Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/444328c3-7a17-3683-a279-5b98dd7ea6db.roa
File:                     444328c3-7a17-3683-a279-5b98dd7ea6db.roa (raw, json)
Hash identifier:          uJJsQwF6uoNzf8DKbnGpY+cGUyShENmPbUO+V429Yh8=
Subject key identifier:   A6:EB:0D:E3:A9:67:3F:70:6D:78:2E:1F:38:5F:52:14:E0:EC:49:92
Certificate issuer:       /CN=a6c28e56-4429-446d-9891-4fbd9fe90aee
Certificate serial:       010D0C9F43285847E1F9FABDD5DF82053A73A6C0
Authority key identifier: 54:D8:49:B1:75:A5:1A:6C:FD:A1:45:F3:41:D6:E5:05:94:B2:88:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/444328c3-7a17-3683-a279-5b98dd7ea6db.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     215274
IP address blocks:        23.180.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f9:fa:bd:d5:df:82:05:3a:73:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c28e56-4429-446d-9891-4fbd9fe90aee
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=7b2fa43a-b298-42c4-9729-0c7513e6f00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:24:85:1b:38:73:f6:47:e9:8e:e1:45:eb:
                    c8:83:04:56:82:3e:e8:d6:01:1f:88:62:1f:31:f9:
                    5e:61:ad:dc:70:35:a0:d1:0f:d1:89:05:68:35:53:
                    e2:6d:d0:98:8c:b9:33:39:10:f3:08:e1:d4:5a:e7:
                    43:89:06:d5:14:d1:ce:b5:58:99:86:99:d8:2e:1b:
                    bd:74:10:39:42:14:5a:bf:dd:4f:7f:66:9a:38:3a:
                    2d:ba:6e:5a:5b:94:36:5b:fc:84:d2:20:7a:35:2c:
                    8d:a2:9c:f8:88:0b:23:7e:7e:3c:e2:65:14:e3:df:
                    e3:f7:7b:f3:f6:24:50:9e:5f:c9:82:fd:5b:5f:ac:
                    35:e7:b8:8c:01:37:06:80:10:9e:bd:91:a8:d1:0b:
                    18:3c:99:6c:5b:23:f4:af:53:0e:11:2a:80:2d:b6:
                    a6:31:53:96:96:ca:89:99:38:27:fe:45:29:60:cc:
                    95:45:36:3b:5b:11:63:30:99:29:cf:67:2b:59:8f:
                    3f:42:ce:38:97:e7:9f:ce:ae:23:3a:32:20:db:22:
                    4b:bf:b4:13:d7:5f:d8:f7:ee:69:8e:13:13:bf:81:
                    79:e5:7b:c7:ca:92:ed:08:c9:60:23:af:d5:bc:ca:
                    64:11:d2:05:62:ce:72:72:51:df:f7:f3:54:a9:0e:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EB:0D:E3:A9:67:3F:70:6D:78:2E:1F:38:5F:52:14:E0:EC:49:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/444328c3-7a17-3683-a279-5b98dd7ea6db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.crl

            X509v3 Authority Key Identifier:
                keyid:54:D8:49:B1:75:A5:1A:6C:FD:A1:45:F3:41:D6:E5:05:94:B2:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:44:8d:4c:ec:44:73:cd:ae:5d:40:40:ff:c2:f6:4b:1e:9f:
         34:61:6e:82:33:d8:57:2e:fe:f3:44:7e:17:6e:e9:87:90:e4:
         d8:3f:29:48:0d:e9:17:1c:8c:ba:af:33:b2:5d:92:62:90:bf:
         a1:ed:87:7d:f0:f1:5e:90:8b:ee:fd:ce:2a:e1:eb:cf:1b:74:
         e7:bd:57:4e:6c:79:84:38:01:f6:a9:5b:15:6b:13:bd:63:b1:
         d0:c1:00:dc:fe:da:2b:22:46:2d:46:8f:d1:03:38:f0:cf:66:
         dd:84:b6:7c:5f:48:2d:e8:75:89:42:e3:62:96:cf:99:83:1f:
         9c:c9:51:82:31:44:c7:9d:c3:e5:dd:49:ab:e1:37:eb:59:23:
         4f:fc:6d:ea:fc:9d:be:a1:80:25:ef:e6:99:c1:43:80:38:82:
         32:39:42:46:88:ff:d7:c4:0c:e9:ec:6c:0f:ff:35:59:16:56:
         87:b6:b1:41:32:a9:69:6b:03:f0:98:9c:e8:18:49:e9:17:a4:
         5a:f0:ee:77:77:84:eb:16:52:47:d7:16:13:52:e0:11:8a:40:
         e4:da:19:89:d9:b7:3e:08:d6:ee:7d:32:b0:0a:c1:ef:51:9f:
         87:f4:65:90:95:c3:50:f8:87:71:8a:f7:a2:53:24:08:46:93:
         e6:9b:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org