Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8a162833-2c56-333f-86df-46f6eb8ce0de.roa
File:                     8a162833-2c56-333f-86df-46f6eb8ce0de.roa (raw, json)
Hash identifier:          ahKtXL3lght4NDGRWi1I8h9vbrBbEdzeBSokbsmCqqU=
Subject key identifier:   EC:16:74:50:90:FB:B7:E0:3C:73:32:5A:CD:8E:05:F7:B3:04:9E:2D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285847362B65E3D7879DF8B4211F00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8a162833-2c56-333f-86df-46f6eb8ce0de.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     30633
IP address blocks:        23.19.197.0/24 maxlen: 24
                          2607:f5b5:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:65:e3:d7:87:9d:f8:b4:21:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=8378b192-7a93-4611-9258-6499c97f3352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:15:71:2c:a3:e6:bc:e8:53:d0:fb:53:50:
                    e3:98:46:92:af:ff:0f:f5:0d:5a:b9:2e:ab:78:e2:
                    1e:ee:2c:d2:d9:5a:de:d4:60:8a:0c:a0:dd:eb:7e:
                    67:6c:11:50:ee:ff:28:7b:f0:61:12:56:f3:7b:b0:
                    55:bc:6a:7a:01:c9:2c:a9:ca:ce:e8:97:db:09:b7:
                    37:8f:fb:2d:55:4f:9f:ee:37:7e:f1:a0:3f:0d:79:
                    c2:2e:cd:fe:68:59:1b:6a:26:10:bc:28:3a:51:17:
                    da:37:14:86:e3:50:77:80:6a:7c:32:0d:b9:36:4c:
                    b8:95:c4:65:26:53:fd:f2:16:1a:01:4b:83:ee:de:
                    65:e4:5c:fe:a6:c2:6c:5a:40:62:4b:97:34:24:d9:
                    b0:7b:a6:87:a5:94:b0:12:55:f4:41:f6:49:06:77:
                    93:44:c4:bc:df:e7:2a:d4:91:e6:3b:a7:6d:0a:cc:
                    78:0c:ec:ec:0e:8f:05:d8:1b:d6:d9:26:7a:f5:7a:
                    84:e6:a9:dd:5e:6d:45:1f:d2:57:a9:d9:d6:2d:05:
                    22:a6:8c:27:95:5c:28:70:b9:bc:a8:e0:5e:53:09:
                    0a:38:0d:70:35:48:50:8a:2e:87:15:21:00:8a:ff:
                    d2:d9:c5:38:ec:3e:2a:68:4c:28:4e:3f:c3:9f:0c:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:74:50:90:FB:B7:E0:3C:73:32:5A:CD:8E:05:F7:B3:04:9E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8a162833-2c56-333f-86df-46f6eb8ce0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.197.0/24
                IPv6:
                  2607:f5b5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:7c:de:0a:f5:ac:be:33:ea:93:5a:4b:de:1c:cd:c7:de:d0:
         39:1c:be:3e:86:c9:d1:6c:85:95:91:ab:cf:04:05:21:46:d5:
         9b:37:a5:60:1b:88:64:df:37:41:69:e5:72:d1:4f:1b:da:c5:
         08:b6:04:d9:88:60:8f:4f:37:db:2b:74:57:ed:2d:02:47:94:
         a7:c1:9e:0a:15:50:e9:55:14:7e:01:cb:0b:7b:7c:c1:69:4b:
         3e:79:09:b6:f3:a8:28:a0:be:63:0a:af:9c:46:ed:03:1a:95:
         c1:f4:66:d7:d5:53:7b:73:33:b8:07:d4:38:53:98:61:26:c3:
         59:b8:5d:13:26:d0:12:26:c2:77:38:76:cc:00:35:9e:cc:05:
         ad:dd:85:52:b6:6d:f0:6a:5e:43:c6:40:4e:74:af:64:19:d3:
         d3:89:fc:6d:83:1a:28:fd:bc:7a:ab:11:ce:13:c2:e1:b6:98:
         15:96:d8:fd:f7:cd:35:82:92:e0:e9:dc:85:84:31:8a:58:bb:
         d2:a1:ad:9f:66:6a:f3:dd:50:43:86:a8:8a:ad:9a:c4:85:f3:
         fd:ee:19:10:aa:81:c0:5a:81:94:d5:10:9b:31:e0:c0:c7:37:
         71:7f:e0:35:a1:80:0f:ec:1a:2e:bd:47:94:53:de:64:5a:5d:
         ab:32:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org