Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/7ad54727-b676-3fe3-9d60-5a838f7b7b88.roa
File:                     7ad54727-b676-3fe3-9d60-5a838f7b7b88.roa (raw, json)
Hash identifier:          vQo+wRwdYB/7fVwujJJsKW5YBLlaSXUGmaKniqhshnk=
Subject key identifier:   E4:F1:C7:08:44:BD:6C:8C:29:8A:77:38:6E:D4:07:26:D4:5C:7D:B0
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F432858459633647D735F4A8ECE47B2C0
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/7ad54727-b676-3fe3-9d60-5a838f7b7b88.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     398143
IP address blocks:        23.154.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:64:7d:73:5f:4a:8e:ce:47:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=8a95d988-c231-4d17-a885-765ce1f68910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:04:31:91:3d:51:a3:6d:28:66:a9:e5:3a:
                    77:94:6f:e3:e3:60:5e:36:d7:4d:3c:6f:de:7d:96:
                    5a:95:d0:bf:6f:db:48:a9:76:81:6f:c7:62:61:68:
                    c5:7e:07:2e:68:d6:ca:93:b9:fc:d7:95:fe:b2:e8:
                    a8:01:e9:da:6b:85:21:31:d9:15:1d:88:61:2a:d2:
                    9b:f1:7a:05:65:91:b1:49:81:84:6b:4e:df:7c:2f:
                    dc:23:bc:e0:66:18:22:a0:e9:a7:47:e5:e8:92:26:
                    7a:c1:93:c2:41:89:88:15:fb:fe:54:72:1b:66:d4:
                    0c:bc:b3:26:e2:c2:af:ec:93:53:63:d1:b8:57:4e:
                    1c:a7:0f:0f:09:f1:86:20:ef:64:01:18:c6:d7:b5:
                    0c:c1:3b:9b:13:b1:60:44:dd:22:ec:b1:88:8a:c6:
                    f2:c6:29:55:f5:de:d5:72:d8:a0:3a:bf:2f:1d:c8:
                    ab:f9:4d:9c:0a:8e:ad:cf:b0:73:82:b4:2d:c1:9d:
                    0a:7a:b1:11:6a:75:e5:56:70:c5:b9:50:00:3c:52:
                    2d:10:29:25:9c:44:cc:9b:92:14:cc:0d:5a:5b:76:
                    7a:09:55:f2:58:4c:4d:19:f0:59:fd:c6:4c:27:c2:
                    a1:55:b0:a4:e9:ea:a3:96:de:92:5d:1d:56:68:07:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F1:C7:08:44:BD:6C:8C:29:8A:77:38:6E:D4:07:26:D4:5C:7D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/7ad54727-b676-3fe3-9d60-5a838f7b7b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0b:0b:cf:45:aa:7c:6b:bd:65:dd:c3:5c:1f:83:ef:4f:d4:
         f3:0a:e9:94:d0:f0:02:82:c0:64:69:6e:5d:12:08:59:5d:ff:
         55:1a:63:77:30:25:68:0b:da:0c:24:c7:73:b3:50:22:d1:49:
         06:2a:53:2f:76:ed:eb:f5:bd:de:5e:b8:01:47:0c:6a:b3:49:
         26:65:c8:6c:4e:b6:3b:05:ff:cf:6c:81:d1:30:a7:93:03:63:
         ec:f9:8c:a7:f2:51:ce:f0:22:08:11:f8:9f:9a:a2:35:61:69:
         37:e0:94:17:97:5b:26:07:e7:31:cb:b4:2d:6e:ce:3c:a8:2c:
         24:80:bc:61:33:25:61:e3:1e:21:4b:12:13:87:7f:49:bd:7f:
         3f:25:b7:cb:7f:1b:35:89:7b:63:0c:75:07:e2:12:f9:1e:fa:
         85:a7:9e:f7:7d:f8:20:fb:97:51:ec:99:8a:f3:6b:ae:0a:23:
         97:e5:c5:da:e7:fb:ef:9b:f7:97:6e:79:b2:a4:de:34:0a:48:
         dd:c6:ec:e8:9f:7f:41:45:23:03:19:5c:65:b1:01:d2:30:8d:
         ba:88:ac:6b:c5:99:41:a3:96:55:18:0c:ce:4b:47:c8:0f:1b:
         5d:b8:3c:d5:8f:61:af:dc:e2:72:29:3e:cf:34:b2:9f:95:48:
         e3:00:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:22 2024 by rpki-client on console-fra.rpki-client.org