Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/1d3b32e2-7980-33e0-9ed1-e1734c07196b.roa
File:                     1d3b32e2-7980-33e0-9ed1-e1734c07196b.roa (raw, json)
Hash identifier:          DZSpo2cSITuG/RxXwWpmIHJKF820y2fuaNjtHYHQBdI=
Subject key identifier:   5E:A7:F7:38:C5:12:6F:67:47:48:10:64:6D:A2:63:80:DE:AA:34:76
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F43285844FE2AE543FD950D0E5E9F6780
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/1d3b32e2-7980-33e0-9ed1-e1734c07196b.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        23.131.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:e5:43:fd:95:0d:0e:5e:9f:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=fd6ff092-5c6b-4a2d-a4ff-75d85b2453f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:eb:2e:a4:1b:08:e4:45:16:ea:9e:e2:f2:
                    85:70:ca:03:ad:e2:09:cb:ec:5b:e4:39:74:cd:08:
                    93:cc:85:b6:91:12:72:39:da:ba:9c:3a:df:87:26:
                    8a:fa:a9:9f:b3:12:3c:6d:36:57:62:80:d8:7a:be:
                    95:95:a3:f9:ad:1e:6b:53:e4:43:93:ba:d2:5a:7e:
                    1b:a8:de:34:4e:a3:8f:f5:dc:10:e8:66:42:ba:5b:
                    b6:64:6a:47:44:af:54:e0:b8:fa:f3:3d:58:33:56:
                    d5:21:94:6d:c0:4a:5e:82:18:51:56:9d:78:7f:3f:
                    28:d3:0a:da:3b:0e:d7:e5:c8:d2:d9:a0:16:e5:f3:
                    ae:ad:34:57:2b:19:5f:1c:05:39:0d:0c:04:7f:eb:
                    0d:ff:6a:df:a0:1d:d1:b5:29:99:58:c7:cd:33:1a:
                    2b:ed:da:a3:4a:2a:5c:aa:e1:46:19:51:2b:0c:63:
                    d6:a2:8e:37:e5:c5:7a:f8:26:46:ca:c3:96:e5:ab:
                    fd:9c:82:e6:75:b2:53:a6:85:27:a9:e2:b2:8a:1c:
                    26:45:36:51:2a:66:5f:4e:46:79:71:43:0d:6d:8c:
                    cc:57:13:41:be:e9:21:79:18:e5:25:c7:4b:c2:7d:
                    78:9e:47:42:01:f6:11:23:9e:bb:9d:5c:0b:2f:07:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A7:F7:38:C5:12:6F:67:47:48:10:64:6D:A2:63:80:DE:AA:34:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/1d3b32e2-7980-33e0-9ed1-e1734c07196b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:ae:ce:49:11:4b:39:6f:5c:07:89:5c:f9:5b:95:8a:7d:
         cf:cd:9d:f9:a0:ff:eb:57:31:18:e4:64:c4:57:a2:10:b2:43:
         c1:f9:50:d1:71:c9:b1:01:f4:08:6a:cb:b7:95:8a:33:62:83:
         1b:ba:3c:50:bd:a4:54:03:62:e8:50:93:b7:d5:a4:69:24:d9:
         26:19:3e:69:2e:53:6c:be:a1:4e:9f:73:9e:ca:94:a3:bb:ac:
         f3:71:5c:c8:de:46:14:cd:88:e3:73:f9:ed:8b:8a:8d:85:0f:
         d9:d0:7f:d3:a4:57:06:b6:5e:59:23:a0:a8:bb:78:97:1f:da:
         e2:3a:20:a3:f5:eb:19:60:aa:aa:18:ff:71:2f:bd:98:22:68:
         b2:25:ef:29:b4:e5:c5:40:32:63:c1:0b:76:bd:f4:4e:c4:7e:
         7c:35:3a:f0:7b:70:9c:17:af:7c:c0:e6:ad:fd:9a:ee:54:f0:
         2d:ed:45:11:a1:19:cb:c6:5b:3e:78:a9:54:6d:f0:22:67:fb:
         47:fc:0f:44:d9:e3:58:f7:3f:da:4b:e8:86:7f:13:dd:1a:f0:
         e5:74:90:b0:fb:28:ea:35:ba:8b:74:97:b2:50:6b:9d:84:a5:
         89:48:6e:77:ec:46:13:63:1e:6f:82:b1:89:f0:42:1f:54:b9:
         bb:1f:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:49:12 2024 by rpki-client on console-fra.rpki-client.org