Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
File:                     11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa (raw, json)
Hash identifier:          bw4lx09hxIdc83F8UOb1YZIF0g72D4S2LbcP9oUAzIE=
Subject key identifier:   60:D0:22:4F:7E:A9:96:D3:1A:0C:25:50:70:60:B0:B3:3B:D1:65:C6
Certificate issuer:       /CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
Certificate serial:       010D0C9F43285846354BCC698A021AC43273E980
Authority key identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
Signing time:             Fri 14 Jun 2024 12:43:35 +0000
ROA not before:           Fri 14 Jun 2024 12:43:35 +0000
ROA not after:            Thu 12 Sep 2024 12:43:35 +0000
asID:                     394760
IP address blocks:        23.140.8.0/24 maxlen: 24
                          2602:fb30::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:35:4b:cc:69:8a:02:1a:c4:32:73:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
        Validity
            Not Before: Jun 14 12:43:35 2024 GMT
            Not After : Sep 12 12:43:35 2024 GMT
        Subject: CN=2ff9690c-b010-4ef4-94c5-515d0ac6e1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:df:4b:76:1a:bb:6d:b9:a5:93:fe:bc:69:0c:
                    87:b0:1d:41:86:9e:06:31:70:49:74:b8:cf:b1:60:
                    fa:e6:7a:81:57:9f:f4:c6:aa:9f:2e:2e:23:4f:6f:
                    c3:33:7e:2b:60:6e:5d:d8:95:e3:66:71:7a:9c:0f:
                    87:4e:9b:bb:10:b7:8a:47:44:1f:dd:7b:f2:12:17:
                    f5:6d:6b:f3:3d:94:c9:39:c7:9b:fd:8d:d4:4e:c5:
                    05:7a:17:04:23:66:82:67:d7:b9:fe:93:3d:b0:5f:
                    0b:62:2d:b4:e7:00:6d:8f:6e:3e:cc:f3:08:9a:2c:
                    4d:fb:9c:5e:c4:95:2e:71:f4:21:b2:c7:d7:b4:00:
                    de:e0:e4:d8:e7:96:97:66:b8:d8:9f:b9:b7:57:de:
                    44:b3:37:17:92:42:c5:63:b7:20:14:21:38:25:35:
                    ff:7d:f4:80:97:62:de:dc:c5:26:57:75:fd:48:97:
                    1a:ce:f3:9e:58:e0:5a:7c:ad:1e:fd:39:d8:37:c0:
                    15:2b:15:56:c2:47:45:13:9b:b6:36:aa:b4:f2:4b:
                    7d:59:8d:5c:f0:4f:b5:04:5c:a6:ca:a1:52:33:d2:
                    af:f0:b2:31:24:9f:bd:c0:9e:0c:05:ae:44:bc:89:
                    2a:93:61:6a:01:51:44:ef:2a:3b:ba:14:f8:6c:13:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D0:22:4F:7E:A9:96:D3:1A:0C:25:50:70:60:B0:B3:3B:D1:65:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl

            X509v3 Authority Key Identifier:
                keyid:FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.8.0/24
                IPv6:
                  2602:fb30::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:de:a4:e5:47:b1:90:7a:01:56:a9:f7:4b:2d:a3:69:b1:c6:
         6c:bf:be:a2:64:3b:0d:3a:37:1f:91:eb:53:93:0a:9a:f3:92:
         89:90:f9:b8:10:77:d3:b8:80:b3:42:a4:ca:29:c1:46:0a:0f:
         06:6b:cd:c1:99:8d:d1:8f:75:1f:be:0f:61:74:5b:92:81:ce:
         64:c1:17:ef:31:8d:05:84:5f:e4:90:6b:98:cd:f4:f7:b9:9e:
         a7:6c:bf:b7:a0:48:65:82:18:02:09:c0:f7:7d:7f:b6:33:ca:
         4a:60:c1:af:5e:d3:c8:f2:8a:4f:14:73:c3:f1:44:8d:72:85:
         47:06:e1:46:12:a3:05:c0:62:b8:57:ca:cd:cb:ba:c0:2d:a7:
         47:4e:1d:1d:90:08:7b:6f:24:4d:14:dc:28:bd:31:b0:e4:cd:
         00:ae:c8:25:46:f3:2e:f1:86:e8:f9:d5:c3:44:94:f1:9f:f2:
         ca:51:f1:67:04:17:02:9c:da:5e:4d:89:5b:07:a6:4f:fd:88:
         61:c8:7a:4a:24:7a:e3:6d:4b:6b:d2:fd:56:23:e3:a2:c0:40:
         e0:64:f6:fa:87:31:20:e8:b2:08:85:38:11:f4:9c:5c:8d:9a:
         a8:7e:76:a7:32:09:4e:6b:57:ee:c6:37:f7:f7:2e:b9:2d:07:
         41:33:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:56 2024 by rpki-client on console-fra.rpki-client.org