Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/f3815c84-d6fa-3124-9599-27ddd2e814c2.roa
File:                     f3815c84-d6fa-3124-9599-27ddd2e814c2.roa (raw, json)
Hash identifier:          cDtep8GrPVxzgyYnKP/ZtPkMlOSc33OQ+WOms5Xn7s8=
Subject key identifier:   7F:A7:09:BB:F9:1F:9D:E8:D9:6E:69:F0:F3:31:2A:00:89:0E:9E:B9
Certificate issuer:       /CN=733a751b-f4f7-4986-8389-8938fc4a481d
Certificate serial:       010D0C9F432858474585FB25331352A08DB9C5D0
Authority key identifier: DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/f3815c84-d6fa-3124-9599-27ddd2e814c2.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     30514
IP address blocks:        23.168.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:fb:25:33:13:52:a0:8d:b9:c5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733a751b-f4f7-4986-8389-8938fc4a481d
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=d94c6697-edd8-4879-adb1-e81cd7f7e3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:b4:19:d7:56:e9:73:3a:1f:79:97:59:37:
                    52:cf:8b:17:e8:50:4c:93:eb:4b:c8:44:1d:ec:1a:
                    a4:b5:65:31:4e:c6:90:3b:26:2d:b1:4e:3d:e2:3b:
                    07:c7:46:62:62:45:7f:73:b8:38:75:42:19:b4:42:
                    b8:9d:3d:8a:1c:7d:ef:45:ee:1e:92:55:ce:9d:c3:
                    f2:5a:32:8a:65:cc:3d:5e:43:15:36:64:2a:91:3f:
                    c6:24:24:32:63:37:f8:55:84:4d:f6:55:96:3c:74:
                    e8:1c:4a:0a:8a:a1:6f:7c:82:35:24:19:d1:b9:c6:
                    89:43:d1:39:46:b3:11:b4:a3:03:fa:87:80:57:64:
                    cf:d5:8d:b2:5f:d2:63:1f:5c:24:5f:f9:e5:f4:fd:
                    14:0b:0a:82:65:3e:f9:c5:83:a1:75:9a:75:09:35:
                    8c:6c:72:b9:9e:0b:09:d2:0e:7d:5d:82:f7:ce:0b:
                    09:10:f9:d3:78:65:05:6a:eb:c9:cf:d0:ee:0c:98:
                    21:2f:39:2e:87:4d:a6:0b:a6:9f:7d:8e:2f:89:a8:
                    e3:89:eb:bc:93:f9:24:f2:b1:2c:19:60:b8:73:9b:
                    11:ea:f9:f7:8e:07:c8:e2:48:16:7e:d6:ff:20:7f:
                    ec:25:a0:62:4b:27:85:ed:7a:a1:ea:e2:d4:f8:9b:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:09:BB:F9:1F:9D:E8:D9:6E:69:F0:F3:31:2A:00:89:0E:9E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/f3815c84-d6fa-3124-9599-27ddd2e814c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:cb:2d:65:d7:e9:32:7e:8e:68:05:01:de:f0:68:28:44:89:
         4b:77:b5:87:66:8d:6b:f5:66:b3:ec:eb:e2:ed:19:1f:5b:0f:
         ec:81:94:6a:10:82:10:39:78:05:a2:cd:58:a6:3a:10:50:ab:
         77:b9:51:02:e6:a6:63:b8:91:63:73:b3:19:78:2d:71:25:88:
         52:c0:a3:3f:19:7f:e1:6a:ad:3d:70:c6:2b:21:7a:88:8f:27:
         17:d7:1b:23:82:6e:f1:1f:9a:a3:ba:ed:2c:3f:09:28:95:85:
         ec:80:95:6f:bd:ec:62:96:62:29:f9:8d:d2:44:a5:73:fe:e9:
         23:a5:77:ca:df:2d:8d:76:33:63:01:35:a7:6b:40:f3:e9:1c:
         44:e6:31:eb:04:19:3b:79:09:25:d4:a5:dd:8a:98:f0:34:38:
         17:17:eb:6c:1d:6b:65:41:6b:21:1e:38:7e:bd:c1:c9:d0:60:
         cd:fa:68:cb:a2:3f:00:0f:52:91:dd:c6:72:3a:b5:cc:a4:99:
         f2:39:5a:79:ea:5a:7f:ac:6c:eb:f2:d7:d1:f9:7d:cc:08:bc:
         24:1b:e0:1c:ab:1f:38:09:22:03:b8:5e:42:01:51:79:af:5e:
         51:59:fa:fd:d4:21:bb:89:93:23:63:fe:5c:ea:ea:97:69:4a:
         4d:e9:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:53 2024 by rpki-client on console-fra.rpki-client.org