Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa
File:                     feaece30-d037-38af-8e64-48ea4333f827.roa (raw, json)
Hash identifier:          u43kB+JdYQWq2VKg+2Mdr/zR17cku4bnAzYuesnoHUQ=
Subject key identifier:   23:AA:B4:54:DB:44:59:C2:24:14:19:94:D7:64:43:DE:7F:1B:BC:69
Certificate issuer:       /CN=8c36215c-1577-42c1-a44f-f836bc4d03b3
Certificate serial:       010D0C9F432858454C38129E153BB5D155210B00
Authority key identifier: 4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     62563
IP address blocks:        23.162.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:12:9e:15:3b:b5:d1:55:21:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36215c-1577-42c1-a44f-f836bc4d03b3
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=773bdfbf-61f6-48d4-9e50-85720ae8302e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:d2:7f:a7:47:af:fa:31:00:67:c3:dd:f4:
                    95:a7:82:d4:7f:c5:af:e3:4c:f9:b4:63:03:d2:16:
                    63:99:09:a0:28:4d:c3:ff:1f:a2:c4:8e:23:7e:91:
                    c7:2f:92:4a:1a:c0:e6:29:2f:a1:ba:b3:52:c7:0a:
                    77:cb:ab:19:cf:62:19:45:84:a4:08:4d:fd:b4:15:
                    be:52:78:21:a1:8f:fd:a0:24:d8:83:89:5d:fb:b8:
                    d9:1a:ed:29:55:33:b7:c3:7a:e0:e6:7b:ad:b3:d6:
                    ac:44:36:b3:b2:c6:21:72:ff:1d:88:5d:c0:06:97:
                    18:c3:67:75:54:ac:91:3a:9f:04:c2:3a:55:eb:28:
                    99:1c:0c:e0:8e:ec:ef:37:8f:f6:e8:a4:dd:2f:9b:
                    3d:fe:ad:5a:c9:cb:fa:80:69:bd:78:6b:b2:5b:09:
                    ab:95:2a:6e:b2:b1:49:15:f1:10:af:ab:fc:fe:8d:
                    3c:a7:6b:98:f7:2b:65:06:a0:04:3a:02:7a:de:90:
                    79:41:15:cd:c2:fe:2b:7c:42:0e:3b:c6:a2:5e:0c:
                    9c:14:b5:ed:32:9b:b2:25:bb:1a:9b:60:2e:1e:98:
                    d5:16:eb:f6:6b:a1:ca:55:f5:f2:de:7b:85:85:23:
                    f8:48:6b:16:cf:a4:f8:a8:a3:a4:15:49:be:c7:47:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AA:B4:54:DB:44:59:C2:24:14:19:94:D7:64:43:DE:7F:1B:BC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/feaece30-d037-38af-8e64-48ea4333f827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3/8c36215c-1577-42c1-a44f-f836bc4d03b3.crl

            X509v3 Authority Key Identifier:
                keyid:4C:2B:79:E4:83:8D:3F:7C:13:C6:22:20:71:AA:71:89:97:AD:7F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c36215c-1577-42c1-a44f-f836bc4d03b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:19:52:89:f4:23:a8:2e:d4:62:60:c2:b5:2a:87:25:3a:ed:
         0f:95:46:6e:64:c8:b6:7d:35:cc:09:9f:e3:bb:7d:36:2f:9f:
         24:f9:a3:2d:7a:d0:5e:c2:21:b8:f6:64:cd:7e:d5:d4:a8:ac:
         9e:44:6c:b4:db:07:70:d9:4a:ab:ca:1e:8e:92:45:65:29:81:
         d4:fc:e4:86:e9:de:d2:b4:0e:d8:76:30:0b:7e:2d:a5:e4:1b:
         6d:ee:ee:4f:1b:c9:14:67:69:ef:d9:68:71:e5:80:19:33:07:
         3d:a7:d9:3e:fc:fe:14:40:cd:a1:4b:a9:b3:22:26:28:3e:8b:
         f6:48:79:6a:26:a2:0e:75:e3:86:bc:8c:4f:d4:d0:a9:0d:fe:
         94:04:92:50:25:f1:90:7f:15:7c:0a:38:4f:ce:fc:47:8a:b3:
         da:6c:09:40:f4:e6:53:0f:02:6e:0c:a8:92:80:ae:ce:7f:4e:
         20:4f:d0:5a:3a:57:a7:3e:8f:a5:3c:75:2b:d3:b2:08:1e:33:
         b2:f1:bb:04:69:35:cb:b0:d4:95:5a:98:15:e7:e6:70:16:87:
         19:00:03:61:70:7d:db:b9:73:5a:24:bf:86:4b:66:23:a3:04:
         16:27:c0:cf:38:45:1a:26:aa:c9:58:c7:3b:1a:93:68:4e:86:
         93:6e:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:50:52 2024 by rpki-client on console-fra.rpki-client.org