Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da585427-5b2a-3da9-ae33-5b40ef041aa4.roa
File:                     da585427-5b2a-3da9-ae33-5b40ef041aa4.roa (raw, json)
Hash identifier:          tEc1g/urL8dob/bs6WfWUndGigtuhrNDOlblQgCXGtI=
Subject key identifier:   41:3E:7E:F4:CE:1D:A2:8B:21:9C:C3:2D:4E:8E:9F:DF:7A:30:DB:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847EE2B976CD2B614E50BE77200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da585427-5b2a-3da9-ae33-5b40ef041aa4.roa
Signing time:             Tue 19 Nov 2024 10:50:10 +0000
ROA not before:           Tue 19 Nov 2024 10:50:10 +0000
ROA not after:            Mon 17 Feb 2025 10:50:10 +0000
asID:                     11404
IP address blocks:        23.230.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:2b:97:6c:d2:b6:14:e5:0b:e7:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 19 10:50:10 2024 GMT
            Not After : Feb 17 10:50:10 2025 GMT
        Subject: CN=72ae5fa8-c9b2-44ec-9db1-f9fb22e4ee82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:a6:d3:be:e4:08:4f:f7:9a:3e:c1:20:72:
                    2d:2c:aa:51:ef:a6:b7:c2:f3:9e:31:10:ae:f9:46:
                    f7:7d:79:21:3a:73:93:fe:5d:81:19:48:ea:04:a6:
                    1c:6b:a9:29:3d:62:5f:4e:6a:9f:d5:9f:29:50:ae:
                    29:e4:29:2c:5c:85:b8:ee:fd:e3:7b:67:4f:83:43:
                    6f:6f:4d:88:8b:54:6d:92:c2:ff:b8:54:d9:2e:15:
                    09:54:e3:1c:d4:f8:d7:82:7f:0e:26:b8:08:d6:83:
                    01:a6:0f:a9:67:a2:3f:dd:bb:ea:90:e0:1d:32:1f:
                    e8:05:ad:c9:59:52:2d:35:33:9f:b9:07:10:1b:0c:
                    20:80:5b:b5:73:fa:a1:49:43:89:98:2a:2d:69:73:
                    00:11:f0:ed:56:27:1d:fb:44:97:65:36:35:cc:1f:
                    6e:b2:72:4f:8a:d0:57:de:25:4e:1a:16:58:50:98:
                    aa:0b:9f:e1:ec:44:57:d4:c5:d5:22:a8:ae:0e:91:
                    e8:8d:d7:e6:fa:1d:38:ab:2e:dd:35:32:7e:0a:31:
                    3b:93:14:5a:6d:49:d3:2f:6e:4b:f6:ae:06:4e:7f:
                    01:53:9e:7f:dd:43:55:bc:f2:1c:01:44:31:1f:e3:
                    8d:5b:d3:7e:1b:fa:49:75:34:26:30:0a:62:a2:7c:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3E:7E:F4:CE:1D:A2:8B:21:9C:C3:2D:4E:8E:9F:DF:7A:30:DB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da585427-5b2a-3da9-ae33-5b40ef041aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d9:f5:8b:28:e9:31:d4:b8:fc:4d:b9:e9:f5:a8:2d:5b:63:
         62:f3:f6:35:23:08:52:2c:78:81:ca:5e:38:7e:d5:2b:ba:24:
         e3:90:de:63:61:ef:27:18:d5:90:8a:a8:62:3b:2d:c5:90:19:
         a5:8b:15:2b:f8:a1:33:44:61:b0:09:63:60:91:56:bc:74:c4:
         ca:fd:ca:01:75:b5:5c:11:23:79:55:5e:eb:f1:13:b9:46:ab:
         9f:ac:35:55:e0:f4:da:35:23:e3:1a:6b:6b:38:d2:a4:92:db:
         5a:ce:c0:80:f9:b3:3e:b0:1b:b9:d0:10:d6:d2:7e:f1:29:72:
         01:99:d6:0e:bd:76:de:89:78:8c:76:ea:01:8d:cc:df:cd:8c:
         b4:fa:ce:5b:fb:f4:65:80:55:a0:c4:04:3d:92:8c:1c:50:ff:
         a0:b3:78:15:b2:9a:97:b1:84:67:74:2c:47:61:84:38:6a:f2:
         5b:ff:84:6d:30:ac:93:98:9a:f2:6e:60:cc:e6:d9:b8:ae:66:
         40:f9:ab:90:73:c9:15:24:9b:a5:41:3e:68:68:12:8d:e2:d7:
         40:5e:68:de:50:87:12:77:51:7e:9a:24:ad:af:1d:6e:c0:d5:
         29:76:76:98:13:5c:76:62:d6:e7:5a:59:f4:7f:f5:e8:21:74:
         b4:f1:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:55 2024 by rpki-client on console-ams.rpki-client.org