Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa
File:                     feaece30-d037-38af-8e64-48ea4333f827.roa (raw, json)
Hash identifier:          KvzU+UTz+Ct0zLezABJndPFS1/NnNQ0tHDqihEVx30Q=
Subject key identifier:   3E:02:A7:32:FD:AF:BC:B2:19:6C:B9:BF:2C:A8:75:F7:15:1D:75:45
Certificate issuer:       /CN=8c36215c-1577-42c1-a44f-f836bc4d03b3
Certificate serial:       010D0C9F43285847ED24C4FFF7D8FC792EF73080
Authority key identifier: 4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     62563
IP address blocks:        23.162.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c4:ff:f7:d8:fc:79:2e:f7:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36215c-1577-42c1-a44f-f836bc4d03b3
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=0fbdf685-ba2d-4a91-8b9d-7ce3e6c44fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ad:16:27:89:57:c5:d1:fe:f8:6e:be:66:d7:
                    2a:a5:19:ba:93:1e:02:3c:6d:c3:3a:7b:da:5f:6c:
                    5c:e9:f1:6e:c7:74:b8:df:53:22:4b:15:ce:81:ee:
                    07:c4:09:32:45:c5:07:b1:ef:14:65:c9:2e:07:7a:
                    cc:93:1d:96:45:75:49:3c:86:d0:00:a0:dc:68:8f:
                    70:5c:2c:3c:cc:c5:62:26:c9:52:f3:56:11:0f:56:
                    3f:5a:65:57:f1:d6:a3:65:72:3f:5d:71:9a:fb:3f:
                    56:bd:4e:18:1b:13:7a:12:28:d8:53:9b:06:bf:fb:
                    87:88:d1:4f:bc:f8:8c:54:f5:3a:58:d9:bc:42:2c:
                    35:22:b3:74:0f:17:7c:d7:dc:bc:2b:e3:79:07:7d:
                    90:88:08:f2:f1:c1:7b:6c:2c:d7:6a:83:68:bb:0a:
                    0f:b3:e6:0d:36:ed:33:01:55:af:7c:c6:d5:5e:1b:
                    01:02:b8:50:9b:b5:be:cc:3b:3c:40:65:91:5e:b2:
                    20:0a:cd:2c:a3:b2:01:c0:cc:ce:93:f1:54:bd:d2:
                    d7:c0:ea:d1:35:71:81:b2:08:d5:32:69:cc:be:dd:
                    e0:8a:8f:e6:e7:2d:c0:e8:b2:a1:88:68:bb:ef:0c:
                    ab:95:4e:e9:8b:00:6c:47:86:0b:84:33:21:59:4f:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:02:A7:32:FD:AF:BC:B2:19:6C:B9:BF:2C:A8:75:F7:15:1D:75:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.crl

            X509v3 Authority Key Identifier:
                keyid:4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:4e:04:be:2c:1a:29:04:12:cc:4f:ae:e9:01:95:03:74:13:
         25:c2:7f:64:38:c6:46:d7:76:6b:87:05:98:1d:98:b9:39:c1:
         90:b5:ec:18:29:b1:87:74:43:28:e0:9e:08:3d:5a:e0:86:5c:
         17:cf:e0:72:04:b3:fd:f0:54:33:35:03:6b:c3:5a:e9:6c:34:
         9a:4c:4a:d3:05:06:05:e0:5a:5f:0c:51:07:71:e1:5f:09:00:
         4f:4e:b2:f3:a8:d5:f9:f5:cc:da:37:be:5e:7b:cb:ee:fe:5d:
         4f:23:df:3b:c2:b3:ba:e2:1a:b9:25:23:92:32:11:8a:eb:9c:
         3d:1e:ef:0b:8d:f8:b1:f3:65:81:c8:6c:89:be:1f:23:6d:4c:
         11:d9:e6:1a:e8:79:73:27:9d:e7:ab:6e:6c:28:90:d4:2f:1d:
         48:1d:1a:25:e7:28:f8:47:83:dd:c9:d0:f5:2f:d0:e9:00:63:
         65:da:3f:cc:c7:4e:4e:ec:a6:d1:61:f8:99:b5:00:5c:2d:49:
         b7:2b:9c:d9:3c:ec:99:2c:b0:d8:6a:3b:25:7f:8e:76:8f:89:
         46:f8:36:3a:8c:0f:fb:a7:78:46:96:ef:54:ab:75:b4:b5:ad:
         37:71:de:11:ef:1b:59:24:f7:b5:2c:70:d2:c5:dc:2f:5c:a0:
         9a:7a:04:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org