Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/9ea6a813-b0f2-3437-954c-278a4ade55fc.roa
File:                     9ea6a813-b0f2-3437-954c-278a4ade55fc.roa (raw, json)
Hash identifier:          ZJj3DIRTe+cxMmEBfHBOpzno1b4SVMOTWHKIKxVHrZ4=
Subject key identifier:   67:1C:BF:51:9C:0D:18:E0:F1:95:62:B6:88:2E:52:1C:95:27:C2:F7
Certificate issuer:       /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial:       010D0C9F43285847C1DF4839E80D3C432A08139C
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/9ea6a813-b0f2-3437-954c-278a4ade55fc.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     8100
IP address blocks:        23.247.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:48:39:e8:0d:3c:43:2a:08:13:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=06a54c29-8b6a-4e1d-bfe9-a464e840805b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:80:26:79:25:11:a6:ce:80:4e:9b:8b:0b:
                    1a:ec:bd:cb:56:ee:52:60:f9:e1:8d:ce:d4:0d:12:
                    d7:5a:0c:b6:af:84:d8:69:ad:c8:3e:81:35:16:a0:
                    c7:b8:9a:03:88:47:39:86:44:72:4f:e7:69:c7:a6:
                    78:f1:9d:a6:a0:f8:e0:7f:d5:9c:6d:c5:2d:01:04:
                    2a:8d:08:4b:20:c4:d1:2a:56:6d:13:29:83:2a:f9:
                    80:ec:64:33:c6:8d:26:2e:7d:20:07:5a:86:15:c1:
                    7f:e5:97:75:8e:73:9f:10:88:b6:79:25:57:3c:00:
                    e4:f8:7e:e9:ba:86:b7:d5:7e:86:63:71:05:f7:e8:
                    b8:50:c1:b2:0a:96:23:6a:8a:e7:ce:3a:bd:1e:f3:
                    52:0e:11:5b:f6:3f:af:4b:e5:82:a2:85:58:3e:88:
                    b3:19:15:c6:aa:cf:b4:68:b2:65:b6:0f:6c:05:cd:
                    2e:88:e7:cc:99:bc:ec:37:f9:e4:6e:eb:14:e3:5d:
                    6f:68:92:10:ea:5f:83:46:67:b8:06:0b:44:9f:f0:
                    64:71:a1:d9:99:bc:93:92:0f:29:c7:39:4c:ee:f3:
                    d8:3b:7d:d1:fb:a8:b4:04:57:88:aa:a0:c9:52:81:
                    f3:fe:0d:d7:d6:42:1b:f1:c0:f5:b6:1c:75:f2:ed:
                    e4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1C:BF:51:9C:0D:18:E0:F1:95:62:B6:88:2E:52:1C:95:27:C2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/9ea6a813-b0f2-3437-954c-278a4ade55fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl

            X509v3 Authority Key Identifier:
                keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ee:b1:c1:47:19:5b:52:e0:fd:db:b7:a3:2f:ab:4a:58:f1:
         bb:50:fa:19:46:13:13:20:ed:c0:70:e6:8c:11:6f:65:07:3f:
         fc:24:a3:a2:e0:fa:9b:40:98:a2:d3:77:0d:84:b0:c5:4d:1a:
         93:17:df:44:96:7d:c8:dd:4c:4e:c2:d4:a4:04:bf:83:ba:5f:
         d6:56:15:05:b1:40:49:4d:bb:c4:92:f5:83:c0:45:30:16:92:
         ad:61:f9:97:0e:27:c1:7c:71:28:e0:22:10:14:bb:a9:97:02:
         24:84:25:70:58:02:43:74:27:91:4f:fd:cc:40:d7:e9:f1:15:
         f5:13:82:e8:ff:8f:bb:67:7e:f4:c2:67:97:39:8b:d9:b3:af:
         97:a2:77:95:97:38:37:21:23:da:5b:60:32:3d:58:3d:f6:d7:
         8d:53:73:2b:58:30:69:6f:e0:06:1d:8c:6c:ec:5d:c3:1d:62:
         1f:8d:fd:b6:68:57:62:90:b4:0b:77:bd:61:6b:b7:57:61:66:
         4c:f5:c5:09:54:d8:da:fa:0b:fe:43:b2:9a:86:41:df:18:5f:
         0b:13:52:70:e0:90:38:80:71:0e:cd:1e:e7:06:a3:62:ef:24:
         79:d2:60:db:68:9a:ff:8d:c1:b1:b1:41:ba:73:7d:40:cf:9d:
         71:29:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:23 2024 by rpki-client on console-fra.rpki-client.org