Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/e542b809-b612-39e0-8b30-0747afeb0b63.roa
File:                     e542b809-b612-39e0-8b30-0747afeb0b63.roa (raw, json)
Hash identifier:          6qt9eBHF4B8majlo89RJxQbXqL1ho2jiC4hKnZWO2n8=
Subject key identifier:   B0:5C:38:11:DD:B8:1E:44:43:1C:1D:37:1F:57:7C:69:78:84:B7:5F
Certificate issuer:       /CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
Certificate serial:       010D0C9F43285848090FAD9A1BB843AFA9881740
Authority key identifier: C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/e542b809-b612-39e0-8b30-0747afeb0b63.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     19382
IP address blocks:        23.164.96.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:ad:9a:1b:b8:43:af:a9:88:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=767b9e60-eb20-4863-a4ed-d95a77685190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fb:9e:80:73:ae:ba:a3:35:45:a3:80:f8:2b:
                    c2:96:5c:64:9e:55:a7:c2:1a:95:77:30:e3:4b:0e:
                    6e:bc:fe:27:aa:88:3b:ed:91:e7:b0:f3:df:a9:1e:
                    aa:73:55:46:bc:8d:61:2f:eb:40:07:0e:03:81:7a:
                    41:5e:bd:4c:26:c5:3c:2a:e2:d9:a8:9e:3c:2a:ae:
                    9f:24:3f:9e:0d:be:5d:c8:3b:48:61:d8:9a:10:6e:
                    fa:67:22:47:03:97:2c:d8:e0:3d:e3:f8:37:95:8c:
                    1d:7b:6a:d1:c8:94:91:57:a7:b8:68:34:90:e4:65:
                    02:ce:b2:d1:00:6f:09:5c:b1:76:f8:9c:e7:76:34:
                    d9:af:20:21:85:b0:4f:a2:11:de:a9:d7:89:63:95:
                    26:a3:fa:82:76:f2:68:e1:ee:df:0d:07:ef:40:cc:
                    95:4d:23:f1:5e:60:00:fc:0f:de:26:ce:b1:0f:d9:
                    e0:90:bb:72:6a:8b:61:ea:b0:b9:d5:a9:0a:83:8a:
                    ce:19:ac:a8:8f:8b:a5:14:3f:b9:4c:ff:12:35:40:
                    9c:1b:1c:a9:48:1c:eb:c5:a2:50:35:d6:c1:6a:6e:
                    af:57:15:1d:7d:11:f5:c2:95:eb:fc:3f:29:3f:30:
                    45:56:a0:fd:7b:83:1f:a5:8f:65:5c:46:af:d4:c0:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:38:11:DD:B8:1E:44:43:1C:1D:37:1F:57:7C:69:78:84:B7:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/e542b809-b612-39e0-8b30-0747afeb0b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl

            X509v3 Authority Key Identifier:
                keyid:C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:14:92:77:01:f2:0d:66:9f:69:4e:29:db:36:36:e3:d8:76:
         de:81:46:b0:23:be:33:96:53:bb:e9:c8:ce:7a:db:48:18:cc:
         0f:7e:02:2d:c4:8b:56:36:25:6d:ab:69:e8:15:28:9e:ec:11:
         51:a6:74:20:9b:09:d0:52:a0:f6:88:5c:1b:1d:e4:5f:21:c0:
         eb:af:6e:f6:79:f1:d8:85:80:31:a1:a8:3e:1d:d9:90:c0:29:
         ab:77:8e:dc:1a:67:29:39:38:93:79:0a:aa:b8:7e:ac:69:ce:
         a0:fe:f7:d4:d9:f7:5b:47:97:19:3d:c8:41:7a:c1:3e:08:f1:
         95:4b:c0:da:f4:08:ed:e6:d3:10:07:73:b2:88:6b:6e:24:eb:
         b0:b6:60:e2:a8:1d:39:04:2d:e5:b4:dd:4a:97:54:a2:d4:14:
         b9:2c:cb:cc:7c:47:3f:a5:60:a7:3d:bc:b3:e7:d2:9a:ab:62:
         0c:2a:af:ae:c0:e0:49:26:b2:5b:17:85:11:fd:6d:c1:1d:d8:
         b3:a7:6a:d3:c5:32:45:3b:95:26:83:54:28:97:57:b4:f4:32:
         2a:e0:4d:16:f1:a2:61:b6:bb:b0:f0:07:60:92:21:fe:5a:75:
         02:cd:8c:a8:c7:1d:c1:3f:74:f5:3b:07:5f:d8:a0:f3:68:e4:
         16:b7:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:16 2025 by rpki-client