Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa
File:                     322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa (raw, json)
Hash identifier:          rNubtuBKygSa69AR6ldhGoLtHFfMHlDCEK2NQHPNha8=
Subject key identifier:   6B:F8:8B:37:6A:6E:C3:45:9A:85:C0:A9:EF:0E:A6:D7:2B:8A:1C:31
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F43285844FD164902AF0D51CF1DE56A00
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa
Signing time:             Fri 23 Feb 2024 16:43:33 +0000
ROA not before:           Fri 23 Feb 2024 16:43:33 +0000
ROA not after:            Thu 23 May 2024 15:43:33 +0000
asID:                     53856
IP address blocks:        23.174.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fd:16:49:02:af:0d:51:cf:1d:e5:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Feb 23 16:43:33 2024 GMT
            Not After : May 23 15:43:33 2024 GMT
        Subject: CN=967df890-3ee7-4143-a38d-710eb9e42c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:21:98:1d:31:a9:10:44:ca:de:5a:21:37:
                    5e:d3:b0:b0:48:3f:d5:7a:e1:13:3a:16:da:37:66:
                    b3:99:bf:1e:a6:48:d9:83:e2:4e:94:44:08:87:93:
                    e4:34:41:f8:9f:42:73:29:30:35:61:0a:4a:8f:7b:
                    bd:79:d9:37:29:47:e5:53:a2:3e:31:78:8b:81:64:
                    4f:74:83:1e:0e:f8:81:ff:7d:e3:86:e8:31:8c:aa:
                    40:6c:dd:90:60:af:f1:ea:f5:f9:13:09:3e:18:2d:
                    47:bb:d8:e7:6b:0f:17:74:98:a9:52:c2:d3:5c:56:
                    8f:a1:be:b7:9f:d0:cb:1c:b6:5a:6a:ed:9a:51:8d:
                    e0:07:6e:81:ae:b5:51:ba:99:2b:4e:e3:b5:98:7f:
                    c4:3b:24:5f:f5:6b:06:27:8a:a5:66:3b:03:ae:4c:
                    e2:d8:90:e9:fa:1a:02:b7:2d:65:b6:39:91:b5:e0:
                    73:14:d3:9b:de:5c:ce:61:07:b0:d3:58:a0:b5:82:
                    14:69:bc:3d:a1:fd:64:3e:7e:aa:f4:2e:cb:03:9e:
                    24:99:42:8b:36:ae:c5:05:a0:05:2a:01:bf:6d:a9:
                    95:c1:ef:4b:99:14:aa:49:0f:c2:26:e5:32:4f:b2:
                    95:20:88:00:88:a8:11:92:8b:9f:d8:ff:02:6c:e1:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F8:8B:37:6A:6E:C3:45:9A:85:C0:A9:EF:0E:A6:D7:2B:8A:1C:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/322cbd0c-4d36-306f-ab3d-e081df5fe1fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:be:c0:73:38:6d:40:9d:5b:f1:2e:91:71:86:91:fe:01:32:
         f9:59:17:e6:ce:d4:53:80:1d:3b:4b:a9:9d:78:64:77:f1:bb:
         da:6a:b4:9e:59:9a:63:8c:a8:4d:68:a0:41:f6:c7:fc:d3:ac:
         12:43:72:fd:ea:e5:1b:25:fb:69:dd:11:51:f6:3b:32:14:c2:
         96:0d:68:2d:b4:4d:ab:f4:b8:ac:e8:4b:3d:a6:8b:23:bc:33:
         49:97:15:a5:d5:5a:c6:ab:1c:83:1b:ff:52:9c:11:1d:dc:a6:
         28:2b:40:d0:8e:10:f4:59:95:36:12:d1:f1:63:6e:de:a7:1c:
         88:2e:b6:62:26:eb:af:6a:91:c8:91:38:dd:d9:30:8e:a7:07:
         dd:ae:ec:37:40:80:69:ea:2b:f7:42:b4:33:d8:39:c5:1f:de:
         42:bc:7d:c8:cb:47:1e:a9:21:92:fc:f5:83:a0:3e:e0:fe:e8:
         5e:53:54:bb:f7:6a:2d:76:96:3f:fa:5e:0b:8e:2f:eb:5a:4e:
         20:7d:07:e0:59:e8:a2:09:0e:4f:fc:1d:08:9a:ed:ee:b2:72:
         01:ca:ce:25:e5:ee:76:90:7b:f8:a0:c5:f8:b6:28:a2:a3:58:
         dc:03:4e:75:e2:be:b1:4f:8c:12:93:66:4d:6b:3b:df:53:73:
         e6:6f:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:36:37 2024 by rpki-client on console-fra.rpki-client.org