Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa
File:                     41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa (raw, json)
Hash identifier:          kTiUdYP8hUhvtKdK+/IIFvfzmery7rwxYFsyjKpHP/Y=
Subject key identifier:   A8:10:08:9B:EA:16:12:B2:7F:21:AD:B8:B6:1C:4A:C1:C9:D3:1D:79
Certificate issuer:       /CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
Certificate serial:       010D0C9F43285847B3CC13D0DA48C0F50A5D4100
Authority key identifier: FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     25737
IP address blocks:        23.162.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:13:d0:da:48:c0:f5:0a:5d:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=03d4d3f5-434f-4a65-9c82-5616711e9d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:1b:6c:d4:c8:fd:bd:4a:69:19:4e:4e:59:
                    c6:bf:5d:c6:2f:4c:6e:c4:d6:5b:1f:dd:4d:1e:a3:
                    45:7b:dd:6c:2b:0f:82:c4:bc:79:64:3f:ab:71:92:
                    07:8b:39:92:77:7d:4b:b6:03:37:97:b2:06:cd:13:
                    cc:2c:31:4a:89:c1:32:bf:92:a0:e1:9f:e6:d6:ac:
                    aa:7b:82:7b:a9:1d:f4:68:3d:36:1b:81:c9:ef:5e:
                    90:f3:02:a7:2e:fd:0c:03:36:1a:e0:74:67:7c:c6:
                    32:ab:0d:5a:41:ad:7f:8c:ee:4e:b1:f7:a0:eb:d9:
                    bd:24:55:d7:fe:e7:8a:cb:2c:a5:b7:93:79:cd:ec:
                    41:40:90:85:98:7c:08:30:1d:64:1b:a0:f1:b9:56:
                    b5:6d:43:90:5b:6e:a1:7b:de:65:3e:20:a4:02:e1:
                    38:4f:42:19:36:e6:ef:cf:b4:6f:45:fc:71:ea:75:
                    53:ef:2e:ad:e5:08:f2:86:e7:ce:c6:77:4f:eb:2a:
                    40:d8:05:cc:f4:cf:0f:a3:17:e7:af:37:44:d9:1b:
                    b1:e1:a6:58:1e:2d:d7:cf:3f:78:82:71:e2:3d:28:
                    5f:91:a4:50:24:a9:33:89:96:89:68:74:bc:b4:c7:
                    ab:20:f1:10:9a:3c:f6:4c:0f:5d:a5:72:3b:81:47:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:10:08:9B:EA:16:12:B2:7F:21:AD:B8:B6:1C:4A:C1:C9:D3:1D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl

            X509v3 Authority Key Identifier:
                keyid:FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7d:0d:25:cf:4a:5c:ee:c5:b6:bc:ff:c7:ff:48:ef:87:a0:
         c6:b1:37:2b:6b:22:a6:31:16:91:b7:c0:a1:4a:36:d3:9e:75:
         34:25:ee:d4:9d:60:53:d4:b2:1f:7a:92:3e:b5:05:3a:9b:72:
         cd:8a:a6:c5:33:98:b2:e7:1a:1e:ba:24:e7:e9:d9:3c:27:3a:
         29:a7:ff:2d:2e:92:73:1a:2b:b2:c2:5c:41:2c:2a:9e:7d:d3:
         64:76:c6:43:08:75:01:92:18:1c:1f:b1:3b:4e:79:f0:72:a8:
         99:be:d2:46:28:fd:ed:d5:99:da:20:91:e5:ce:ab:cf:a3:5e:
         51:45:11:c9:c3:6f:c7:2f:ce:a7:af:43:d0:13:5b:9c:9b:11:
         f3:67:5f:29:84:8b:0a:e0:6c:17:da:a8:88:ec:d5:21:8b:9a:
         b7:0c:e1:b3:bf:06:04:97:e2:a5:ba:62:3d:3e:4f:c9:57:38:
         0b:5a:c3:60:fa:c0:9b:5f:e1:88:09:01:05:96:c5:2d:8b:97:
         ad:92:e2:d6:48:24:40:87:11:63:49:26:31:3d:9a:78:8d:af:
         5e:25:ab:86:a1:06:33:9a:ea:7e:93:ec:c2:81:4d:1a:c3:a7:
         93:4a:12:e8:0a:3d:52:c3:18:1a:1e:24:f0:be:01:5f:65:c7:
         11:6d:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:21 2024 by rpki-client on console-fra.rpki-client.org