Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/b8a7d888-149b-3f0d-aa88-d66ccdea8b7c.roa
File:                     b8a7d888-149b-3f0d-aa88-d66ccdea8b7c.roa (raw, json)
Hash identifier:          Dsm+CFvPTbk1PDAomO+ddty16u1b/D2zKJx69AVTO2k=
Subject key identifier:   DC:A6:44:B1:EC:E4:FE:6F:F4:5B:04:88:65:0A:FE:A1:AB:6B:5F:70
Certificate issuer:       /CN=01498755-7057-4d26-ae43-80f30a8a9011
Certificate serial:       010D0C9F43285847E35F72493083C6E4BD9F8D80
Authority key identifier: B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/b8a7d888-149b-3f0d-aa88-d66ccdea8b7c.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     199948
IP address blocks:        23.148.200.0/24 maxlen: 24
                          2602:2a9:20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:72:49:30:83:c6:e4:bd:9f:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01498755-7057-4d26-ae43-80f30a8a9011
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=76392100-dda8-42f3-873f-b762735e641e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c3:84:1a:99:60:95:b8:1a:27:e6:da:9b:ca:
                    af:49:bc:f3:bf:5a:37:ba:48:fc:ac:2f:78:5e:fb:
                    64:85:59:9e:66:09:12:64:14:1e:73:89:72:1f:57:
                    c1:12:bd:d1:d4:c5:89:94:56:4e:4c:df:67:0a:06:
                    7c:db:0d:6e:6d:21:b9:f9:1f:11:ab:04:cb:52:5b:
                    03:86:08:b2:6c:4b:e4:4c:48:5c:26:b3:03:1c:b7:
                    c3:08:10:f8:24:2e:6a:d2:10:15:e8:28:33:87:25:
                    68:eb:d2:58:f1:3e:a6:c4:d9:4f:5e:b2:f0:cc:52:
                    b8:57:ed:61:78:f7:0e:b1:54:01:d7:9c:84:c4:66:
                    0d:c5:44:58:da:34:c0:a6:42:04:f7:db:62:bc:e9:
                    1f:e7:6a:f0:1d:58:5e:54:15:6d:4a:da:83:d9:fd:
                    f1:6f:fa:5c:32:2a:5a:17:b2:57:12:46:98:4e:8e:
                    95:c4:35:2d:4c:c1:e3:60:5d:43:18:b3:e8:0f:0b:
                    1d:80:e4:e0:61:66:b8:cf:5f:6f:f2:53:b3:d5:93:
                    7f:07:55:db:7d:40:dc:dd:31:f1:c6:10:a0:98:db:
                    8b:9a:4b:b0:aa:14:58:51:37:cc:5d:0f:cb:37:5d:
                    e6:22:e9:02:e9:f8:71:87:81:1a:38:11:2d:d8:47:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A6:44:B1:EC:E4:FE:6F:F4:5B:04:88:65:0A:FE:A1:AB:6B:5F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/b8a7d888-149b-3f0d-aa88-d66ccdea8b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011/01498755-7057-4d26-ae43-80f30a8a9011.crl

            X509v3 Authority Key Identifier:
                keyid:B8:10:C2:28:C8:D8:4F:E0:65:7D:2B:8F:17:F2:80:2A:43:99:3C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/01498755-7057-4d26-ae43-80f30a8a9011.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.200.0/24
                IPv6:
                  2602:2a9:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:15:eb:72:72:49:29:fa:8e:a0:00:31:75:89:13:24:b4:6d:
         aa:3c:9f:6b:6d:f4:26:d5:ad:57:40:7f:fd:66:09:56:52:a1:
         1f:67:11:37:da:cd:11:8d:16:c7:fe:b0:ce:12:f2:cd:d0:0e:
         39:1d:85:b1:86:55:38:9d:12:25:76:36:8b:74:47:f3:69:9f:
         9e:54:16:8e:42:2a:39:4a:4d:50:2a:b9:56:94:62:14:32:a3:
         30:d9:2c:2c:3c:eb:85:32:9a:1f:22:a6:e6:fa:22:98:94:21:
         8c:44:f8:a6:f3:9a:1e:0e:9d:43:cd:dc:2e:7a:da:30:c3:02:
         ac:e6:4a:b7:6b:be:09:ee:17:47:b7:0f:63:48:07:8b:c8:59:
         50:61:46:03:d3:3d:70:8b:6d:87:dd:7e:b3:90:43:23:43:4a:
         ab:6b:7c:43:ac:75:fd:d1:53:15:9e:fd:ac:3a:93:3f:9a:4e:
         b9:2b:a4:68:e0:84:9b:10:c2:ba:ca:c3:df:44:ee:a3:ac:1c:
         09:78:5a:a3:ff:aa:94:35:a1:6f:28:18:bd:e0:37:ba:d0:78:
         e4:24:00:ee:55:f6:11:02:d5:9e:05:ce:53:08:22:fc:fe:f8:
         2d:b0:b7:77:1c:35:82:8e:01:53:4a:ea:a5:de:37:c6:3a:ae:
         cc:12:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:48 2024 by rpki-client on console-fra.rpki-client.org