Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/1b662752-cf02-3437-9efb-346db40f93ce.roa
File:                     1b662752-cf02-3437-9efb-346db40f93ce.roa (raw, json)
Hash identifier:          jzsjbZpyrkPAMzHgvMhxaVTVNS6fXVF6/JCi/lKkp3c=
Subject key identifier:   E3:B7:85:C7:FB:48:F9:D4:23:63:59:C3:B9:67:B1:A3:91:BC:A3:64
Certificate issuer:       /CN=e6948ae7-36f2-49ff-ae79-8de3b34aa992
Certificate serial:       010D0C9F43285847F486CB33C84B71F871488FAE
Authority key identifier: 7B:3C:92:3D:B0:B2:70:C4:06:3F:46:A5:6D:00:73:D8:47:56:5D:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/1b662752-cf02-3437-9efb-346db40f93ce.roa
Signing time:             Thu 21 Nov 2024 17:28:47 +0000
ROA not before:           Thu 21 Nov 2024 17:28:47 +0000
ROA not after:            Wed 19 Feb 2025 17:28:47 +0000
asID:                     200080
IP address blocks:        23.129.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/e6948ae7-36f2-49ff-ae79-8de3b34aa992.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/e6948ae7-36f2-49ff-ae79-8de3b34aa992.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:86:cb:33:c8:4b:71:f8:71:48:8f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6948ae7-36f2-49ff-ae79-8de3b34aa992
        Validity
            Not Before: Nov 21 17:28:47 2024 GMT
            Not After : Feb 19 17:28:47 2025 GMT
        Subject: CN=f8ccdc9f-e3b2-4561-90f6-b09708009f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:cf:09:eb:80:90:26:29:6a:86:14:db:f0:
                    23:97:e9:5a:8d:cc:c4:f6:af:0d:ad:c3:8f:da:60:
                    bc:3f:a8:35:56:b0:65:36:c2:c1:68:fb:96:f0:5c:
                    de:67:0a:db:e9:c2:f4:3b:8c:cf:79:42:fe:5a:4d:
                    d3:1c:e6:3a:c0:03:49:48:0c:68:fa:cc:a8:8b:a7:
                    94:a0:07:4a:6c:00:a7:33:22:0e:20:68:37:5b:93:
                    8f:83:85:e0:39:78:08:7d:3d:79:62:72:8e:23:5c:
                    30:67:35:e6:25:a5:d3:f6:4b:99:a9:6a:9f:6f:98:
                    dc:57:27:52:00:e3:ec:1e:2a:8f:b6:27:57:b4:6c:
                    16:4c:94:eb:2d:80:08:46:bc:ce:ce:9a:e5:3b:e8:
                    40:84:94:5a:cb:84:29:06:a2:7c:c0:ae:0e:4b:b0:
                    4f:a2:b6:52:6b:64:c7:e5:43:01:7a:4a:16:ad:77:
                    42:9a:26:83:f3:7d:68:af:a6:06:ed:0a:cf:24:47:
                    41:7d:75:6f:3b:d7:89:55:32:05:53:f0:00:cc:19:
                    c1:5f:66:0f:1c:e7:86:ec:77:e7:f9:4e:82:f0:3b:
                    16:e8:2f:b5:85:d0:cb:72:c1:cc:48:74:e4:c0:36:
                    58:f6:58:7c:3e:31:5f:9d:fb:02:f3:10:4f:23:e7:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B7:85:C7:FB:48:F9:D4:23:63:59:C3:B9:67:B1:A3:91:BC:A3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/1b662752-cf02-3437-9efb-346db40f93ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992/e6948ae7-36f2-49ff-ae79-8de3b34aa992.crl

            X509v3 Authority Key Identifier:
                keyid:7B:3C:92:3D:B0:B2:70:C4:06:3F:46:A5:6D:00:73:D8:47:56:5D:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e6948ae7-36f2-49ff-ae79-8de3b34aa992.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:31:c4:2f:9d:6c:05:82:09:c2:8d:4b:3d:41:7b:a2:49:dd:
         aa:b7:f7:da:85:a4:c4:f7:2e:53:8e:8f:7d:83:f2:66:bc:c4:
         04:db:3a:f3:81:af:a3:56:2c:d2:f8:45:c6:33:0d:71:e5:94:
         74:bc:58:eb:94:87:a4:f4:dc:c9:0d:72:ba:61:7d:c6:6c:72:
         57:97:f3:ef:4a:de:dd:1b:d6:57:25:bc:1f:77:39:a3:f5:08:
         b6:5d:d2:72:3d:bb:96:0e:96:e3:ab:4b:02:d4:1e:de:1f:dc:
         91:e3:10:7b:f3:b7:b3:0d:d1:d1:ee:2d:e5:cb:f5:c1:78:8c:
         a5:bc:8c:2b:86:e6:b6:62:4b:7b:00:ce:14:c8:8b:ef:1e:f5:
         09:e2:ab:e1:7a:c2:43:d0:7a:1f:ac:b2:4e:48:d4:59:92:20:
         fb:56:a7:af:d5:ef:4d:8b:96:00:76:75:2c:5d:fa:9f:6b:44:
         44:d6:59:b7:e3:12:72:11:0c:9e:68:ca:17:be:06:ab:b3:75:
         c7:b3:14:ca:07:66:09:88:f4:19:ab:2a:fe:76:3b:3e:d7:49:
         92:7d:c7:ed:52:5e:cf:4d:e3:33:4d:6c:1c:c9:fc:34:49:53:
         a4:e6:07:08:00:81:fd:a0:b6:ff:30:75:dc:de:2c:10:cc:c8:
         0b:7a:60:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:59:47 2024 by rpki-client on console-ams.rpki-client.org