Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/79a67f45-d984-330b-a500-ce1441c6bc30.roa
File:                     79a67f45-d984-330b-a500-ce1441c6bc30.roa (raw, json)
Hash identifier:          FPFw7Np4vUcuABeWKpQPMtFReuRDqLtou+3D/KgiD4I=
Subject key identifier:   DB:C6:D4:27:3A:22:7C:9E:1A:B0:3B:27:05:9F:08:33:69:57:BD:1F
Certificate issuer:       /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial:       010D0C9F43285847A73BEBD307996625B75A6900
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/79a67f45-d984-330b-a500-ce1441c6bc30.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     36858
IP address blocks:        23.172.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:eb:d3:07:99:66:25:b7:5a:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=2104ebf8-88ae-4618-b948-835fbe73695e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:a6:98:33:86:34:a9:9d:c6:42:33:5f:1c:
                    30:f5:af:87:47:68:1c:29:38:18:27:94:b9:e3:3c:
                    59:e6:01:23:f2:89:30:62:e0:3a:bf:23:4c:0d:01:
                    62:9a:2c:54:ef:b8:df:0f:6f:db:88:ec:f5:50:02:
                    73:9b:9e:fe:17:5b:74:1f:d6:c2:c0:00:49:fd:cc:
                    24:1f:11:4a:bd:9c:79:af:bb:6e:37:d8:d7:55:01:
                    cd:f3:94:92:53:38:ed:f1:4a:5b:4a:26:38:47:e6:
                    1e:f9:ce:7d:47:0a:6a:03:23:79:75:67:e4:02:57:
                    ea:65:b3:06:42:a7:06:70:54:ad:78:9b:b8:5e:31:
                    e7:d9:b5:07:e3:30:38:1e:dd:71:ca:a0:37:eb:67:
                    63:70:93:a1:f5:18:8d:16:a6:54:52:76:49:86:ee:
                    43:d3:6c:f1:04:33:d6:61:7f:64:27:c2:dc:84:27:
                    83:57:a5:db:98:83:94:0b:c8:ce:e6:b5:a4:b7:7a:
                    29:20:1c:37:81:35:11:8a:fe:fd:30:94:e7:27:ad:
                    aa:f8:64:1e:08:a2:de:9e:24:e4:02:f4:ba:b7:79:
                    37:e7:c0:72:b3:7b:3b:be:9f:1b:a0:67:fb:7e:34:
                    ae:8f:51:ea:07:1e:c2:8c:89:23:61:c8:c5:26:f3:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C6:D4:27:3A:22:7C:9E:1A:B0:3B:27:05:9F:08:33:69:57:BD:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/79a67f45-d984-330b-a500-ce1441c6bc30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl

            X509v3 Authority Key Identifier:
                keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:85:ec:d0:89:79:d2:44:e1:e4:7b:87:1e:00:d8:65:4d:03:
         cc:43:47:4e:a2:3a:12:3d:f9:c8:3c:7a:2a:77:5b:2c:96:a0:
         bc:5c:b6:7f:5d:86:28:65:57:25:39:f1:a6:8d:ae:28:98:91:
         14:ba:a5:78:15:4a:74:68:f2:f6:7f:b2:26:7b:4c:b0:5d:95:
         51:9b:f4:11:1c:d0:24:1c:f7:ec:9a:f2:6d:82:b3:e8:45:32:
         e5:c4:42:79:b7:ee:4f:84:ce:ec:a5:ca:4c:2f:ef:94:18:e7:
         14:6a:6a:9a:c1:6b:4d:12:05:b7:1b:d3:70:fb:aa:cd:59:50:
         ef:fa:de:20:bb:8c:a0:0c:65:37:b0:f0:98:40:0f:31:47:9a:
         a0:52:d6:62:68:37:ae:a0:6a:e2:61:45:1a:16:81:c8:cc:87:
         50:17:b6:87:d8:cf:b0:7a:81:d7:35:c8:c2:1f:e3:69:78:7a:
         0c:e1:dc:15:a4:32:5b:95:53:0c:45:49:00:06:c9:bf:45:6a:
         14:82:97:0b:46:53:77:e1:a7:9d:d4:42:b7:e1:53:ef:3b:bb:
         3a:f0:09:21:0d:5d:52:52:aa:77:1a:92:53:31:39:43:29:54:
         e3:ec:6f:7b:95:bd:94:58:d9:2c:bb:f7:b6:85:8d:ea:df:79:
         49:65:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org