Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa
File:                     8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa (raw, json)
Hash identifier:          bIS4m7wocFLnAB7kdQjikZFfTxVbBbL+Y2FyvQvJf30=
Subject key identifier:   64:FC:07:48:E5:00:48:4B:F2:AF:4D:C8:75:82:0A:5E:69:9F:3E:08
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F43285847AB6C1D2530026B3962214900
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     33436
IP address blocks:        23.165.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:1d:25:30:02:6b:39:62:21:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=9cf0960a-1a6b-415f-bdc7-51cdf64f226d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:a5:8f:52:ef:28:74:60:24:45:a7:87:c8:
                    ff:39:67:93:98:47:00:32:64:2f:64:43:b7:14:d6:
                    2d:4a:29:4a:7e:23:b6:fd:3d:33:39:1f:a4:2d:65:
                    8a:c4:70:90:05:64:f5:e7:5c:18:96:63:f3:7c:10:
                    5f:96:78:f5:40:c0:ac:43:01:d9:5a:86:ac:82:9d:
                    95:92:11:f8:62:ff:8e:bf:9e:72:2e:4b:a3:68:a9:
                    25:bd:e0:7c:a0:5c:c5:f3:0c:4a:0c:85:8d:d6:46:
                    a6:e4:a9:bc:47:c7:ad:c3:e3:1a:27:09:ca:f1:7a:
                    11:cd:5c:25:cd:21:81:23:8b:03:a2:51:4f:f4:6c:
                    5a:cc:b7:ea:1e:86:0f:c8:56:1a:c8:d2:77:51:89:
                    ed:88:db:04:c2:e4:a1:3e:6f:00:20:c6:93:47:85:
                    1a:39:d7:fb:e2:30:d6:41:1c:ad:8c:bb:ee:1c:b7:
                    e3:cf:69:9b:aa:a0:cd:50:15:d6:6a:f3:18:18:96:
                    44:75:01:da:2e:d0:0f:eb:36:9f:fa:0e:7f:c4:f3:
                    20:86:12:12:e8:6f:66:92:bc:a1:07:b7:ab:52:dc:
                    49:6a:d9:60:fd:b7:df:0e:76:3e:4b:5e:5f:22:ff:
                    b5:52:9b:89:a0:bb:69:a2:9e:3f:f9:e2:55:3f:2a:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FC:07:48:E5:00:48:4B:F2:AF:4D:C8:75:82:0A:5E:69:9F:3E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e4:29:18:ce:b7:ea:5b:80:b3:49:87:4a:39:e8:e5:38:31:
         f9:ce:59:57:af:69:77:f2:df:0f:12:49:f5:1a:83:32:ca:84:
         f9:93:66:4d:e4:c9:c4:38:47:74:41:19:4b:fb:3e:2f:5e:c8:
         2f:21:8f:f9:4d:d9:ac:00:cd:5f:44:b3:16:56:72:f9:7d:01:
         1d:61:21:ab:7e:8b:66:7c:39:83:9e:ed:73:23:31:85:f7:80:
         98:b9:e5:53:80:76:77:19:09:66:7a:5c:63:03:c3:72:c1:9a:
         37:87:e0:a5:f8:01:79:d7:fa:78:6f:d1:96:74:9f:61:34:39:
         04:3b:5c:7c:6f:df:8e:c3:0a:cb:15:36:b7:fb:b5:a4:75:c6:
         ad:ff:9a:a1:4d:85:0f:38:a6:31:96:a9:7d:18:ae:db:7f:7b:
         78:38:40:39:36:cb:a5:34:25:b8:4e:de:c7:7f:87:c5:16:2d:
         10:3e:4b:a2:d4:ea:87:21:0c:44:99:e5:34:62:ff:fc:7a:d8:
         a0:20:9f:14:5e:cf:67:e6:42:d8:bd:81:5d:16:9d:5d:a7:e1:
         c0:ac:f4:6c:34:86:93:20:62:1a:58:ca:1d:c5:e6:70:37:cd:
         4d:02:43:1c:7a:5f:5a:01:82:c9:58:84:51:27:45:99:45:31:
         67:99:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:00:04 2024 by rpki-client on console-fra.rpki-client.org