Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d65ea4a-75a9-396f-aebf-a002a1cbda58.roa
File:                     2d65ea4a-75a9-396f-aebf-a002a1cbda58.roa (raw, json)
Hash identifier:          3zGW6039w9V8bBafPS8jV+p42RCJySlnRgFkSfrzALU=
Subject key identifier:   70:91:7C:C5:B8:54:02:48:27:05:30:FC:DC:DE:B0:8F:8B:D0:4B:03
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858478FCD6E60314EB0A123489EC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d65ea4a-75a9-396f-aebf-a002a1cbda58.roa
Signing time:             Wed 16 Oct 2024 15:34:28 +0000
ROA not before:           Wed 16 Oct 2024 15:34:28 +0000
ROA not after:            Tue 14 Jan 2025 16:34:28 +0000
asID:                     400536
IP address blocks:        104.253.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:cd:6e:60:31:4e:b0:a1:23:48:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 16 15:34:28 2024 GMT
            Not After : Jan 14 16:34:28 2025 GMT
        Subject: CN=01bef32c-e501-4057-8bfb-aaf0979cecd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:4c:f3:c8:77:fa:ae:c5:6d:31:6c:ca:3a:
                    12:82:0e:86:4d:c5:f1:3a:cf:e6:b2:70:75:b3:4c:
                    03:65:c7:aa:e1:05:24:ae:69:91:36:da:ff:b9:d3:
                    ae:d0:01:c4:d9:a6:65:97:e6:c5:d9:c8:74:e2:41:
                    a5:6d:94:0c:f5:07:73:0d:0b:04:c0:93:42:98:59:
                    51:21:1f:4e:31:31:bb:71:d6:7a:a7:97:0e:cc:7d:
                    08:86:8c:2f:5e:ee:18:a9:66:ba:40:cc:c3:d0:c7:
                    8d:52:5f:84:fe:3c:37:59:43:3b:2d:3a:f1:fc:52:
                    7d:c7:5d:55:45:43:26:04:6e:91:2f:02:51:6a:26:
                    e2:e5:29:70:3a:f3:a9:2e:90:38:b0:2c:a8:be:9c:
                    69:a6:97:86:15:31:6f:e0:ef:7a:d1:6b:a6:73:48:
                    b4:07:ad:04:14:f6:a5:eb:ac:21:32:f8:a8:0c:be:
                    72:ce:83:7f:75:db:9e:2d:79:89:ab:7b:d5:0c:7a:
                    80:55:22:6d:61:71:fd:83:fa:81:ce:a6:36:ac:f1:
                    c9:3c:97:02:e7:9e:9a:31:f7:34:ff:d8:ee:ba:65:
                    a5:dd:51:b9:ef:5e:e8:01:e7:4c:97:6f:ba:fb:fc:
                    e0:88:b7:0a:de:ea:ef:24:a0:a3:a9:78:69:7d:3e:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:7C:C5:B8:54:02:48:27:05:30:FC:DC:DE:B0:8F:8B:D0:4B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d65ea4a-75a9-396f-aebf-a002a1cbda58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:28:7d:36:ac:73:15:9f:0c:a9:11:35:d7:b6:b1:f4:3d:ad:
         3b:a4:42:e3:05:b3:1f:5c:3b:ab:ed:2f:5c:61:19:a3:99:0e:
         1c:99:09:9c:8c:aa:11:9d:4c:c8:a7:b7:48:1a:69:de:ee:37:
         b8:41:41:f2:41:68:a4:2a:d9:af:3e:d3:84:52:9b:35:71:e6:
         d0:21:51:d0:fb:73:2a:2a:34:12:56:0a:53:3c:e6:17:34:51:
         ba:3c:d8:77:a4:33:34:e5:ce:5b:50:38:71:ff:ef:77:7a:e1:
         3f:9a:d2:e5:64:86:58:ad:e7:f4:68:2d:23:70:bb:a5:f8:b5:
         ee:22:f6:67:ab:f7:05:83:15:9c:ac:ad:e2:5f:75:fe:fe:06:
         0e:04:26:a6:7e:cb:b4:42:ef:d5:72:92:44:3d:24:48:fc:df:
         d5:f4:7e:de:47:be:12:e3:cb:ac:0a:84:6e:0f:0d:5f:d7:d3:
         71:c7:13:13:ac:4e:df:4d:4a:59:1d:50:e9:1e:f3:7a:a5:c6:
         11:aa:db:a3:06:11:80:b6:c7:f7:55:c0:f6:8f:e8:33:c6:30:
         5b:0d:26:99:0a:a3:c4:7c:72:f8:71:e4:55:62:64:45:52:12:
         3a:a3:d0:f3:2e:3b:6e:34:2d:67:a0:ac:0b:d3:1d:f2:ee:5a:
         8e:d5:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:56 2024 by rpki-client on console-fra.rpki-client.org