Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/e8614bbb-756c-3bc4-9679-b63272c6be61.roa
File:                     e8614bbb-756c-3bc4-9679-b63272c6be61.roa (raw, json)
Hash identifier:          aWB3V5l1rwEsNTqcKHJ1hQcI6G9CgWw6Zv85v2+DHYI=
Subject key identifier:   CC:FB:94:0D:3A:C1:56:4C:8D:55:7C:F9:E2:64:3E:AB:47:87:3C:91
Certificate issuer:       /CN=497813be-498e-4129-a627-225f97d0e2b5
Certificate serial:       010D0C9F43285847600B8DB86633A98951AF6160
Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/e8614bbb-756c-3bc4-9679-b63272c6be61.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     399606
IP address blocks:        23.190.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:8d:b8:66:33:a9:89:51:af:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=6ff72981-78c6-4f81-9b2f-cad7512f1b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:a1:ae:cf:82:7e:c1:b1:b7:60:24:96:e8:
                    4c:f8:1a:31:38:76:3a:35:25:82:e5:de:97:9f:8a:
                    ed:6d:f1:f5:e3:fd:2a:f9:7a:11:74:af:6a:6b:95:
                    f8:d2:15:43:f3:07:85:a5:25:56:f8:30:0a:55:3c:
                    ca:7b:84:92:59:c4:a7:2a:74:c6:70:18:46:80:79:
                    ef:df:90:de:57:55:82:98:09:b5:ce:36:f3:82:36:
                    aa:f9:d0:f4:04:93:3d:2b:4b:b1:97:36:49:52:22:
                    1c:11:bf:d9:57:27:d5:41:07:77:a5:ed:c9:bb:3c:
                    b0:4c:20:ca:69:ec:c4:f4:12:62:fe:40:1f:6f:98:
                    a7:78:7f:f0:f1:a1:4e:f1:e1:2e:e0:94:2a:c1:b5:
                    a2:c9:bc:8b:c6:7d:27:ae:aa:f7:76:a9:a1:f4:17:
                    d0:98:72:d6:f4:8f:82:c9:cc:0d:a8:16:79:22:de:
                    fe:0f:98:d6:b8:73:dc:04:aa:cd:d7:68:dc:ca:2a:
                    76:c1:74:0e:f5:d2:51:38:24:f1:f7:5e:fc:04:ad:
                    48:5e:0a:a3:4f:19:66:43:2e:96:fa:8d:82:1c:f5:
                    07:17:fd:54:35:52:e6:93:85:87:0e:cc:e0:35:dc:
                    11:c8:97:ab:a5:37:99:db:0e:4b:d0:8e:88:98:ac:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FB:94:0D:3A:C1:56:4C:8D:55:7C:F9:E2:64:3E:AB:47:87:3C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/e8614bbb-756c-3bc4-9679-b63272c6be61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:24:c1:60:d1:ab:40:58:85:b0:9a:05:ec:db:26:d4:c2:c2:
         eb:53:80:21:0a:af:bf:b1:f3:0e:23:49:93:00:46:6c:6d:23:
         f9:75:78:bb:4c:ab:4f:3f:8f:02:ed:19:24:d8:b6:3d:0d:bd:
         ec:0d:8f:18:4e:df:c4:d2:38:fd:0f:c1:8a:71:95:5c:80:77:
         5d:69:50:f9:49:7d:4e:c4:78:05:c0:e1:cb:d0:b0:30:c8:24:
         01:18:0a:1e:87:ad:22:dc:9c:ed:2f:b0:00:4e:2d:51:8e:9c:
         94:d6:dc:ac:73:74:19:c2:06:c0:c2:45:1e:e2:89:66:a0:7a:
         83:16:79:5d:07:7a:22:41:e3:52:4d:d7:f0:3a:8c:91:97:de:
         67:75:b7:97:f8:bc:e6:a9:11:72:11:cc:eb:11:4f:a6:0c:37:
         7b:ed:07:c9:3f:a9:fe:07:38:c3:5e:c1:62:19:57:23:00:c8:
         bf:a7:74:00:dc:fc:af:c2:f5:fd:81:33:37:30:47:0a:27:e2:
         7f:e0:0c:1a:25:fc:03:90:3c:13:8f:97:ec:03:e2:7b:ff:e6:
         b6:7d:c2:f6:94:98:c7:87:bf:b4:99:22:4c:db:a5:5e:9c:b5:
         ee:c4:b1:a5:ba:e7:63:93:d2:9e:2e:83:cf:af:68:5d:df:65:
         93:11:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:10 2024 by rpki-client on console-fra.rpki-client.org