Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/f3815c84-d6fa-3124-9599-27ddd2e814c2.roa
File:                     f3815c84-d6fa-3124-9599-27ddd2e814c2.roa (raw, json)
Hash identifier:          pQwnfz5m8fOaMTGIIYgcfN/AwQBdTNNpghHttTXOlIM=
Subject key identifier:   26:EA:B2:EA:BF:96:C5:EA:52:49:69:76:FC:4A:67:44:81:E5:30:5B
Certificate issuer:       /CN=733a751b-f4f7-4986-8389-8938fc4a481d
Certificate serial:       010D0C9F43285845857325CEFA555E3005F3B100
Authority key identifier: DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/f3815c84-d6fa-3124-9599-27ddd2e814c2.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     30514
IP address blocks:        23.168.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:25:ce:fa:55:5e:30:05:f3:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733a751b-f4f7-4986-8389-8938fc4a481d
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=cbf7e0d3-6015-4aed-b736-1ff03a913b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:46:e2:49:c9:1b:3a:54:71:ce:23:25:b2:
                    1b:1d:dc:bc:f4:d3:6e:34:b6:8f:71:bc:b3:b2:6e:
                    ea:0e:93:2e:bf:b4:6e:76:95:f5:ea:ff:11:e7:cd:
                    b1:42:15:f1:dd:eb:bb:5b:d9:75:d0:74:c3:59:b3:
                    ea:9a:f0:d3:3d:30:a8:05:56:2a:f3:01:18:6e:f3:
                    2e:03:58:6f:88:93:fb:b9:63:7c:89:5b:5e:ba:67:
                    45:55:1e:f7:88:02:44:03:23:cd:87:76:67:ce:6e:
                    51:22:b7:8e:26:b9:b5:1b:17:cf:22:51:89:44:a1:
                    85:c3:57:bd:f5:a6:7e:90:89:e7:fe:20:a8:9f:df:
                    84:da:bc:39:a6:90:89:ae:8f:15:81:86:ce:86:e0:
                    a7:f0:4f:d4:d0:d8:42:d1:8e:da:df:1b:4f:d2:c5:
                    e2:b7:87:21:7e:a3:c1:e9:d8:5c:56:81:9b:2b:ec:
                    63:e1:e8:e3:25:14:da:c6:15:d7:78:ad:5c:3c:a6:
                    81:b9:cd:22:4f:09:92:4f:d4:45:93:c8:de:44:b2:
                    63:ed:71:19:3a:f0:84:6f:c2:7d:75:7e:1c:37:1a:
                    e0:95:27:a0:24:b0:cf:db:57:5a:d6:06:78:3e:19:
                    05:13:00:1e:28:46:95:27:23:15:e0:73:bf:d1:ec:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EA:B2:EA:BF:96:C5:EA:52:49:69:76:FC:4A:67:44:81:E5:30:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/f3815c84-d6fa-3124-9599-27ddd2e814c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:15:ae:a9:86:33:0b:4f:fa:ec:2d:e0:31:7b:00:99:0c:02:
         b9:e5:75:19:4d:8c:5d:b5:17:a5:22:71:1a:97:02:6f:23:d3:
         df:93:af:fa:88:76:86:d3:6e:c3:08:cf:73:01:a5:b8:97:6f:
         6c:8a:53:00:b3:1b:21:bb:1e:5a:37:ca:49:ed:2f:2e:ff:d6:
         6c:cb:53:8e:a1:80:81:fb:b4:31:b8:56:4c:7f:11:2c:f6:c2:
         70:1f:80:ec:21:65:e5:af:aa:0e:9f:8e:9b:22:c4:64:11:9d:
         46:9e:07:fd:48:03:83:a9:7f:76:6e:c1:64:69:2f:8e:77:69:
         95:4b:5d:2c:db:78:9f:80:d0:71:59:f6:d4:ae:60:9f:99:9d:
         7e:8b:2f:3a:71:fb:f6:35:49:f5:88:1e:52:35:1f:08:7e:66:
         78:16:5b:ca:1e:ae:e1:2c:da:cf:a4:b8:88:89:ab:6f:8d:88:
         ce:dd:76:01:55:e3:fb:c2:d6:82:c5:92:f7:37:2c:d3:27:2d:
         ec:20:da:bd:0f:48:24:dd:bd:2d:25:63:68:fb:55:cb:a6:0d:
         8a:55:77:2f:a9:f2:0b:52:be:f8:94:00:e0:9b:f1:c8:48:64:
         58:10:7e:c7:5b:aa:64:ae:29:c3:27:43:64:56:7b:43:5c:23:
         ae:3c:d2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:33:34 2024 by rpki-client on console-fra.rpki-client.org