Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa
File:                     0e0fc866-45da-33ff-bcd7-998937e25816.roa (raw, json)
Hash identifier:          1spUI5ctGgqwvd9yU+sW2miT6yW7BR94bd5+M6qxi9U=
Subject key identifier:   03:CD:CF:63:83:1E:FF:9E:42:04:F0:7D:DB:E0:2B:61:DC:8A:F0:90
Certificate issuer:       /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0
Certificate serial:       010D0C9F43285845F51E9251072C87EB98358B00
Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     395648
IP address blocks:        23.132.8.0/24 maxlen: 24
                          2602:fcea::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:92:51:07:2c:87:eb:98:35:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=952d7233-7fac-4395-8b1f-a89d460fc994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:36:69:19:db:bb:78:89:98:c0:50:55:d4:29:
                    e1:d5:1f:74:5e:6f:40:27:64:fb:5e:8e:54:4b:38:
                    00:10:50:d7:a0:84:d1:ad:e1:15:10:3e:32:47:8b:
                    32:1e:c0:ce:77:61:c2:8d:c8:41:fb:a0:b4:e2:89:
                    6d:04:f0:2b:78:74:7f:16:c0:88:71:4a:9c:d7:bf:
                    63:29:ed:57:bb:97:22:b1:7a:71:da:93:7a:b3:cf:
                    da:8e:64:f7:8e:b8:26:11:f8:c2:0c:44:ca:7a:3f:
                    83:c8:bb:6a:6a:cc:88:6b:b5:f0:be:da:44:11:ef:
                    ca:7a:bc:41:95:e7:f7:ac:49:fa:ca:d6:22:09:62:
                    38:ad:73:38:75:b3:57:79:1f:8a:c7:dc:69:66:9e:
                    e0:d8:6b:30:fc:a8:8d:bb:9c:f9:30:4f:25:27:44:
                    20:c9:84:66:bf:a2:0f:a4:0a:e5:49:4f:da:90:1b:
                    31:bb:cd:25:42:61:f2:60:fb:48:e7:ba:e2:8f:29:
                    e6:5e:87:55:f4:a5:11:14:2c:84:7d:18:e7:98:f8:
                    d7:a8:b1:e9:fd:7d:a3:87:43:80:e1:b1:1f:b2:af:
                    73:16:47:75:05:5c:b4:1d:4a:03:5d:0f:60:f7:6c:
                    ab:f2:60:bf:fc:ee:0e:e7:2a:e1:05:6a:d5:d8:bd:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CD:CF:63:83:1E:FF:9E:42:04:F0:7D:DB:E0:2B:61:DC:8A:F0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl

            X509v3 Authority Key Identifier:
                keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.8.0/24
                IPv6:
                  2602:fcea::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:80:f8:90:ad:ef:8e:d1:4d:fc:e6:b7:62:50:e7:28:c6:
         50:9e:6e:75:15:73:cb:bd:46:3d:58:2c:21:cd:8e:58:f5:0d:
         ee:ec:f5:2c:8f:a3:42:28:be:26:ed:e2:01:8d:15:2b:fe:ac:
         52:a8:bb:ef:88:18:fb:2c:cc:4b:df:46:6d:dc:5f:db:d2:50:
         ba:af:3d:2e:23:e5:d9:ac:f9:56:60:4b:a4:c9:21:92:05:8b:
         07:14:be:7d:4f:ad:1b:c7:94:bc:1e:86:84:9e:85:06:0a:32:
         b7:8a:07:9a:37:a9:3b:d7:14:e9:11:93:7d:48:c8:c5:ba:15:
         1a:ff:51:9c:21:f4:a8:58:6f:98:72:31:01:7b:ec:a2:a9:b0:
         73:2a:e6:e8:74:5e:0c:5b:11:bf:a1:94:87:e5:43:4a:46:57:
         e9:d2:ed:e1:6c:7f:f1:db:7e:eb:ce:5a:37:79:ec:7b:79:67:
         ed:48:74:14:81:81:21:59:e8:e8:3a:19:ab:26:2f:d9:cc:09:
         93:dc:c3:a7:30:f1:25:9a:42:ab:88:dc:2a:8c:e3:3b:31:44:
         85:27:7e:b1:56:72:36:0a:68:1a:bb:1f:52:c4:d4:ac:de:51:
         43:6f:ae:9c:7e:0a:23:5d:0c:d5:b3:b9:18:67:62:84:41:9b:
         ed:e2:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 14:56:55 2024 by rpki-client on console-ams.rpki-client.org