:3c:
         ee:f0:0b:0e:50:e2:e7:16:2f:94:a6:79:bc:db:66:e5:8e:cc:
         fb:ad:59:2a:d4:9e:cf:47:30:69:90:c7:77:86:ea:e3:a1:ee:
         32:9b:3f:ec:ab:d4:d2:a3:46:96:a8:a9:dd:97:9e:a6:bc:ca:
         b5:47:19:a4:36:85:77:3f:3b:59:f3:78:9b:63:a6:49:2f:04:
         37:d2:8f:11:3a:ec:8c:de:dc:bf:31:1b:a6:e7:71:00:05:24:
         9d:3c:7b:d1:ab:d1:3d:88:31:de:99:9b:1b:0d:79:9e:99:90:
         ca:42:a6:fc:13:c9:44:27:a4:46:cb:9c:50:19:38:02:1f:ea:
         02:0e:b8:ba:b7:dd:d7:43:c8:4a:c4:4a:56:9e:42:35:d1:d2:
         5c:25:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org