Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/8b23f6da-1bbf-3a9e-b430-0ffb40252e40.roa
File:                     8b23f6da-1bbf-3a9e-b430-0ffb40252e40.roa (raw, json)
Hash identifier:          ls+v8J7myVm/pvR8+NVa4U4FqcmKlnvx+sALumgYJQ0=
Subject key identifier:   E1:E6:6C:23:5D:57:59:87:B1:06:B3:E4:BB:7C:E1:04:57:81:86:2B
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F43285845ADEE11D452DFAAF8DEA95880
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/8b23f6da-1bbf-3a9e-b430-0ffb40252e40.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     8038
IP address blocks:        67.221.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:11:d4:52:df:aa:f8:de:a9:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=43161aa6-e7c1-4902-8432-64e3db4c7792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:0f:43:eb:11:41:40:53:a3:2c:91:d4:d6:
                    32:14:01:25:3b:6e:2d:7b:8f:17:80:16:24:c0:3d:
                    1e:cb:91:3f:5c:e0:86:da:06:a1:15:35:37:4c:ec:
                    62:c1:44:22:c1:b4:f3:82:39:3b:fd:d9:c3:10:a1:
                    7b:17:72:e9:fd:11:d2:a0:28:39:f1:45:17:92:a7:
                    c2:23:3f:6b:e8:e0:44:94:36:14:c2:2d:03:75:50:
                    43:74:68:2e:9b:a9:ac:92:23:e2:aa:54:67:35:96:
                    30:f3:06:e0:da:65:98:88:ea:92:df:bb:7f:66:3d:
                    dc:23:88:33:b0:80:f5:f2:50:8c:cb:58:2a:31:d7:
                    f6:5b:9e:60:e1:bb:4d:5e:17:28:f5:64:fa:92:f9:
                    9c:2c:fa:8e:f8:d3:80:b9:92:7e:eb:f6:32:78:ab:
                    51:8c:7d:47:bc:a9:32:ab:95:8d:3d:fa:7b:8e:cf:
                    23:81:7e:b1:b1:f0:2f:1f:60:5d:68:ed:45:c5:03:
                    9d:e6:4e:61:3d:90:fc:69:4f:79:25:1e:fd:7d:91:
                    76:26:52:88:83:68:03:fa:c1:62:92:47:3d:54:69:
                    91:15:03:bd:27:83:86:0f:33:5b:98:d6:f3:77:5c:
                    08:a4:90:a9:f2:72:3d:06:2c:ff:c6:8b:d3:ca:35:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E6:6C:23:5D:57:59:87:B1:06:B3:E4:BB:7C:E1:04:57:81:86:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/8b23f6da-1bbf-3a9e-b430-0ffb40252e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:ee:b8:f0:73:8b:c5:ed:81:34:ee:2d:a4:d1:86:c9:55:57:
         e1:ea:ae:4e:a6:31:5a:22:e4:dd:ae:d3:ed:a3:22:2e:c9:1c:
         75:26:2a:76:39:2c:7e:3e:cb:51:33:1f:e6:54:f1:3b:15:ab:
         d3:ab:f6:16:52:26:f3:93:6c:60:88:c3:9e:38:e6:e5:4c:fb:
         23:27:64:36:b6:92:21:a8:89:64:a0:c9:c7:71:09:b5:55:37:
         ec:9b:32:c6:13:be:5a:ee:7c:9b:1e:b0:56:b1:64:58:4d:0c:
         a3:c5:45:80:a1:d7:65:ae:b6:fb:89:c6:83:f0:6a:af:47:1b:
         24:b7:96:17:86:b7:b1:bb:b6:ea:d3:d6:49:41:ad:05:db:f5:
         57:c2:4b:fa:2b:01:77:c8:a2:e8:25:ef:cb:f1:69:a1:d9:22:
         d2:a0:01:b1:ec:8e:a9:75:d1:ee:9c:c3:b0:05:1c:00:8f:bc:
         24:b1:8d:af:05:a0:ba:b1:b4:f8:46:4f:8e:19:5b:c6:0c:e5:
         08:99:b8:96:e5:06:3b:68:a4:83:97:ea:79:6f:b3:fb:d1:32:
         e6:c4:c3:fe:f8:11:74:a7:c9:8a:6a:4f:2b:ca:57:e3:e2:27:
         d2:35:b2:a6:24:1b:36:ef:65:9f:23:8b:21:11:65:5c:71:03:
         cd:7f:6c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:54:04 2024 by rpki-client on console-ams.rpki-client.org