Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa
File:                     4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa (raw, json)
Hash identifier:          pn6StQucv/p5m7+r26t6PaR5SkWaVtaOkGX/v/srY+o=
Subject key identifier:   1B:B0:C3:87:AA:AE:6D:77:28:08:AB:49:1A:5F:B2:D5:71:3F:C2:07
Certificate issuer:       /CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
Certificate serial:       010D0C9F432858470CD0ACFBEFF1D7A9DF33BB00
Authority key identifier: 33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa
Signing time:             Fri 30 Aug 2024 17:30:06 +0000
ROA not before:           Fri 30 Aug 2024 17:30:06 +0000
ROA not after:            Thu 28 Nov 2024 18:30:06 +0000
asID:                     197841
IP address blocks:        23.188.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0c:d0:ac:fb:ef:f1:d7:a9:df:33:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
        Validity
            Not Before: Aug 30 17:30:06 2024 GMT
            Not After : Nov 28 18:30:06 2024 GMT
        Subject: CN=1dc18903-298c-4823-a901-cded58c71359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:b6:33:cd:f8:34:63:bb:40:48:93:13:3b:
                    cd:4b:23:7e:3c:cb:c8:4d:7f:90:04:d2:79:59:c4:
                    4a:a8:c5:f6:3e:ab:5d:b0:62:9d:54:45:ac:39:8b:
                    e9:12:6b:b3:44:87:e9:03:a0:e6:2d:97:67:8f:1b:
                    5a:66:cf:19:fb:3e:50:74:45:22:18:f8:35:0e:79:
                    e0:57:48:07:45:62:c3:95:7b:83:9b:13:c9:96:c0:
                    fd:84:af:72:27:86:7a:47:31:6b:68:80:ae:7c:41:
                    a2:56:c7:46:de:35:85:dd:07:25:28:85:0c:fa:c9:
                    3e:8f:7e:ce:fd:55:98:9a:39:70:b4:a4:91:77:c2:
                    e1:4e:af:3b:e0:3f:a7:89:c4:18:8d:9f:69:67:10:
                    84:b8:df:c3:a4:52:80:6e:18:97:f9:fe:95:7c:9d:
                    8d:ad:90:cf:e6:b0:b5:6b:32:e6:04:53:29:a7:1f:
                    24:05:93:54:0e:35:c8:ef:ed:6d:28:f1:95:1a:5d:
                    44:50:56:30:cc:94:ad:5b:5f:8e:d5:4f:91:5e:c8:
                    9e:69:14:97:3b:dc:fd:d3:50:9e:83:84:ae:dd:5e:
                    3b:16:c1:82:5c:99:a9:ea:5d:1a:49:d6:4c:0b:6d:
                    03:3a:29:05:6c:32:9a:7f:4e:57:cf:e3:2d:3d:31:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B0:C3:87:AA:AE:6D:77:28:08:AB:49:1A:5F:B2:D5:71:3F:C2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl

            X509v3 Authority Key Identifier:
                keyid:33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:6e:68:64:3f:0d:a9:81:e1:d8:28:0e:6e:53:9f:8e:d6:
         08:78:24:48:9e:30:78:5a:77:5a:55:4b:03:44:d6:ed:df:5f:
         32:09:5c:b2:13:00:b9:75:2c:20:85:2e:75:1f:20:eb:bb:14:
         f3:eb:99:63:e8:a1:32:b6:9f:a3:fb:21:d2:4b:e6:de:d5:14:
         dd:45:12:69:5d:23:03:40:5d:28:29:a9:5f:19:5e:0b:bc:d7:
         52:d9:df:06:93:8e:56:1d:af:04:d3:06:7e:b6:48:03:77:d2:
         12:ce:26:49:ad:0a:37:6b:3f:0d:37:5a:29:53:66:d1:21:9a:
         fa:6b:d9:5f:ec:8c:cf:99:94:ef:0b:42:b7:f0:1d:58:6a:cf:
         34:c6:74:84:01:c7:8f:b0:c9:fe:1a:3e:58:6a:c3:10:fc:ea:
         36:6d:c8:15:91:68:68:45:e1:d8:21:fb:f3:b5:82:ee:f3:8d:
         64:18:5a:a8:68:cb:2d:0d:13:69:9a:b5:02:c8:c6:c0:ce:a1:
         e0:9e:ea:fd:e0:28:16:4b:38:32:3c:5b:72:93:95:ef:24:13:
         7b:c3:1d:e8:73:2c:98:df:af:11:e9:44:82:96:78:a8:4d:40:
         aa:15:ef:c2:dc:f4:b5:aa:ce:51:57:71:37:09:28:d4:3c:25:
         04:7c:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org