Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
File:                     7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa (raw, json)
Hash identifier:          06e3PH3KaEs/7hhnBXgjfmB80ZNyKuszocoo+ecKzpw=
Subject key identifier:   1F:69:A8:D1:9F:80:FF:E7:EB:99:CD:29:99:78:24:7A:1F:4E:A2:D0
Certificate issuer:       /CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
Certificate serial:       010D0C9F432858473A5B84D9F9A98E25E5C8AA80
Authority key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     398898
IP address blocks:        23.168.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:84:d9:f9:a9:8e:25:e5:c8:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=9b751e55-22bd-4f64-a71d-d7be6be53f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:7b:cb:2b:ce:9f:e7:a4:bf:c2:8c:4b:37:
                    c2:c7:34:e9:c8:87:3f:46:57:32:10:f7:5f:f6:99:
                    f1:81:fe:9d:d0:4b:26:4e:ef:96:1e:e0:de:b3:5e:
                    6c:c8:fe:30:fe:95:94:24:36:b2:11:86:1a:80:4c:
                    9e:7c:d6:3a:e7:a0:c8:2b:de:75:14:91:94:6e:4c:
                    ae:bf:7d:ff:39:42:0c:ed:fe:25:59:39:01:fe:68:
                    36:df:53:80:cc:ea:e0:5e:be:f0:69:80:79:88:c4:
                    75:6a:5e:a4:b9:ea:83:fe:59:4f:86:f4:90:20:52:
                    7e:a0:cf:50:21:f0:be:b2:6b:00:d2:1f:c1:21:32:
                    f3:c9:5d:54:31:83:d5:33:dd:fc:0f:53:b0:17:f2:
                    db:0f:3a:dc:71:a9:60:2f:1d:fa:9c:a8:52:cc:49:
                    65:b5:97:8f:1e:5b:da:53:fa:21:61:32:c2:4a:8c:
                    75:d4:d3:d4:93:2e:f0:5f:bd:cf:8a:19:0d:bf:42:
                    8b:b0:66:af:14:6f:9c:12:94:04:03:e4:ff:97:fc:
                    50:af:2e:be:a4:5f:7c:59:6e:8b:f9:ca:8c:43:ae:
                    7a:f7:3d:f0:37:86:bd:7a:5b:f8:31:61:33:42:1e:
                    6b:c7:b1:a1:31:01:aa:d9:6b:97:64:3c:e3:8b:e4:
                    8c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:69:A8:D1:9F:80:FF:E7:EB:99:CD:29:99:78:24:7A:1F:4E:A2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl

            X509v3 Authority Key Identifier:
                keyid:0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fd:ad:42:b1:d4:d9:7b:54:5c:1b:ac:7e:2b:a3:bb:04:6f:
         92:01:8f:f8:1c:35:ab:cb:d3:4c:19:77:6e:00:4b:42:a7:91:
         3a:a9:26:f9:3b:7c:42:8d:9c:67:c6:c7:9b:e2:48:57:f6:39:
         35:b1:20:eb:f7:57:9a:c9:c5:31:78:07:0a:a4:c5:f3:93:71:
         0d:18:b3:68:4f:82:e2:27:3a:18:e4:9c:12:9c:bc:b7:3c:c4:
         b1:d2:1c:58:87:4c:59:ed:0c:cb:90:88:db:72:1a:95:b8:22:
         af:a5:e2:81:10:9c:83:80:de:92:e0:ea:02:1a:57:b8:6d:30:
         a9:a0:75:b8:75:67:6a:c2:09:e8:00:ab:26:11:d9:9c:80:25:
         5a:9b:ac:83:39:78:e4:1d:7f:65:ab:e5:2e:46:17:a2:5e:e1:
         5f:7d:aa:9e:b6:fd:35:d2:b6:97:87:a7:81:16:7f:79:06:ef:
         46:06:96:e8:0a:18:71:5e:4d:8a:c0:f5:bd:63:41:43:25:5d:
         cf:3f:14:db:99:59:aa:6e:26:f9:33:52:de:91:aa:97:4d:4b:
         e7:94:de:ca:79:1e:f5:6d:2f:b3:dd:fc:f2:3c:91:98:d9:9b:
         40:29:8c:be:23:34:25:4f:5a:93:eb:f6:b2:ea:ea:9e:47:b8:
         c5:94:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:25 2024 by rpki-client on console-ams.rpki-client.org