Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3196d3fb-a558-3221-b887-258cd7225048.roa
File:                     3196d3fb-a558-3221-b887-258cd7225048.roa (raw, json)
Hash identifier:          PZEfhQrXdMIlZftXWhsQT39BkSP6Bn13TDtFD7ULJ+I=
Subject key identifier:   CB:95:32:24:0B:26:2B:E1:B5:C1:4A:98:90:EE:82:19:F6:58:81:E0
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285847792BB21999789A353A3F5560
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3196d3fb-a558-3221-b887-258cd7225048.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     398712
IP address blocks:        23.227.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b2:19:99:78:9a:35:3a:3f:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=0b72a01f-f39b-4bc5-96eb-fb4d51ea31d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:90:97:8b:c8:00:ca:78:18:f5:95:9b:5f:91:
                    1a:ae:c6:ec:3f:17:ef:16:96:9f:96:a9:b2:f7:8c:
                    33:e3:be:94:c0:ec:5e:86:44:e9:e4:51:02:9a:24:
                    c3:eb:70:f3:91:2b:2f:fa:79:2b:09:b4:fb:b2:04:
                    e8:6d:97:4a:d9:d7:11:c9:88:08:78:93:ad:65:c6:
                    b2:76:93:24:3d:6d:fc:87:81:d6:f9:88:1e:0a:b7:
                    61:ba:06:9c:a9:e6:97:ef:8b:e2:e5:ce:70:c8:c6:
                    47:8f:77:82:3d:bd:59:7f:43:6c:20:f7:e5:b1:df:
                    7e:72:c3:c1:25:de:56:71:dd:79:fe:57:c9:9a:94:
                    5e:65:b7:34:a5:4f:ff:24:0a:cf:1e:e5:22:cd:aa:
                    3e:37:c0:ce:b8:d0:dd:d5:74:11:f6:66:cd:8c:12:
                    71:eb:aa:dc:3e:31:5b:b4:df:22:9a:84:a4:40:27:
                    bb:01:b7:97:d1:06:82:16:3f:20:47:7e:e7:7c:cd:
                    d2:69:a8:ad:26:d3:d7:f4:b3:bc:7d:9a:a0:3b:e7:
                    8b:d0:4e:43:30:0d:b1:a6:b1:9e:26:c5:d0:e4:2c:
                    01:e7:9b:92:51:7a:a4:11:fc:09:23:ef:80:35:f2:
                    ac:f0:d8:77:07:29:db:35:3d:5e:dc:78:40:71:a9:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:32:24:0B:26:2B:E1:B5:C1:4A:98:90:EE:82:19:F6:58:81:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3196d3fb-a558-3221-b887-258cd7225048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:85:87:9d:fb:38:1b:a6:a2:06:40:dc:58:20:0b:da:00:
         f0:8f:4b:c4:66:9c:5f:8d:2b:b7:80:f5:62:9b:d7:b1:42:b7:
         dc:dc:04:02:f1:6c:15:88:47:68:ee:f2:8e:a4:89:27:99:07:
         28:ce:0c:a8:b3:39:9f:01:b9:3a:fe:de:62:74:45:52:c7:38:
         55:58:21:c8:dc:73:09:8c:eb:94:a5:31:53:23:13:20:c2:1c:
         3a:95:01:ea:c4:80:54:65:49:b0:0f:fd:03:b9:32:a8:3d:e2:
         50:c0:53:78:f9:d9:b6:4e:6b:c9:f0:c3:78:49:a0:45:00:31:
         d2:83:dd:61:d5:c8:1d:a8:93:25:da:b6:7f:d9:b8:5d:0f:d9:
         07:0d:67:73:3d:3c:f2:32:dd:54:a0:2f:c2:2d:45:01:24:f5:
         8a:46:88:a3:a3:3d:9b:75:5b:5e:9d:cf:df:72:90:df:bf:0f:
         fa:6b:27:ae:ff:04:da:55:1e:77:05:96:98:21:71:3c:dd:96:
         59:20:23:ca:43:71:b6:e8:3b:f7:4f:47:67:db:b7:d5:21:f5:
         0a:7b:49:7f:e2:dd:a2:fc:ae:42:16:9d:8a:d9:8b:5b:07:d5:
         be:51:dd:47:ff:40:b9:f7:b2:68:38:e9:28:38:c6:f2:82:ac:
         ce:b8:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:28 2024 by rpki-client on console-fra.rpki-client.org