Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa
File:                     cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa (raw, json)
Hash identifier:          cN7BlUwd0MZQVGykC4AwQgP3+PV8M+EmSxCgh0QyfuA=
Subject key identifier:   15:EF:FF:3D:AC:35:27:A3:04:15:9F:3E:4C:F3:C2:94:CF:80:29:3A
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F43285845840DCEB411FFA09DB1A58080
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     39937
IP address blocks:        23.160.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:ce:b4:11:ff:a0:9d:b1:a5:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=494350b2-6f1f-41cd-a03f-90993913ad13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:f0:8f:aa:bc:a3:2c:b8:04:17:97:e0:4a:
                    88:1d:81:6a:2e:8e:34:3d:f3:22:05:62:f0:f0:93:
                    36:75:1a:34:82:b0:0c:3b:ef:c4:ec:29:c5:55:a5:
                    59:7c:cf:c3:1f:e6:13:a5:9b:1e:69:49:d1:bb:7c:
                    f0:ab:4a:bc:e6:ae:d5:c5:1a:5c:14:ee:1b:10:8f:
                    42:76:a3:ae:80:63:04:93:1b:cb:5f:04:ac:42:44:
                    b5:b7:25:80:1f:a1:03:2a:24:04:d9:b9:0d:1d:ec:
                    08:78:ab:d5:d0:43:87:82:b5:bc:a5:73:02:a4:19:
                    8b:6f:80:1b:2a:05:16:2a:8c:73:8e:4a:6d:fb:09:
                    20:7c:e2:ff:91:b1:8c:59:d0:0b:ab:84:8e:e8:f7:
                    1b:4c:07:5b:00:23:5b:06:c0:d4:b2:f5:6f:ce:77:
                    f0:1c:55:ed:e7:4c:90:2b:b7:37:8d:83:3f:56:a6:
                    3d:bd:43:64:d1:c3:a0:f1:63:f8:1a:62:a2:c6:b2:
                    98:20:ba:90:1c:fc:d1:b8:70:c7:9a:07:b5:ba:3b:
                    90:bc:62:e4:42:0d:93:d8:12:ef:cf:9e:72:47:56:
                    fb:2e:3c:2a:0d:21:7a:00:64:a4:d3:55:7d:04:93:
                    f5:da:bb:5d:1d:70:b4:45:d6:0d:d8:1c:69:56:2d:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EF:FF:3D:AC:35:27:A3:04:15:9F:3E:4C:F3:C2:94:CF:80:29:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:59:01:82:e4:a5:45:82:b1:b6:b4:68:36:5b:01:38:5b:bf:
         90:83:ad:68:2e:2a:0d:4a:26:f9:23:7c:6a:16:16:1f:bc:8f:
         ea:7f:b4:14:5b:21:aa:53:93:fd:15:75:4c:db:ea:33:dc:f1:
         b1:e2:7c:34:b8:b6:78:af:ba:b1:9f:c1:8c:a5:90:52:88:58:
         9f:db:b9:b6:68:f0:93:c0:15:f0:c6:e6:20:a0:5d:32:e0:04:
         62:84:39:79:a3:49:e4:9c:c5:f2:48:2b:84:39:aa:45:b9:3f:
         38:fa:4c:2f:66:4e:77:cf:80:f9:10:43:2b:a1:fe:dd:b9:53:
         e7:24:17:1c:8d:9c:ed:15:68:40:a6:c0:60:40:4c:ff:2d:dd:
         31:c1:7a:c1:8f:5d:d4:eb:d6:77:e7:80:1f:f0:3c:87:4b:4c:
         57:a2:96:e8:21:95:be:69:7e:38:cf:f4:9b:7c:c6:08:18:f3:
         59:8b:9e:de:22:26:d2:93:e7:01:25:91:b3:88:cf:9c:0f:99:
         4e:e2:c0:78:f7:11:90:f9:1f:a6:96:7c:e3:8c:4e:2e:0a:36:
         a1:b9:ec:7e:91:11:5c:1c:c6:5e:df:d5:17:17:db:6f:1f:e3:
         f5:78:d5:2d:f2:17:ff:cd:8f:52:63:45:eb:8c:8d:08:65:79:
         5f:3e:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:14 2024 by rpki-client on console-ams.rpki-client.org