Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa
File:                     e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa (raw, json)
Hash identifier:          qQcQsXWmVTHMCIzYjNadTTocdfcL4NAUrbMFw4ECzwc=
Subject key identifier:   66:26:89:1A:0D:DE:EE:F0:5A:04:C9:FC:A9:14:7C:EA:56:20:89:7E
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F432858456CB5CC14D4887DD20864F100
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa
Signing time:             Wed 03 Apr 2024 16:19:41 +0000
ROA not before:           Wed 03 Apr 2024 16:19:41 +0000
ROA not after:            Tue 02 Jul 2024 16:19:41 +0000
asID:                     19740
IP address blocks:        23.173.114.0/24 maxlen: 24
                          172.81.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:b5:cc:14:d4:88:7d:d2:08:64:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Apr  3 16:19:41 2024 GMT
            Not After : Jul  2 16:19:41 2024 GMT
        Subject: CN=ae6bfea9-ce64-4c41-8e0c-df90b0326d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:69:d1:e1:37:54:c3:85:3b:bb:77:89:0e:
                    44:ee:ad:01:96:01:60:de:61:de:b4:84:46:54:b1:
                    dc:7e:49:a9:18:db:b9:4f:26:cd:1e:88:f4:93:9d:
                    fd:5d:9e:cd:98:41:b0:60:85:36:de:6c:f4:1f:ab:
                    d0:5d:02:11:a7:f0:e0:e8:65:a8:52:46:e7:7d:86:
                    6b:4d:29:ff:72:e4:5f:4c:10:52:62:fb:04:cd:f2:
                    8f:f0:76:fd:04:07:9f:02:ec:8e:f9:63:0a:f0:91:
                    30:f8:ea:a2:ec:c3:3f:d8:df:a8:9c:65:a5:ad:ee:
                    df:a4:56:c1:7d:e2:2c:a7:7b:3a:12:3b:6e:db:ae:
                    b3:2e:8b:bd:13:02:8b:96:f3:9e:39:2c:eb:78:18:
                    cd:17:87:21:0b:0c:fc:fa:8c:bd:ea:77:50:9e:83:
                    47:e3:4c:41:62:42:22:40:88:d7:05:c9:71:19:e6:
                    2f:96:9d:18:8e:ed:93:98:58:f6:e8:4d:2d:5f:a5:
                    da:19:93:69:44:94:a5:6b:eb:89:cb:b6:0e:d2:6b:
                    94:44:7e:9a:4e:a6:b0:6e:e1:7c:bd:c1:da:eb:f0:
                    80:0e:98:ae:d0:70:51:68:13:92:e5:86:88:55:ff:
                    7d:75:21:6b:84:a7:52:38:40:5e:db:6f:66:12:2d:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:26:89:1A:0D:DE:EE:F0:5A:04:C9:FC:A9:14:7C:EA:56:20:89:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.114.0/24
                  172.81.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:75:78:87:64:9e:8e:19:67:93:96:0a:4d:d0:50:5c:39:01:
         3d:2b:ac:44:45:01:20:9b:f4:d9:77:ba:5e:4a:7b:d9:fe:0a:
         d0:c5:db:76:f0:11:d3:49:64:2e:05:c3:ad:36:55:17:55:34:
         3c:8d:cc:97:b8:3e:04:ec:20:84:85:c7:47:d8:a2:7f:83:44:
         46:60:c6:32:e6:8b:1b:8e:ca:b9:7b:85:dd:1b:a5:eb:06:6a:
         3c:a1:b3:00:65:0e:e3:31:7f:c6:20:3d:6a:7d:0d:0c:8e:5e:
         03:aa:46:fa:d3:d5:de:e7:db:a9:ca:7a:85:6e:eb:99:4d:1f:
         15:46:d7:15:e3:af:87:94:ce:82:52:5e:a9:7b:ea:d1:6c:ba:
         4a:30:be:69:a0:44:15:b7:e9:ca:b5:41:ac:06:e6:1d:44:e8:
         ed:ed:16:71:eb:50:9c:25:06:05:44:a3:ed:32:ac:4f:10:d8:
         a8:4a:f7:70:06:c5:ef:f5:40:4d:65:38:cb:9f:e6:dc:8c:ef:
         3b:a9:0b:a2:a4:63:95:79:fd:55:40:fc:10:ec:69:27:19:d3:
         65:95:9e:da:0e:15:3a:6b:fd:33:1d:53:7e:24:60:5e:2a:ab:
         ff:e7:21:1a:8f:12:2d:17:dd:07:94:f4:39:c6:e0:7f:3e:97:
         dc:f7:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:24:56 2024 by rpki-client on console-ams.rpki-client.org