Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8bb698f4-8882-306b-a37a-1a0a111d5801.roa
File:                     8bb698f4-8882-306b-a37a-1a0a111d5801.roa (raw, json)
Hash identifier:          Cndc8kVfoRoT4jnKN/St0PBrLW+ucGpADQ68n3Os8uY=
Subject key identifier:   1B:6F:CD:FB:76:A0:9C:73:38:F0:1D:56:C4:96:BE:90:BF:A9:FC:97
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5DF9152C9394565DA1580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8bb698f4-8882-306b-a37a-1a0a111d5801.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     19157
IP address blocks:        23.86.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:df:91:52:c9:39:45:65:da:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=62f45ac0-42c7-42c1-890d-2bf8ab48073f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ab:c9:f0:6e:55:18:f6:1e:1f:e8:ea:f7:53:
                    bc:f3:4d:86:1e:ce:b9:28:f0:77:5c:10:66:9f:cb:
                    70:d9:f0:22:d5:27:e1:c4:f1:4b:fb:69:d5:b0:c7:
                    ea:a5:94:9d:28:69:4b:5b:26:d8:56:43:76:b8:31:
                    02:6c:bf:f6:61:b1:58:a1:5b:69:7f:94:3d:c5:14:
                    97:27:b1:95:ba:42:57:f0:bc:82:ae:ca:0b:9b:64:
                    2b:27:a7:9c:92:8a:20:b3:42:a5:d0:f2:e5:c3:b2:
                    ec:a5:fc:0a:f1:c8:a9:dd:92:63:ce:ba:d5:80:a4:
                    51:d0:18:02:1b:0a:97:72:12:93:09:de:3d:74:4f:
                    a0:89:19:39:a6:17:0f:94:e1:35:b7:39:0b:ae:ac:
                    47:64:94:12:78:7f:a5:12:e4:af:27:25:de:e6:8a:
                    7f:81:9a:05:6e:d9:3e:02:8e:5c:ca:66:61:44:6f:
                    63:03:05:58:4d:9c:bb:d4:a2:f9:e0:e8:b9:b6:9b:
                    0e:c7:b6:d1:32:50:2b:24:45:10:a7:1e:8e:ef:3e:
                    e6:f8:14:a7:4f:11:29:27:6d:91:d5:4b:48:c1:bc:
                    60:cd:36:b7:b4:00:56:5d:d7:1c:cb:06:69:96:23:
                    f1:c2:ba:28:91:e9:75:3b:fe:72:a2:21:0a:6c:13:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6F:CD:FB:76:A0:9C:73:38:F0:1D:56:C4:96:BE:90:BF:A9:FC:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8bb698f4-8882-306b-a37a-1a0a111d5801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:29:e1:83:0a:f0:65:e7:0e:62:28:84:22:de:b2:f7:dc:22:
         65:75:40:bd:b6:c5:37:2f:8b:7f:df:e0:2e:52:0a:57:05:ff:
         e7:43:b7:5f:aa:42:f7:d2:69:52:d4:d3:9b:1f:14:ca:d5:21:
         22:76:c1:d9:3a:bf:cc:7c:4e:22:70:be:65:0e:8f:a5:37:3d:
         90:bf:d3:c7:6e:be:69:45:47:00:45:d7:7b:c5:5e:8d:11:ec:
         5d:56:bf:78:c4:53:4b:bb:21:7f:9c:ac:50:87:e4:d5:c0:1e:
         fb:49:63:91:25:a4:87:89:e9:bf:c6:46:d3:79:6d:c4:97:a5:
         2f:d2:95:d5:35:8d:66:de:07:c0:70:f4:f3:39:6f:0c:1e:c1:
         d4:13:2a:4f:a4:eb:4a:a8:7b:2b:a3:72:ec:47:41:0d:d8:52:
         92:08:55:4a:ac:8b:7a:44:4f:dc:6c:d0:6e:61:e7:51:8a:6d:
         fa:07:1b:1f:70:c0:32:48:ac:b3:3a:d0:f8:97:65:93:db:70:
         1d:a4:9c:67:93:45:f0:f5:93:63:aa:8e:6d:bc:8b:67:76:04:
         0c:fa:51:8d:8a:8f:1e:b2:35:44:4b:f2:aa:c3:31:42:21:bf:
         97:03:e7:6d:04:35:70:62:83:c1:b5:00:35:c3:c0:48:e4:7a:
         9a:42:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org