Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa
File:                     502505e1-d06b-3b30-bd54-58420c555658.roa (raw, json)
Hash identifier:          6kT9Eu8FBbcWhZHdUSMOrhw4WiVht8WTeByiOHcIrPI=
Subject key identifier:   2F:6A:E1:CD:2B:A0:F3:5D:3D:6F:AF:82:14:15:A5:84:68:1B:E6:DB
Certificate issuer:       /CN=068fe099-ec29-42a6-8cc8-92597523d41f
Certificate serial:       010D0C9F43285845E45E7211950C38D192C7C180
Authority key identifier: 9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     33263
IP address blocks:        23.167.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:72:11:95:0c:38:d1:92:c7:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068fe099-ec29-42a6-8cc8-92597523d41f
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=6573259f-c92e-4f2e-afe2-e661755bc3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:80:3f:c7:53:12:f2:77:79:2e:5b:d8:a6:
                    04:10:6b:07:8f:11:3f:1d:e9:b1:73:68:16:0c:34:
                    47:98:6b:79:de:56:25:e2:d7:5c:7a:81:dd:78:c6:
                    ee:8a:76:7d:fc:3e:ae:2f:3c:3f:c8:06:04:0a:29:
                    e3:d0:4c:d5:99:83:8f:f3:2d:7c:d6:d6:40:70:c9:
                    2f:cc:cf:a9:97:2f:27:cf:1f:fb:75:7c:5e:f8:5e:
                    cf:16:72:56:2c:e3:11:d1:88:e0:ed:6d:13:01:78:
                    dd:4c:2c:fa:8e:20:0e:94:77:62:d0:35:95:f0:5a:
                    ec:db:3c:58:53:b2:79:92:73:aa:91:5c:9c:db:50:
                    af:96:1e:84:58:6e:3f:ab:ad:d2:9f:2c:b1:a5:4f:
                    c4:b8:85:1a:44:82:38:b4:62:4e:7c:af:2a:66:48:
                    d7:90:4f:0a:ff:ae:cd:fb:45:9f:c8:82:2c:85:bb:
                    1e:73:ac:9c:ae:b8:0f:8a:a7:09:51:e1:b8:b1:a5:
                    ed:6b:f4:00:a8:8b:37:3e:e2:99:af:d8:37:07:bd:
                    8b:54:8b:08:af:37:39:72:56:fb:59:3b:02:ef:83:
                    3a:52:78:25:cc:a2:1e:5f:0b:5b:36:3c:a4:9a:50:
                    6b:90:d4:84:32:2b:24:46:9d:62:b1:ea:eb:71:2e:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6A:E1:CD:2B:A0:F3:5D:3D:6F:AF:82:14:15:A5:84:68:1B:E6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/502505e1-d06b-3b30-bd54-58420c555658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl

            X509v3 Authority Key Identifier:
                keyid:9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:1c:6a:c8:df:bf:0f:48:c0:1c:62:ea:d5:e6:2c:4a:97:09:
         0f:f5:d1:71:9b:c1:b2:6b:b9:a3:a9:b7:09:fc:34:f4:16:fa:
         f9:df:d5:a8:2e:69:b9:85:bb:17:dc:35:67:85:06:f2:04:31:
         ae:2a:ad:44:94:b4:d8:c1:44:0f:98:f3:68:ef:78:25:81:08:
         38:a1:cf:b3:e4:11:21:47:13:ec:3b:c4:f7:31:c2:f3:24:13:
         90:cd:cf:49:ce:94:59:18:b7:12:46:9c:eb:b4:74:87:23:04:
         ed:30:1a:6b:06:ca:66:73:dd:4d:c8:5f:b1:bc:96:9a:0c:4c:
         a0:e0:91:8d:a5:16:de:4b:ae:aa:2c:08:3b:a9:5b:3b:a1:46:
         f4:35:fc:d7:f0:7c:39:7e:8c:c3:82:82:43:01:1f:17:d6:a2:
         df:c5:f2:5b:31:c7:1c:72:f2:a9:b7:d6:3f:3f:0b:81:28:45:
         ce:17:11:48:3c:37:db:6e:46:a6:b5:60:a0:8b:48:b9:e8:07:
         4a:78:a5:1d:49:49:26:17:3f:d3:1b:ca:80:81:25:41:9e:ea:
         6c:55:b2:ae:82:12:b3:19:c3:23:0b:1b:a1:9d:5f:8f:2b:9d:
         ba:8f:49:00:03:d8:85:17:2b:94:55:a3:7f:45:77:5a:9a:e4:
         fd:f9:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:32:39 2024 by rpki-client on console-ams.rpki-client.org