Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/43d0ec62-e6c9-3694-a4bb-bc1b0472f730.roa
File:                     43d0ec62-e6c9-3694-a4bb-bc1b0472f730.roa (raw, json)
Hash identifier:          kFq7OXci0Ok0kFb/pIRU3EIZL/hMTjELQVYM2TiWp4k=
Subject key identifier:   0D:6A:4C:F4:8D:D8:DC:F3:F1:8E:0E:07:91:92:86:0B:77:38:12:1D
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F432858476C9DB454A87B61EB980E26C0
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/43d0ec62-e6c9-3694-a4bb-bc1b0472f730.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     393336
IP address blocks:        23.163.210.0/24 maxlen: 24
                          23.163.211.0/24 maxlen: 24
                          23.163.212.0/24 maxlen: 24
                          23.163.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b4:54:a8:7b:61:eb:98:0e:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=6327a82a-767e-4b2a-aab2-bf8fdb07778d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:a0:0f:78:0a:32:55:1e:f5:4b:18:7c:ac:
                    6e:70:30:e2:68:2e:36:60:c5:51:45:c2:df:20:39:
                    94:92:2e:93:69:11:6d:66:47:1a:67:fc:aa:b1:99:
                    0d:8a:df:61:00:a6:25:0d:03:02:19:fd:46:7f:db:
                    c1:51:0f:2c:8b:35:32:e8:ab:17:0a:76:50:31:5e:
                    83:d4:af:f4:3b:17:1d:fb:05:f0:b1:dd:00:17:30:
                    2c:9b:b2:f1:b3:9c:1e:d2:45:b5:e1:97:6d:3e:58:
                    ec:e1:68:a0:9b:4e:60:97:53:65:67:06:9b:6f:57:
                    20:47:3b:1a:22:0d:35:d4:26:37:8f:c7:a1:3b:76:
                    83:33:aa:79:c1:33:8d:3d:51:b5:7e:70:06:90:e5:
                    f3:b7:6a:88:b8:3f:2c:30:be:2e:d5:f1:87:16:9b:
                    07:ed:e7:b1:47:15:70:cc:8c:f9:c9:15:05:df:1c:
                    df:a3:ec:a1:b0:f7:23:00:53:71:39:23:93:1e:07:
                    98:40:35:17:ba:f8:cf:f1:53:1b:51:cd:aa:1e:c2:
                    a2:d8:d1:cf:3a:bf:bc:31:c8:7e:47:af:58:76:41:
                    3f:0d:9a:3f:1c:7c:17:15:a6:ab:d3:6f:a4:65:b5:
                    5c:7a:dd:c5:74:a8:20:4c:d0:1f:e9:66:09:f3:16:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6A:4C:F4:8D:D8:DC:F3:F1:8E:0E:07:91:92:86:0B:77:38:12:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/43d0ec62-e6c9-3694-a4bb-bc1b0472f730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.210.0-23.163.213.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:76:a4:72:b0:cc:2c:45:b6:65:e1:9a:1c:e4:6f:87:58:3f:
         5f:58:78:a6:74:7e:5d:60:b9:d3:9a:96:f5:c2:e4:cd:de:c7:
         3b:84:ad:7a:ae:4d:63:d2:87:0c:d0:f4:69:8a:41:eb:e3:6a:
         6b:5e:94:67:e5:63:2b:20:b7:05:1c:08:90:23:71:d2:6d:b1:
         0c:06:ed:b4:62:c2:e3:a5:f5:e9:18:8c:23:94:ec:9a:08:7d:
         bf:a7:6e:3b:12:0c:e5:4f:40:23:1e:84:ff:dd:f7:26:8d:95:
         6c:b0:a7:3b:4b:6f:97:5e:ca:8e:9f:b0:f6:52:b3:09:dc:c7:
         0c:3e:bf:22:00:85:39:4e:17:5b:4e:ad:36:89:a1:eb:71:a5:
         1b:36:82:c2:e8:7a:3f:99:98:a5:70:1d:a4:43:a9:64:26:65:
         dd:aa:37:35:42:a4:b5:52:36:19:5e:d5:82:df:dc:13:c8:d8:
         43:44:76:ea:8f:f3:83:d5:5a:36:78:0e:ce:8f:45:1f:e0:ac:
         15:8b:ff:fa:1c:06:51:3f:46:c6:53:a9:d6:ef:81:e4:38:7e:
         e3:54:7d:88:1d:ff:1d:59:0f:d9:02:79:bc:1f:5f:0f:04:19:
         c0:87:b2:89:18:5d:f8:f5:b4:ae:36:f1:a6:f0:ac:da:18:41:
         e8:6a:14:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:37 2024 by rpki-client on console-fra.rpki-client.org