Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/377c59f8-30a5-3dd7-ae78-47fd3a28bf0b.roa
File:                     377c59f8-30a5-3dd7-ae78-47fd3a28bf0b.roa (raw, json)
Hash identifier:          kQD7VOJJ7WDX6R1w23+w80zin66G4VtTiKz8w8ZXyTE=
Subject key identifier:   FC:8A:CC:98:4B:49:41:13:2B:1A:A7:46:8F:11:F4:A0:13:BC:35:0A
Certificate issuer:       /CN=cd870e0a-cc0e-44e5-9569-1ea2c38048dc
Certificate serial:       010D0C9F43285847E8F4C99C8F17B0D2B309F380
Authority key identifier: 74:AB:0D:8B:C7:D2:D7:51:CE:41:86:F2:28:99:0F:A5:10:01:67:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/377c59f8-30a5-3dd7-ae78-47fd3a28bf0b.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     209806
IP address blocks:        23.162.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:c9:9c:8f:17:b0:d2:b3:09:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd870e0a-cc0e-44e5-9569-1ea2c38048dc
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=02c404bc-26e6-4a3c-8abc-f38fab4b69c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:d9:68:e3:56:e5:ac:6b:58:5d:e6:81:da:
                    7f:3f:74:d5:be:62:79:19:39:4c:83:28:d4:44:b0:
                    8c:f8:6e:6f:8f:5f:d9:68:d4:4f:44:4a:89:d2:ed:
                    cb:ea:63:bf:fc:48:85:01:0f:bb:2e:7d:60:0c:22:
                    28:c4:ce:7e:3d:8c:78:37:4b:fb:92:2e:90:0c:90:
                    ac:93:60:b1:80:2c:10:65:aa:d8:ab:48:46:93:01:
                    fd:9c:97:a7:22:e9:2a:38:64:99:13:0b:ce:4b:97:
                    eb:fb:6d:a1:e6:13:89:66:5f:2a:45:75:8d:d9:ff:
                    99:72:17:af:a4:a5:f3:98:de:eb:61:75:9c:32:22:
                    8e:80:b3:03:9d:a3:c9:b4:1a:cb:a6:a9:52:41:c4:
                    8b:94:49:f4:39:25:2e:4f:95:3f:5c:b9:93:36:f2:
                    6c:e9:1b:99:11:e1:96:1f:10:ca:5d:2a:b3:db:b4:
                    69:8b:b2:fe:aa:da:17:73:db:6e:73:54:eb:4f:1e:
                    b5:73:22:84:ea:c8:4f:fa:0f:63:90:d1:e9:92:0d:
                    52:6b:0c:e1:12:bd:2a:d1:50:75:60:f2:13:c7:02:
                    51:77:eb:da:49:6e:c9:d9:af:77:66:c3:85:01:d7:
                    31:dc:67:57:3d:01:6a:8a:88:8c:5f:d0:41:0a:7c:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8A:CC:98:4B:49:41:13:2B:1A:A7:46:8F:11:F4:A0:13:BC:35:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/377c59f8-30a5-3dd7-ae78-47fd3a28bf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.crl

            X509v3 Authority Key Identifier:
                keyid:74:AB:0D:8B:C7:D2:D7:51:CE:41:86:F2:28:99:0F:A5:10:01:67:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3f:4f:28:db:ba:d4:f9:e6:82:cd:2a:c9:f7:cf:cb:0a:63:
         d3:a4:24:9b:14:cf:fc:dc:61:b0:18:b0:13:9e:67:bd:74:4a:
         cf:ed:8b:3a:b2:34:c4:16:9b:45:a9:c6:c5:26:11:59:55:97:
         ab:53:e8:56:33:92:dd:17:86:00:d7:b8:68:41:24:75:cb:1f:
         f0:29:7f:ec:43:7f:91:ae:2b:21:65:7b:02:e9:81:59:5f:32:
         21:2d:b5:5b:78:46:21:5d:1d:71:38:e9:7a:df:1c:3a:ae:e6:
         49:37:3d:0b:78:ad:81:96:75:f1:e5:39:83:eb:33:c7:a5:b3:
         ef:ba:f6:4c:2c:bd:3f:b9:4e:ed:86:d2:ff:19:08:60:34:9d:
         34:d1:5f:18:19:00:62:8d:61:ea:66:8c:85:6b:e0:8f:8d:a3:
         29:8f:79:f9:9b:f3:6c:6a:37:73:f9:ef:59:2e:e2:80:89:94:
         f8:de:d1:9d:5a:1b:48:46:0a:91:3e:6f:ae:a5:5b:2a:e8:45:
         ac:04:69:11:3c:5a:14:dd:8d:26:cf:6e:c8:18:5a:1c:38:57:
         3b:8e:94:15:cc:e7:ca:ae:20:18:34:07:57:46:05:bd:8f:54:
         d1:e4:96:52:21:4f:54:e2:e6:ca:3c:cf:fa:4a:ed:a7:71:41:
         1a:17:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:44 2024 by rpki-client on console-fra.rpki-client.org