Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ff7e67dc-6ced-33fd-9a23-698773763d21.roa
File:                     ff7e67dc-6ced-33fd-9a23-698773763d21.roa (raw, json)
Hash identifier:          FgJ34O3sC+KM/KUNFG1Fm4FJ4TmJw0x1kFiP35akH1o=
Subject key identifier:   BD:D4:12:27:24:FE:C0:4F:42:A2:39:5C:74:2A:21:48:94:0C:09:3E
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F43285847EBBF8E5DA02722DF387B7300
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ff7e67dc-6ced-33fd-9a23-698773763d21.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     6079
IP address blocks:        23.167.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:8e:5d:a0:27:22:df:38:7b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=7059fb15-1612-4e55-9675-04b16d5ee4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:90:44:df:94:9f:be:f1:9c:20:cc:c3:23:
                    25:43:1e:9e:81:90:47:78:3a:a2:15:e2:ca:2d:0c:
                    21:be:fc:7a:fb:72:17:be:c4:d1:c4:e3:ef:f6:12:
                    f1:c1:9d:de:98:49:15:c9:f0:ed:5f:77:4c:54:26:
                    b9:b1:87:b3:7d:c7:1d:3f:bd:4b:ea:29:85:9b:9a:
                    cc:4e:c4:2a:2a:ee:63:06:2e:bc:e4:75:65:d2:49:
                    59:47:42:3c:ef:59:79:4e:80:55:0f:26:08:a3:af:
                    88:6b:07:87:4c:c6:72:ff:d1:e8:75:85:99:f0:c2:
                    91:76:49:dd:73:d8:f9:06:af:f2:c8:5c:79:23:b3:
                    96:91:fd:52:5e:e0:6c:26:70:4a:18:70:4a:4f:57:
                    8d:d8:93:de:72:6b:2f:6e:e9:76:1b:df:1d:81:64:
                    9f:0c:0a:9e:60:8b:e3:7e:86:0c:00:c8:74:28:d2:
                    31:bb:a2:c1:51:8e:64:48:0b:53:f3:48:eb:3b:83:
                    1f:38:20:03:d6:f7:17:6a:86:88:04:4f:66:09:40:
                    1d:60:56:71:da:a2:d0:db:0c:26:8c:9d:7b:28:81:
                    2a:f7:88:d5:98:a5:ec:98:01:86:6b:8c:a2:a4:09:
                    f4:fa:79:36:08:5e:67:da:5d:c9:72:47:32:a5:32:
                    13:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D4:12:27:24:FE:C0:4F:42:A2:39:5C:74:2A:21:48:94:0C:09:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ff7e67dc-6ced-33fd-9a23-698773763d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0d:d7:35:9a:ad:2e:3f:9a:a4:80:30:67:0a:a6:e3:ac:0b:
         78:0d:1c:0d:f7:9c:21:5a:43:f4:0a:ad:9a:f1:fe:d5:e2:c9:
         d1:47:75:7a:96:a0:bc:c9:23:57:ec:be:88:10:51:39:3f:3d:
         76:4b:ff:7c:78:67:4f:37:9c:e1:5d:fa:f3:97:87:d4:fe:75:
         a8:0f:d1:33:fb:b1:88:11:1d:73:5d:e7:af:b3:21:1f:fe:51:
         c8:ec:69:85:70:07:a3:60:20:4a:44:6c:28:86:11:b4:2a:a6:
         03:39:2b:57:6a:ce:ff:8e:ef:19:25:5c:16:e7:bb:e4:0b:f5:
         48:ab:8b:8f:20:5b:ca:60:86:b7:7a:f3:29:2f:14:c2:40:7a:
         36:81:c6:7f:10:20:6f:d0:3a:79:e0:e8:61:52:9c:69:da:f9:
         f2:50:b0:f5:f7:62:df:36:25:85:9e:7e:87:e0:86:3d:2d:9a:
         a0:33:ad:c7:50:e7:5c:d8:57:e2:26:55:38:f7:f0:e3:37:bb:
         3b:12:18:fc:c5:75:33:e6:22:ed:71:f5:bb:e2:7e:d8:82:c3:
         a8:39:e2:07:3c:c5:98:89:12:7e:2b:ac:b1:ac:99:cc:1c:9d:
         b1:48:0c:3e:e4:f6:86:40:9b:46:10:ac:97:58:fd:49:47:d3:
         15:75:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:20 2024 by rpki-client on console-ams.rpki-client.org