Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f701af8-6eba-3c96-bc00-1e222896d8bf.roa
File:                     7f701af8-6eba-3c96-bc00-1e222896d8bf.roa (raw, json)
Hash identifier:          z5lgzm7nqLiS/thDlJgqiMSCcgrwNzy1/SSFMfvQyIM=
Subject key identifier:   97:1A:BE:56:9D:9E:71:77:C5:FE:52:6F:C8:59:9C:48:36:D4:7C:3B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F2BA350432151BE9C93FE0C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f701af8-6eba-3c96-bc00-1e222896d8bf.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     9312
IP address blocks:        23.230.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:35:04:32:15:1b:e9:c9:3f:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=0565310e-9535-4960-b662-050f1f710f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:82:74:6e:71:2d:ab:99:1a:b2:c0:46:60:
                    9d:06:83:eb:74:28:7a:d5:3d:1c:6f:1e:5c:18:c8:
                    0c:9c:a6:90:4f:39:63:e2:47:48:47:a3:7f:1d:30:
                    a0:01:dd:19:41:45:8d:2d:6a:38:67:34:f8:ad:c9:
                    64:b5:67:d0:84:98:60:d3:d3:58:e4:f2:13:dd:b8:
                    2e:4e:17:1b:56:79:62:22:23:cf:63:ef:7a:35:e5:
                    a7:64:13:bd:07:9f:37:8e:e6:a7:f6:3f:8b:d9:cd:
                    cc:33:d8:4b:fd:7b:56:cf:36:70:6f:19:a1:91:25:
                    82:35:ee:e5:85:cd:81:82:36:31:a7:d6:7d:e6:86:
                    ee:33:c8:da:32:b1:b5:4c:3d:ba:6c:3c:06:15:41:
                    c3:88:c1:d1:e7:ed:6b:fd:71:7f:b3:d1:d4:7f:34:
                    82:36:7f:3d:e9:5a:62:81:e6:b5:00:4a:06:bb:9d:
                    70:03:a6:5a:5a:4a:b0:ac:11:ab:08:b5:15:34:e3:
                    dc:bf:87:62:b4:77:51:69:42:ec:d2:a5:b0:d2:44:
                    dd:e8:e3:9f:7c:1b:19:fc:e6:56:1f:4a:8d:04:c1:
                    89:8a:49:c6:b5:a3:b7:7c:5c:ff:a3:1a:9f:b6:aa:
                    c3:8b:df:a4:61:46:86:28:31:b1:28:1c:14:53:12:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1A:BE:56:9D:9E:71:77:C5:FE:52:6F:C8:59:9C:48:36:D4:7C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f701af8-6eba-3c96-bc00-1e222896d8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:70:45:b6:ee:02:5b:bf:4c:30:1d:b0:f3:a0:71:e9:21:
         5e:d8:b2:e8:60:2f:26:e0:f4:1c:0d:b8:7d:28:c4:a2:e5:eb:
         50:1d:4d:d8:0b:c5:9c:a3:68:50:ca:1b:63:38:ed:21:ae:d4:
         d8:24:49:75:f2:2a:0c:14:2a:60:b9:9b:67:39:10:28:f7:6f:
         0c:29:42:67:c4:a4:ff:8c:57:22:c8:5c:e8:88:0b:93:6c:a5:
         0b:6a:57:fb:23:6d:7e:1d:49:b2:e4:b5:70:10:c6:74:7a:89:
         15:cb:f8:54:f0:c1:1d:0b:f9:d2:b0:52:76:ca:d2:ca:cb:75:
         c4:1a:5d:0d:e1:75:d9:d9:d4:ab:ba:d2:1a:67:34:bd:5a:76:
         e1:7e:a2:29:1b:4d:89:f3:0a:67:35:b6:6d:63:8f:ed:84:17:
         03:e0:12:df:9c:3d:aa:48:b5:d9:56:e9:bc:b6:d2:11:f4:b3:
         fe:75:84:43:bd:4e:b0:52:44:05:6f:4f:55:23:f1:f8:36:c0:
         71:02:41:14:b3:46:6d:ed:bf:cd:66:8f:6d:4b:a1:ad:51:a0:
         25:02:fe:f3:e6:45:09:cb:8c:52:ed:0a:40:36:8c:2e:6c:40:
         8a:53:d5:48:14:09:6c:ba:68:39:2a:4e:49:64:b0:17:3b:86:
         cb:81:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:59 2024 by rpki-client on console-fra.rpki-client.org