Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa
File:                     8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa (raw, json)
Hash identifier:          9p/abDA/f++RHUmtxzSlOh0qXxW/cke/0aADWWCi8KM=
Subject key identifier:   EF:81:7F:54:5D:F6:81:94:F3:3D:38:B2:78:4F:09:87:D3:D9:BC:B7
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F432858450D2788A1C53CA261880FEBE0
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa
Signing time:             Thu 29 Feb 2024 10:51:14 +0000
ROA not before:           Thu 29 Feb 2024 10:51:14 +0000
ROA not after:            Wed 29 May 2024 09:51:14 +0000
asID:                     33436
IP address blocks:        23.165.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0d:27:88:a1:c5:3c:a2:61:88:0f:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Feb 29 10:51:14 2024 GMT
            Not After : May 29 09:51:14 2024 GMT
        Subject: CN=204c4d3b-885f-46f5-b670-aac0ccdcd841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:56:51:52:83:5d:9d:dc:29:f5:b2:c5:01:
                    d9:43:b3:0d:ed:46:f9:4e:d1:c4:24:97:7e:93:cc:
                    8e:a8:4a:62:3c:c4:f0:53:fd:d0:73:86:ed:52:92:
                    7b:57:03:79:21:48:42:95:69:75:fd:ec:53:c4:d2:
                    d8:89:67:6e:65:df:f2:24:ae:46:04:16:b8:ec:dd:
                    13:b3:c5:09:3b:5d:2e:d5:73:c3:c1:aa:e3:a0:d8:
                    df:2a:3c:cf:5f:10:87:ff:17:46:e3:55:3f:22:4b:
                    dd:c3:8d:e5:27:85:4b:f5:3c:90:03:3a:eb:ac:c3:
                    54:c9:e5:18:9b:82:e5:12:85:5c:0f:ca:67:20:9c:
                    f5:71:8c:1a:ba:73:12:cf:e6:6e:f6:3c:dc:97:3f:
                    48:68:8b:7b:2f:57:a0:b1:e2:e8:55:b6:91:1c:9a:
                    7e:e2:44:0d:e4:dd:a5:28:5b:86:6d:9b:b5:48:d6:
                    5e:a8:c7:ef:28:66:b0:79:5f:e2:7d:04:a0:09:55:
                    46:ff:e3:d0:67:31:74:bc:a1:73:be:0c:be:f3:be:
                    8b:c1:a6:50:f2:6a:31:57:14:12:7f:6f:d1:80:39:
                    75:c5:5e:a7:48:7b:7d:85:f7:5e:df:96:86:89:81:
                    2a:ae:07:56:7b:d8:bb:ba:33:14:7c:70:1b:61:23:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:81:7F:54:5D:F6:81:94:F3:3D:38:B2:78:4F:09:87:D3:D9:BC:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/8d1772a6-bced-34dd-ab8e-aaddde9a2a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:47:34:67:80:f7:cf:32:27:6b:5e:44:ad:c1:fa:5e:86:50:
         1d:56:b2:9f:44:a4:41:17:e3:a0:4c:45:f2:18:2c:f3:1b:33:
         1a:2d:4e:bb:bd:33:de:95:a4:68:fe:d5:d2:69:89:bf:e2:a2:
         32:69:b3:e4:4e:7b:7d:f9:50:f5:1f:8b:34:6e:e4:65:98:0d:
         7a:48:60:11:ca:e3:80:8c:41:ce:3f:87:12:08:72:80:d2:57:
         8f:ef:44:61:fc:6a:fb:d5:1b:92:24:71:28:c7:d8:5e:60:9b:
         16:99:4b:2b:b7:fd:4e:70:49:0f:43:ad:9c:b0:5c:51:a7:78:
         28:0c:45:6c:09:85:b8:59:5a:76:04:09:29:22:72:67:d8:54:
         34:4b:ba:0a:36:df:0f:f4:46:0f:6d:f3:24:6c:f3:53:57:73:
         f1:5d:ea:4f:3e:56:1e:ef:04:1e:e7:e1:18:b5:d3:22:1d:7f:
         b0:11:29:7c:78:84:43:a2:13:3f:13:d6:d9:1c:63:0a:89:58:
         f3:89:63:b3:ab:6c:f7:21:1c:8f:b0:6a:f4:c3:45:c1:e7:3d:
         1f:5a:d6:b9:fc:72:96:c9:70:a1:ba:5a:38:4e:17:a9:69:41:
         b2:31:85:6e:76:54:d5:fb:e6:f1:7b:63:64:12:04:b8:3f:a9:
         92:c1:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:31:33 2024 by rpki-client on console-fra.rpki-client.org