Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa
File:                     be0dee30-c326-3427-9dce-49d70b8e6c8c.roa (raw, json)
Hash identifier:          eNooSeBOqlKRunNb1gj915v4zgH/j/F0uHYTdmVkZ9A=
Subject key identifier:   D4:C5:60:A1:31:54:9A:4D:1B:AE:5E:10:24:21:32:CF:AB:64:9D:4A
Certificate issuer:       /CN=b61fdb7f-6654-4226-b916-f915d5e335dc
Certificate serial:       010D0C9F43285847256B23F0DFD805E047F61C80
Authority key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa
Signing time:             Sun 08 Sep 2024 13:00:41 +0000
ROA not before:           Sun 08 Sep 2024 13:00:41 +0000
ROA not after:            Sat 07 Dec 2024 14:00:41 +0000
asID:                     395842
IP address blocks:        23.144.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6b:23:f0:df:d8:05:e0:47:f6:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b61fdb7f-6654-4226-b916-f915d5e335dc
        Validity
            Not Before: Sep  8 13:00:41 2024 GMT
            Not After : Dec  7 14:00:41 2024 GMT
        Subject: CN=02213342-5014-4617-9986-ebf63cb88a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:95:25:f2:de:d9:8c:9c:2d:9f:10:b0:ed:
                    20:f8:57:29:21:d4:f7:7a:23:86:f5:85:3a:f6:e2:
                    cc:a9:e4:ba:01:ed:5e:27:13:98:3f:f7:28:ef:32:
                    6d:79:67:a6:b7:2c:8f:a0:e0:45:7f:a1:e9:1c:f9:
                    f8:35:a5:33:57:8a:44:b2:49:f1:2f:48:c9:1b:aa:
                    6a:4f:cd:70:8d:ea:61:4b:e1:fa:12:fd:ba:6a:d7:
                    64:7e:2a:2b:02:2e:e4:74:15:23:ac:cf:18:d8:b6:
                    b8:c8:da:ba:11:d6:bb:aa:8c:1c:1c:13:96:6b:58:
                    3b:1b:4a:9f:95:65:17:82:01:fd:37:56:30:d6:a2:
                    7e:0a:74:7d:2f:dc:1e:ed:b3:7d:d0:35:0b:14:5b:
                    5f:20:2b:ba:7e:de:81:8e:a2:ac:d5:65:2d:17:31:
                    76:49:1b:2d:cc:3f:af:35:3f:3d:0c:a5:ea:75:02:
                    b6:75:0b:59:72:c4:f7:67:f1:a9:44:1d:98:d0:5d:
                    ea:38:9f:b3:68:5a:39:7e:ed:e8:5e:37:b4:97:b5:
                    e5:50:46:50:30:d3:09:a0:54:3f:b6:fa:c8:c2:06:
                    d0:d3:0f:55:52:3d:7d:d8:30:b3:96:db:98:69:12:
                    8e:a5:ca:ba:44:8e:15:80:9c:71:b1:d7:96:45:16:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C5:60:A1:31:54:9A:4D:1B:AE:5E:10:24:21:32:CF:AB:64:9D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl

            X509v3 Authority Key Identifier:
                keyid:15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:37:f2:7f:1a:f4:ea:05:32:f5:fc:6b:96:c6:22:57:8c:dc:
         a3:9e:f7:0b:c0:8a:75:52:cd:c8:6a:41:e4:36:95:0a:ab:2b:
         c7:3f:7a:3b:00:34:34:87:f8:b8:b2:36:50:3c:b8:d0:8b:9c:
         e2:0f:14:d1:1d:df:3d:8b:df:c9:fd:41:00:56:41:9f:bd:d3:
         62:f2:89:9e:a8:8f:8a:70:2e:aa:b2:8e:2a:10:b8:4a:87:39:
         81:25:bb:78:de:bc:7f:d6:18:5f:f4:eb:e7:70:87:2f:ed:a0:
         45:55:b9:60:02:22:d1:df:51:59:2c:f6:43:72:5c:d6:ad:f6:
         c3:19:1e:48:ec:5b:19:d7:96:5e:13:d7:ca:c9:bc:00:6d:7a:
         f6:d3:7a:16:81:bb:8e:cf:3f:7c:d9:cf:e8:0d:38:99:86:f8:
         b5:d2:94:a3:c1:64:af:f2:3a:c0:2f:eb:29:af:94:6b:30:37:
         aa:fb:95:bc:7e:21:44:91:dd:c1:70:85:28:e3:e8:99:b5:d5:
         7b:b0:9d:a9:fe:24:f4:9a:a6:03:bc:13:13:98:0b:37:d9:0d:
         c6:17:f6:00:f3:dc:b1:a7:c7:9f:a1:68:30:3f:5c:e6:b3:16:
         6a:f0:4e:8f:4a:ed:a3:05:c2:d3:d1:de:15:45:64:4a:b6:82:
         1d:fc:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org