Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/9d2a25f7-26a6-337c-b528-eef86d7a910b.roa
File:                     9d2a25f7-26a6-337c-b528-eef86d7a910b.roa (raw, json)
Hash identifier:          eJe2S67IRopOIcG0EF4zN9qm3AZoN7LyElZNnyKwdJ8=
Subject key identifier:   39:81:F6:9D:4D:FA:E0:3E:D4:B9:3A:80:17:40:9E:9B:50:F2:8A:A5
Certificate issuer:       /CN=8eeb7a13-bcd2-48f7-b9b7-573102c88a1d
Certificate serial:       010D0C9F432858473A5B8E4655FA9DCCDBFE5A80
Authority key identifier: D1:CD:23:A7:5F:8C:AE:1D:9E:48:01:55:B4:7E:D4:CB:34:8A:43:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/9d2a25f7-26a6-337c-b528-eef86d7a910b.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     62485
IP address blocks:        23.147.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8e:46:55:fa:9d:cc:db:fe:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eeb7a13-bcd2-48f7-b9b7-573102c88a1d
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=11a7a14d-a675-46bb-a9ba-e5a568bd08b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:30:4f:cd:ec:f0:0c:f3:47:7c:09:17:c9:dc:
                    34:e9:39:80:cc:24:c3:72:fc:98:2b:ec:68:ee:7c:
                    d7:20:d8:35:4c:b4:d6:c5:de:8c:f1:e4:96:40:09:
                    e6:47:c3:ee:37:61:e8:1c:a4:f4:c5:77:a5:f5:62:
                    3f:9e:81:e1:4f:b9:be:11:39:dd:25:96:07:a3:f8:
                    97:dc:21:eb:2c:ba:e5:cf:cb:01:e9:ea:cf:6c:5d:
                    10:1d:8f:b5:29:e4:a2:35:62:db:c8:d4:15:c9:ec:
                    fe:bf:97:7a:22:eb:bd:c1:d6:97:b4:85:64:05:e3:
                    d0:09:7e:04:7f:80:ad:bc:bc:ee:17:1f:03:c2:f7:
                    95:1d:d5:d1:ff:78:94:71:4b:c2:a7:31:97:c6:0d:
                    f8:cb:49:cb:7f:7a:f2:42:1c:70:9d:5e:8f:b3:b3:
                    e2:98:09:11:e3:b7:40:2d:ed:4d:ef:da:87:b6:b6:
                    0f:3d:90:a4:cb:a7:c8:98:ab:b4:2f:37:d9:bd:00:
                    60:21:c1:66:2f:f3:2d:80:67:de:49:80:fd:23:84:
                    b1:aa:2c:e5:b9:90:23:9b:30:99:ed:62:0f:bb:ca:
                    61:89:76:74:65:7f:76:7d:a4:12:43:88:b2:6a:0f:
                    12:5c:12:3e:35:8a:e7:cd:37:00:bf:ee:3f:b3:07:
                    00:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:81:F6:9D:4D:FA:E0:3E:D4:B9:3A:80:17:40:9E:9B:50:F2:8A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/9d2a25f7-26a6-337c-b528-eef86d7a910b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CD:23:A7:5F:8C:AE:1D:9E:48:01:55:B4:7E:D4:CB:34:8A:43:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:19:d7:12:f5:90:73:40:d6:e1:eb:d8:ef:df:b5:8c:7d:19:
         af:56:32:ac:16:f8:89:4c:59:88:65:18:f8:3e:c0:03:41:6b:
         37:a4:40:2f:48:97:d0:4f:ab:3a:cd:1f:b2:bc:e5:56:7f:8f:
         bc:92:84:b0:98:48:48:10:04:68:ca:19:40:64:11:8a:0d:1c:
         dc:67:21:9a:65:0b:aa:5d:71:09:c0:b4:18:4f:03:30:3b:27:
         08:f6:b5:06:2c:b6:00:06:e0:b7:85:92:4b:20:0a:93:b5:cb:
         83:e4:cb:f1:90:f5:c0:2d:e6:67:06:e5:d2:8f:d5:16:6d:42:
         2d:27:a3:d2:2c:06:25:f4:35:7b:66:6b:6a:95:48:7d:92:41:
         0b:fd:46:54:3f:b2:d2:ee:b3:8e:f0:20:6c:a7:1c:99:d1:05:
         8e:24:bd:7c:6f:60:14:46:60:55:56:27:23:03:69:ef:78:9a:
         fa:57:82:2c:f7:8e:0c:d4:4f:c4:4f:74:19:ac:2c:ed:b7:e1:
         f7:e7:9e:6b:d5:fe:9b:d7:46:02:c8:f6:02:5b:b5:88:b2:d1:
         80:07:53:63:23:25:46:38:22:5d:c3:12:d1:91:44:20:3b:ab:
         93:1e:5e:14:8a:21:54:c3:87:dd:29:ed:61:b1:92:a5:0c:ec:
         94:92:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:09:50 2024 by rpki-client on console-fra.rpki-client.org