Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/6605b2a8-f54a-39f0-ac5c-a63059ba13e3.roa
File:                     6605b2a8-f54a-39f0-ac5c-a63059ba13e3.roa (raw, json)
Hash identifier:          wzieDPaxDb5dviiQwnvaVB6BXz/C0muqB7oOIbowh/M=
Subject key identifier:   58:F7:D6:F7:34:C0:2E:F5:E2:29:29:7D:80:CC:2B:B6:20:53:F4:0A
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F43285847B12430974A58529A48524000
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/6605b2a8-f54a-39f0-ac5c-a63059ba13e3.roa
Signing time:             Mon 28 Oct 2024 14:10:57 +0000
ROA not before:           Mon 28 Oct 2024 14:10:57 +0000
ROA not after:            Sun 26 Jan 2025 15:10:57 +0000
asID:                     400619
IP address blocks:        23.247.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:24:30:97:4a:58:52:9a:48:52:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Oct 28 14:10:57 2024 GMT
            Not After : Jan 26 15:10:57 2025 GMT
        Subject: CN=899dabea-81cd-4784-82f4-c57e51baa18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:3c:a0:4c:84:25:cb:ff:92:6a:5f:8a:95:
                    66:b9:8a:69:70:b5:6d:aa:49:18:25:09:be:15:88:
                    bb:8c:04:9e:ae:3e:84:51:ba:57:7b:44:c3:ad:68:
                    87:aa:2c:4c:8c:3e:43:a5:ec:d8:d4:8b:8d:9b:f3:
                    32:d4:62:bc:50:07:3c:24:de:c0:0d:5f:42:98:e1:
                    e6:a1:04:06:27:9f:68:4e:49:4e:d7:0b:ec:35:bb:
                    8a:e4:a4:32:83:e6:db:5d:b0:aa:19:63:7b:de:55:
                    66:83:c0:7a:8d:0d:1c:ed:6c:64:de:db:02:ef:e9:
                    ef:29:be:3f:de:ce:9c:fd:2e:75:2d:09:16:c9:b9:
                    d8:1c:05:bb:af:2c:d7:f5:ff:f1:3d:7c:fb:a0:0f:
                    99:cf:d2:c0:17:b2:bf:96:d4:41:f8:71:46:ff:df:
                    ff:18:44:f1:aa:23:62:42:0c:c9:7c:f3:42:de:5e:
                    ef:5c:0d:6c:ed:2f:67:c4:3e:6b:de:09:a6:ad:f7:
                    61:07:cd:68:61:96:94:9f:f5:7c:c9:17:03:7d:60:
                    77:dc:18:06:88:c6:2f:4f:2d:41:a2:b0:4b:3f:6b:
                    d6:6f:ca:92:d8:93:07:87:9e:7c:70:a3:67:be:45:
                    57:f6:d1:de:6b:9e:81:bd:4c:a2:5d:6d:cc:e0:6c:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F7:D6:F7:34:C0:2E:F5:E2:29:29:7D:80:CC:2B:B6:20:53:F4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/6605b2a8-f54a-39f0-ac5c-a63059ba13e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:66:63:65:5c:e2:03:bc:df:f0:85:a5:ff:39:eb:06:9d:b8:
         5d:45:62:a6:8a:b4:1a:eb:21:8c:64:74:7a:58:93:24:39:b5:
         c6:d1:09:af:86:91:c3:8d:a6:81:3d:95:4b:92:99:a4:82:a2:
         ea:5b:4f:e7:db:f0:9b:db:39:2b:ac:df:89:3f:81:ce:54:fd:
         7e:31:0e:8f:08:bd:2c:2b:12:ea:7a:8d:4c:97:7b:fa:bc:a1:
         5e:ff:c9:73:28:72:87:6b:da:27:02:2e:d9:ac:9a:89:b4:87:
         5d:2b:ca:30:f1:02:e1:b2:d7:36:51:50:9f:35:e6:ba:5b:c1:
         09:42:52:8f:70:dc:13:2a:f9:14:0d:8e:3e:6e:62:ad:b4:fd:
         d8:f5:c1:a2:9a:7b:6b:a6:37:d4:83:15:b7:ff:41:8b:e2:18:
         e0:57:34:6f:e5:23:a4:b2:5f:fd:1e:ae:56:bc:98:7c:d3:1e:
         4e:0e:3a:f0:82:24:75:77:d8:71:5b:47:12:27:65:ee:6f:c9:
         ad:46:8d:10:a3:c8:b1:a5:fb:c9:d9:55:9a:b4:61:b4:86:db:
         70:6a:82:c4:09:1f:7d:24:1d:dc:c9:bd:f8:7d:1a:c3:54:c3:
         06:02:d2:92:0a:80:5c:58:54:f2:d3:c7:45:da:58:f5:1b:da:
         5f:ab:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:42 2024 by rpki-client on console-fra.rpki-client.org