Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
File:                     7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa (raw, json)
Hash identifier:          TWL0JGsCzBDmpbERWBnF2img0oHG+NGyw/o5H4TNFB0=
Subject key identifier:   57:81:C2:F4:6F:DB:FD:5B:93:07:2F:2A:25:00:4B:27:12:ED:A5:80
Certificate issuer:       /CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
Certificate serial:       010D0C9F432858457A4887BBC65C56D6EDD86B60
Authority key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     398898
IP address blocks:        23.168.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:87:bb:c6:5c:56:d6:ed:d8:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=aa5d3196-e8fd-4ae8-a37f-9a01b61b05d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:b0:e4:9c:16:bc:75:4a:05:98:05:e8:8f:
                    49:f5:2b:44:f9:99:06:6a:03:e2:ad:fc:43:87:2d:
                    7c:e9:5e:c2:16:77:87:2b:d4:ad:a8:fa:b2:08:a8:
                    75:1d:08:97:0f:4d:c3:e0:e4:c5:4e:3e:e6:e1:47:
                    65:49:4c:51:13:76:6e:6a:26:29:1e:4d:d5:42:73:
                    59:3d:65:a2:89:43:00:0a:ad:af:a6:52:0c:b5:9d:
                    b4:be:d6:41:74:a4:41:20:36:8f:52:3c:82:be:e0:
                    48:59:62:43:e2:e9:82:41:6c:c0:af:5e:b6:4e:de:
                    9f:ff:e0:ae:3b:6f:1f:f4:cd:0e:d2:84:4b:ef:04:
                    83:38:7c:8d:01:51:76:1f:b8:34:83:e4:fd:69:b5:
                    0a:5a:12:e8:84:8d:bb:14:45:e3:79:cb:5d:82:a2:
                    dc:23:83:c1:1b:bd:88:ab:d6:6c:80:84:5f:61:ea:
                    32:61:d5:81:dc:62:25:d4:e0:3f:a0:6b:14:d7:01:
                    ed:f8:6f:57:1c:5a:0c:31:f1:c9:90:9b:59:4f:b6:
                    eb:83:6a:1d:da:c1:0e:7f:fd:e4:54:72:97:6e:28:
                    ca:44:fb:24:bf:56:df:fa:b2:5a:5d:bb:21:a2:9b:
                    0c:85:9b:9a:26:ed:49:42:2a:0a:c0:b0:9c:ee:b1:
                    43:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:81:C2:F4:6F:DB:FD:5B:93:07:2F:2A:25:00:4B:27:12:ED:A5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl

            X509v3 Authority Key Identifier:
                keyid:0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:41:29:11:7c:39:a9:ae:05:a3:77:51:48:fe:49:4e:c8:39:
         57:54:27:7e:25:02:81:4a:3b:27:07:a6:a2:44:a5:66:80:1c:
         a1:d3:9e:22:0c:9f:e7:86:fb:07:75:3c:40:51:03:77:5b:d6:
         0e:14:84:aa:5e:71:1c:71:ed:5c:d0:33:b4:43:55:f4:36:00:
         32:82:4d:4e:10:50:fe:75:18:df:9e:81:dc:d4:5e:c5:b8:ca:
         41:ab:5b:32:8a:4d:16:c9:79:80:2e:48:17:9f:75:14:38:70:
         46:b3:aa:e2:42:f8:b3:fb:50:21:f1:07:b9:8f:b0:c9:1f:0b:
         01:02:a9:14:48:24:08:f4:6c:0b:f0:6d:79:50:19:56:af:92:
         b0:fc:04:72:76:74:66:c9:c7:cb:14:0f:b7:3c:2f:4f:37:48:
         f3:6b:23:e5:51:da:35:c5:d2:db:0d:bb:e3:62:9c:84:4e:49:
         56:87:ad:a3:75:98:e7:4a:e7:2f:0b:ce:6b:03:ed:07:01:04:
         2a:8c:58:aa:0b:19:89:b5:e3:bd:b8:8b:a4:5b:bb:f9:9a:f4:
         01:41:6c:e8:7f:ad:2c:ea:2f:53:cd:c7:b8:91:49:af:b0:40:
         48:a8:5f:5f:78:c0:00:0d:86:f9:3a:8b:41:38:2b:4d:66:67:
         c7:be:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:22:17 2024 by rpki-client on console-ams.rpki-client.org