Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/f68dca29-8e32-39ca-87ce-39c318f823b4.roa
File:                     f68dca29-8e32-39ca-87ce-39c318f823b4.roa (raw, json)
Hash identifier:          KNYFw3r5F8i0Y5lOBukI/75QhPP7Wzz4p8zBYzPf100=
Subject key identifier:   73:38:4C:F6:22:F9:DF:32:E5:A0:C8:B0:CB:4A:30:B9:1E:0B:E7:B2
Certificate issuer:       /CN=1265cc41-1464-4ca3-818d-917a36c8afca
Certificate serial:       010D0C9F4328584593689287DFF7348B2C479E40
Authority key identifier: 33:F2:2A:43:E3:17:30:45:4E:10:FE:49:6A:9A:EC:86:29:34:ED:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/f68dca29-8e32-39ca-87ce-39c318f823b4.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     32329
IP address blocks:        23.135.32.0/24 maxlen: 24
                          158.51.80.0/22 maxlen: 24
                          170.39.168.0/22 maxlen: 24
                          2604:b2c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/1265cc41-1464-4ca3-818d-917a36c8afca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/1265cc41-1464-4ca3-818d-917a36c8afca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:92:87:df:f7:34:8b:2c:47:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1265cc41-1464-4ca3-818d-917a36c8afca
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=3a316e64-de5c-41a1-999d-716515dc19dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:bc:67:6b:ac:de:a5:83:77:8c:20:aa:c5:
                    70:4a:ed:c2:8c:84:b8:9a:0a:06:fd:97:82:f0:81:
                    07:32:a3:7d:ad:11:7c:cc:cf:28:28:20:36:3c:54:
                    ae:ea:54:17:7a:c5:7b:7c:05:dd:d7:17:49:da:4c:
                    f7:de:87:6f:9c:77:04:86:42:a2:e0:dc:22:0f:db:
                    3b:80:bf:d4:a9:90:2d:bb:a4:58:b7:20:de:95:74:
                    84:ef:0f:7b:ed:74:a4:22:be:51:47:d6:98:b9:ed:
                    6b:d2:ad:6b:87:64:23:bd:be:d1:db:76:a6:c1:7c:
                    ca:db:20:88:4e:1b:38:67:7d:f4:ef:37:9d:a0:10:
                    bf:42:92:aa:cd:74:b0:29:d3:e3:12:ad:76:57:0d:
                    0d:75:af:ee:2e:45:1d:ba:2b:7d:70:61:bd:c8:c7:
                    61:51:81:f9:f7:ce:09:ff:9c:d4:6e:46:85:98:bb:
                    f7:3d:cd:f0:5a:b1:7a:9f:aa:5f:63:ca:7d:6e:54:
                    a6:ec:c5:9e:95:6b:2a:36:3f:12:09:c9:48:43:c7:
                    24:76:b9:ea:66:c3:14:fd:a1:bd:d3:64:c3:e4:e3:
                    ca:a2:1c:5a:af:22:42:e3:a8:26:46:f8:43:83:c2:
                    7e:d4:33:33:9b:b2:2d:68:33:dc:78:f0:60:d1:4c:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:38:4C:F6:22:F9:DF:32:E5:A0:C8:B0:CB:4A:30:B9:1E:0B:E7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/f68dca29-8e32-39ca-87ce-39c318f823b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/1265cc41-1464-4ca3-818d-917a36c8afca.crl

            X509v3 Authority Key Identifier:
                keyid:33:F2:2A:43:E3:17:30:45:4E:10:FE:49:6A:9A:EC:86:29:34:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.32.0/24
                  158.51.80.0/22
                  170.39.168.0/22
                IPv6:
                  2604:b2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:3b:27:8b:b7:7a:49:14:44:fc:a1:58:64:22:45:cc:3f:a3:
         60:75:1b:cb:35:5a:ba:8b:4d:b4:3b:00:27:7e:d8:84:ea:ec:
         13:96:70:d3:8d:bb:6d:1b:42:55:28:a6:49:7d:85:01:fe:d9:
         10:e1:fd:4a:ca:ad:cf:19:ec:19:7b:17:0a:9e:5d:db:fd:fd:
         ad:9c:61:9b:36:3f:27:aa:b6:15:78:b7:52:fb:7d:a5:e8:e7:
         9d:a9:77:17:e8:25:a8:37:0d:b7:29:84:b3:30:c4:88:b8:c5:
         1b:12:e7:a7:81:54:c3:79:84:ad:0f:94:4f:fd:3e:af:db:70:
         e1:5d:bd:62:a1:0a:d5:ba:02:ed:2d:b1:8d:26:07:35:f3:96:
         87:bf:2d:79:ae:99:74:11:1e:c4:89:17:8e:9d:d1:b6:b0:c3:
         5c:18:60:61:0e:b4:f6:b4:00:7c:49:be:25:ea:44:0f:92:3e:
         d0:af:36:77:1f:aa:0a:8a:ae:e1:12:38:b2:9d:2b:8e:e8:3e:
         72:89:a7:f6:18:80:79:41:0c:13:45:b9:32:00:8a:d5:a4:85:
         f6:ed:2b:8f:70:70:4c:08:86:6b:6f:c4:6d:59:26:fd:f5:73:
         59:9c:94:16:b8:43:1b:cc:3e:78:4f:3e:1a:e7:da:16:73:2c:
         ca:2d:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:23 2024 by rpki-client on console-ams.rpki-client.org