Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa
File:                     c88482ce-5336-3c12-a513-f86f7726f25a.roa (raw, json)
Hash identifier:          sxIHcgYR8qZaADq3HafrlZ46WWb198psOz+fTH/76+A=
Subject key identifier:   15:D2:41:9F:34:58:C2:70:9B:02:96:DE:C6:3A:8C:A7:39:5F:95:8E
Certificate issuer:       /CN=3572e9fa-d098-46d4-a528-9373b3585402
Certificate serial:       010D0C9F43285845A15DFEC4A970D228F6864500
Authority key identifier: B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     40139
IP address blocks:        23.186.144.0/24 maxlen: 24
                          23.186.145.0/24 maxlen: 24
                          23.186.151.0/24 maxlen: 24
                          23.186.148.0/24 maxlen: 24
                          23.186.146.0/24 maxlen: 24
                          23.186.147.0/24 maxlen: 24
                          23.186.149.0/24 maxlen: 24
                          23.186.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:fe:c4:a9:70:d2:28:f6:86:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3572e9fa-d098-46d4-a528-9373b3585402
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=1bcef9ec-cd17-4890-93fa-7592e0842aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:12:42:ed:4c:5e:eb:c2:cc:2e:bb:88:43:af:
                    46:01:08:05:ac:fe:86:95:16:72:a7:1d:b3:ac:4c:
                    d1:35:2e:17:d2:66:41:13:db:3d:2b:9d:1a:6e:a0:
                    b0:1f:b0:32:5c:2d:f5:ee:60:fb:bb:98:14:bf:7e:
                    46:76:ae:f2:36:c3:79:03:57:a2:d4:ca:be:5e:6b:
                    1b:a3:e6:8a:56:2a:2a:ed:1d:cd:f8:b5:52:21:81:
                    11:8f:72:40:26:a0:0a:ab:ee:09:2d:33:75:e8:0f:
                    2d:52:13:24:43:66:d7:70:be:82:bc:0d:cb:d1:b5:
                    7b:6a:91:af:8a:e2:76:aa:10:c3:9f:9f:05:30:b6:
                    54:d2:df:95:52:dd:c6:2b:29:5f:c0:ee:a9:5c:e9:
                    13:28:5f:b1:64:b5:f6:5a:86:88:1b:d3:af:16:2e:
                    10:56:38:a9:23:f6:73:7d:2a:8f:d8:2e:46:0d:0a:
                    a7:7f:54:e4:ca:be:44:6f:e3:3d:66:a9:ee:4b:3e:
                    75:38:5e:55:49:3c:8e:94:6c:e7:f1:e8:b8:96:f0:
                    aa:52:b0:b5:0e:29:36:fc:04:6e:86:f9:da:5f:3b:
                    2f:75:4a:87:11:c8:5c:86:e3:9f:a2:15:f3:c7:f7:
                    01:a0:18:c8:e4:8c:e0:4a:4e:0e:0b:6a:4b:9f:a7:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D2:41:9F:34:58:C2:70:9B:02:96:DE:C6:3A:8C:A7:39:5F:95:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl

            X509v3 Authority Key Identifier:
                keyid:B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:91:4b:14:e1:12:db:ca:f8:ef:ef:3f:be:30:bd:b3:1b:bc:
         be:cf:13:7c:90:5f:ec:56:59:26:41:91:6e:b4:c1:c2:60:e6:
         32:a8:ab:99:6e:81:3b:93:ed:16:bc:71:c1:17:15:33:f1:df:
         19:c3:d8:4c:ec:2a:8a:01:b4:db:5c:1c:3a:f2:99:7e:40:14:
         bf:ac:8a:a9:1a:51:1e:d4:eb:66:c8:61:52:18:a7:04:51:fa:
         5f:23:83:e2:04:43:d4:cd:a8:c2:51:e7:1e:de:b9:43:4d:9d:
         9e:16:d2:84:66:4b:24:24:9e:ff:5e:8f:f8:dd:25:97:d2:70:
         a4:81:8d:71:1a:f3:4b:a9:cc:f1:38:8d:28:06:4c:83:26:4c:
         18:f3:d8:2e:75:cc:66:6d:64:25:26:cd:3b:57:52:74:89:df:
         a6:38:65:75:b0:f6:e3:25:21:e2:8d:14:05:e2:ea:69:39:75:
         05:70:e4:25:7f:51:68:d5:20:25:8c:56:6a:59:87:2f:e8:f2:
         48:f3:50:eb:b8:b6:d2:09:0e:6b:5f:d0:0b:69:5a:c6:a3:ad:
         35:fb:71:29:5e:28:9f:da:53:46:03:d0:ec:aa:16:04:7c:1b:
         25:c9:ca:5a:a7:14:62:40:45:29:b6:89:57:37:5b:38:1d:1c:
         ab:82:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:54 2024 by rpki-client on console-fra.rpki-client.org