Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa
File:                     bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa (raw, json)
Hash identifier:          9nzPVcfCI47oNCtCMXxmQTSDVGjHTy7TJgS2UySrvdE=
Subject key identifier:   18:C6:44:8C:BE:92:D8:72:5A:00:49:CC:B2:44:18:E7:34:B4:E8:86
Certificate issuer:       /CN=687d1923-22fe-4744-9984-8ca387a57cf3
Certificate serial:       010D0C9F43285845AF536B6F75FBE4E03C9DF100
Authority key identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     400495
IP address blocks:        23.133.104.0/24 maxlen: 24
                          2602:fbae::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:6b:6f:75:fb:e4:e0:3c:9d:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687d1923-22fe-4744-9984-8ca387a57cf3
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=1f02702c-bc33-4f49-9a9e-869544af544c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:83:dc:7d:7a:b9:00:e3:0b:da:4d:91:71:
                    d2:71:c5:6d:a3:61:74:a0:47:71:b2:41:4f:86:d6:
                    ab:70:a9:ed:1c:a1:5e:d6:09:2e:dd:a0:e9:2b:2c:
                    ef:60:8b:4d:7c:f9:d3:76:42:fa:bf:e0:a0:a5:90:
                    a4:fd:ab:65:44:3a:fe:43:5c:3f:3a:69:27:48:06:
                    df:a6:20:12:da:94:c8:b7:66:71:7a:97:4e:b6:2f:
                    a3:5b:a7:c2:67:dd:22:d0:1b:ac:b8:9c:37:b3:cd:
                    c1:d9:cc:c0:50:48:8e:ff:80:dd:c0:38:27:fc:0a:
                    a9:55:71:b6:45:87:1f:07:d1:db:82:ed:92:a0:cc:
                    88:e2:39:05:5a:d6:28:5d:d2:eb:3e:6e:a3:0d:2a:
                    ee:b2:43:1f:f9:48:94:60:0a:50:d5:ac:6e:9d:d7:
                    4c:2b:52:27:ff:20:5f:65:a4:de:b7:2f:40:55:f5:
                    92:fb:8c:9d:2a:ee:9b:a4:dc:07:fd:7a:46:ae:a8:
                    dc:71:f1:4d:18:25:93:cb:9b:ab:1b:bc:99:8f:9b:
                    25:be:23:a9:cc:00:b0:97:29:ac:1f:04:16:da:68:
                    66:27:45:aa:0e:ea:07:ff:50:42:6c:55:c3:c1:51:
                    6b:bc:a8:65:eb:4e:a1:67:e5:d3:04:30:e3:7b:de:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C6:44:8C:BE:92:D8:72:5A:00:49:CC:B2:44:18:E7:34:B4:E8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl

            X509v3 Authority Key Identifier:
                keyid:BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.104.0/24
                IPv6:
                  2602:fbae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:71:24:d6:3a:14:65:32:d3:4f:3c:d3:15:8b:63:59:d0:e2:
         b2:59:72:02:96:61:04:47:d8:ec:a0:a5:3c:75:15:2f:44:47:
         37:d2:38:49:48:7a:fd:12:ad:02:87:3b:fd:40:24:4f:0b:88:
         d3:8a:c0:20:6d:8a:82:ab:1d:db:0c:db:b3:21:8a:f6:4e:0a:
         0b:62:19:e5:b5:ab:21:66:5a:f6:ae:61:4f:97:d0:1b:bd:39:
         55:de:9a:ed:7f:eb:a7:f1:4a:e7:1c:a7:fd:4a:87:c0:7b:36:
         fa:6b:cb:e5:25:c8:1c:bb:cb:aa:0c:0d:01:20:b4:b7:42:07:
         dd:0c:d4:82:4f:69:86:f4:19:46:a7:4d:93:47:f1:bf:f7:1f:
         e4:8c:ff:d4:b5:f0:68:f4:84:5d:7c:7d:96:74:0f:a0:09:8f:
         02:b7:1b:0a:7e:27:d0:b3:fc:2c:48:71:21:d8:40:e2:46:05:
         06:5f:c2:98:71:b1:98:0f:9b:55:27:10:55:f0:6c:a4:db:22:
         4e:71:98:06:7d:aa:83:57:4b:4b:ba:95:54:75:ab:f4:29:82:
         b8:32:cf:56:00:34:c0:bb:a8:50:fb:bc:44:87:c2:bd:4e:8c:
         01:d9:71:7a:a0:6b:fe:52:35:48:64:9b:06:e2:18:1e:e2:48:
         e1:02:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:44:27 2024 by rpki-client on console-fra.rpki-client.org