Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
File:                     a5083115-9d64-38b2-a390-44d44072b1bf.roa (raw, json)
Hash identifier:          WENNBKb68iYiNKyFmLR8gFrsdTnCX0YuTN9UuBYMWK4=
Subject key identifier:   6E:8D:A8:FF:7F:B3:6C:40:31:A3:FB:A1:F4:D2:AA:D7:D1:1F:EA:BB
Certificate issuer:       /CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
Certificate serial:       010D0C9F432858478F8BD1EB7D7D96138D5A0480
Authority key identifier: D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa
Signing time:             Wed 16 Oct 2024 13:22:16 +0000
ROA not before:           Wed 16 Oct 2024 13:22:16 +0000
ROA not after:            Tue 14 Jan 2025 14:22:16 +0000
asID:                     399861
IP address blocks:        23.191.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:8b:d1:eb:7d:7d:96:13:8d:5a:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
        Validity
            Not Before: Oct 16 13:22:16 2024 GMT
            Not After : Jan 14 14:22:16 2025 GMT
        Subject: CN=b82b1744-8916-40a3-9885-915a12219661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:03:25:01:e4:6d:04:35:f1:03:55:97:61:c2:
                    2e:04:3f:3a:cd:e5:e6:42:e8:59:28:0a:52:46:ac:
                    38:97:d2:b0:a9:60:fe:f4:dc:80:00:5e:4d:30:2e:
                    cd:eb:fa:56:58:fe:fb:02:bd:39:aa:9b:68:5c:e9:
                    2a:4c:ec:cc:61:39:e1:88:a5:e5:85:6b:5e:a7:2e:
                    c1:82:58:03:4c:7b:b9:72:ed:ca:f9:fd:34:dc:0a:
                    43:f7:c6:fa:38:0a:47:6e:75:ed:51:8e:7f:66:8c:
                    aa:6a:d8:bb:59:50:a4:ce:13:34:6c:d8:63:8f:64:
                    ac:32:7f:2e:0d:ab:45:c2:ab:61:c2:2d:0c:d5:14:
                    22:e9:4e:d4:37:4d:e8:cf:14:64:3a:bb:54:ca:d8:
                    2e:e6:6f:b8:69:5b:ba:a5:d0:92:af:cd:1b:4f:52:
                    3f:51:ae:1e:1c:e8:21:93:cc:ab:91:7a:74:01:93:
                    a8:8b:d9:30:f6:05:84:f1:4c:0c:20:fd:c3:08:ad:
                    a2:40:f1:ac:8f:ab:a0:75:c1:53:9a:5f:2f:13:8c:
                    0f:91:40:19:e7:79:9a:20:80:f2:be:cd:ba:00:da:
                    b7:36:e2:ee:db:bf:c0:d2:85:37:a8:d4:df:7b:96:
                    60:b3:1a:e5:2f:02:a2:5d:95:16:d2:d7:ac:10:62:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:A8:FF:7F:B3:6C:40:31:A3:FB:A1:F4:D2:AA:D7:D1:1F:EA:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/a5083115-9d64-38b2-a390-44d44072b1bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:c2:45:9a:71:e0:b7:82:00:08:52:7b:c1:a4:4d:6d:ca:
         8c:c5:b9:92:f3:72:ad:e8:ab:9f:a4:03:1b:5e:56:13:ea:48:
         be:14:1a:d2:b4:e5:e7:12:80:14:f0:8f:64:0e:b6:da:ea:de:
         df:3b:ec:90:c8:15:47:2b:57:b5:86:01:9e:f6:84:4e:0b:33:
         15:6d:38:7d:4f:0b:e0:cd:50:83:ac:97:5a:73:e6:0b:fc:be:
         e2:91:a2:a3:c5:fa:53:4e:9f:c6:11:4e:a3:7d:1a:d9:62:19:
         ec:12:04:cf:97:5b:dc:6c:f5:48:59:9c:cd:38:31:de:07:8b:
         c4:02:b1:5c:7c:7c:a7:bf:a4:b9:f0:c4:71:53:3f:43:25:46:
         7c:81:cd:00:fb:1e:a0:c4:4f:2c:86:7c:d7:ff:a0:0b:83:d3:
         85:06:db:3a:0c:f5:47:8d:f6:bf:74:d1:46:8c:c9:a7:d1:7f:
         fc:df:b3:69:ab:d9:ec:e2:4a:b9:59:98:0f:63:e7:2e:e1:73:
         22:c0:9f:92:b8:51:35:e7:78:72:f9:9a:cc:d3:20:bf:fe:57:
         0e:11:ad:6a:0d:7f:a6:9f:c8:2d:7a:3d:12:c4:f8:ea:8a:14:
         81:03:26:80:f8:79:6e:f5:07:ee:36:93:2f:3c:bd:ba:34:a3:
         a2:82:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org