Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa
File:                     35aa566c-1d54-3f84-a686-08058cbecf0f.roa (raw, json)
Hash identifier:          +LZvgJY4FpJjIq7dFAgBv4lWnXqapL0t+Gp5GoZjPG0=
Subject key identifier:   E1:5F:C9:47:B9:95:0B:DC:22:3B:29:A6:FD:AA:F8:03:6B:B9:C2:00
Certificate issuer:       /CN=d49d6e31-9274-4997-a718-4ba13c83041c
Certificate serial:       010D0C9F4328584518B046FC5F528961EB309B00
Authority key identifier: 48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     63023
IP address blocks:        23.157.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:46:fc:5f:52:89:61:eb:30:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49d6e31-9274-4997-a718-4ba13c83041c
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=f88ecb9c-5c0b-49f0-bf04-9207ae6a1f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:29:1b:9c:0e:bf:4e:c9:7f:5d:a5:7e:d2:
                    14:8d:de:78:1b:56:97:f3:b0:d9:e1:03:ff:81:2f:
                    4d:0d:bc:61:bb:7b:2a:a3:10:72:d1:3d:0e:7b:e0:
                    dc:d2:6e:27:2b:1f:61:c6:c6:a3:3a:3a:30:27:1b:
                    56:7d:9b:b7:e8:10:99:6f:72:81:01:b2:92:54:d5:
                    2c:27:c8:76:e5:5d:75:10:2a:8b:66:e5:20:e9:69:
                    34:de:43:85:97:d7:a5:25:95:3e:e0:d2:1b:23:f2:
                    60:a1:6d:d2:63:07:1e:ee:11:93:b4:e8:b6:59:e9:
                    85:a7:0d:e3:6a:ee:6a:4d:72:ad:72:07:72:73:80:
                    ae:8c:eb:07:5f:f4:e7:9d:2a:b0:44:ef:a7:c1:99:
                    ff:e9:df:0f:92:97:37:ad:7c:ba:2a:d2:1b:50:5a:
                    5e:a0:63:fe:e4:0b:00:10:7c:77:81:29:9e:74:38:
                    5d:8f:e2:ce:af:f9:72:d1:0d:b8:d5:12:35:8c:57:
                    e4:f5:7b:c2:30:02:84:aa:c7:b6:a3:12:76:f6:36:
                    fa:b2:90:d1:f4:a0:cc:19:7e:7f:cd:d2:29:2c:83:
                    95:fe:fb:59:75:f9:c9:19:eb:b8:39:9f:98:f0:fb:
                    a0:32:df:d5:59:9e:3a:64:32:e7:18:37:f8:5a:4b:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5F:C9:47:B9:95:0B:DC:22:3B:29:A6:FD:AA:F8:03:6B:B9:C2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.crl

            X509v3 Authority Key Identifier:
                keyid:48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:ae:ab:a4:18:3f:f7:2e:76:c7:a0:80:dd:23:27:41:3c:
         6e:d3:2e:78:0c:94:17:ca:6c:d6:6e:f9:ac:ba:6a:5c:bb:b2:
         1e:5b:17:6f:be:ab:d0:b6:06:a2:44:57:c8:56:82:92:d8:c8:
         73:02:27:84:1a:15:ba:eb:9d:5d:9a:e0:e1:51:52:6b:de:b1:
         58:46:9c:49:60:3d:7c:c5:ec:db:b6:bc:49:a1:29:6a:54:67:
         26:ca:40:c8:0d:ae:f2:ab:c2:c7:7e:6c:98:b6:aa:d3:75:4b:
         dd:32:00:20:b9:f2:76:38:0b:6a:19:39:be:df:31:42:56:11:
         c2:31:d4:3c:4e:53:e1:e7:38:9d:f7:e6:1e:48:e0:45:18:03:
         e6:f2:cb:b6:d5:3e:e6:89:59:96:b9:09:6e:9d:57:0c:f7:7a:
         29:88:b6:b0:fa:77:5e:cb:2c:85:05:c9:f7:c5:ae:e9:72:fa:
         80:10:d9:5a:6d:3a:79:c0:4e:c6:b0:92:1c:29:6c:67:67:f1:
         21:ea:0a:ec:fe:91:23:14:55:ec:11:e7:22:25:d3:d3:27:de:
         88:a7:cc:f8:4a:c6:66:19:7e:bd:8f:14:d9:97:55:b7:a6:59:
         8f:06:04:8b:2d:06:f9:b4:25:53:91:2d:89:cd:8f:98:de:10:
         45:a4:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:58:40 2024 by rpki-client on console-ams.rpki-client.org