Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
File:                     9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa (raw, json)
Hash identifier:          kiMN2NqhZ5Kcl20WSLIhHRJvfZDMlifJDoF71/rt/gw=
Subject key identifier:   E5:B9:24:48:B1:DF:13:84:27:E3:52:33:89:70:3F:B3:DD:CC:F2:07
Certificate issuer:       /CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
Certificate serial:       010D0C9F432858460CD93BCDD0C7154DCE380C00
Authority key identifier: FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa
Signing time:             Fri 31 May 2024 01:00:24 +0000
ROA not before:           Fri 31 May 2024 01:00:24 +0000
ROA not after:            Thu 29 Aug 2024 01:00:24 +0000
asID:                     20091
IP address blocks:        23.132.64.0/24 maxlen: 24
                          2604:6c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0c:d9:3b:cd:d0:c7:15:4d:ce:38:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f
        Validity
            Not Before: May 31 01:00:24 2024 GMT
            Not After : Aug 29 01:00:24 2024 GMT
        Subject: CN=c44a7974-a8b8-4749-922d-c5771c66b791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:9f:1c:90:a1:75:9b:7c:96:0f:6c:3c:f2:
                    6b:a7:58:e3:2f:56:00:d7:ee:5e:4b:61:5b:30:a2:
                    39:f5:74:e7:c7:39:9c:be:e5:67:31:34:61:6c:f1:
                    a9:df:9c:1f:b0:8d:93:8f:40:31:5a:cb:78:2f:ad:
                    75:a3:72:8e:36:2c:83:9d:45:a9:1d:61:a0:e7:53:
                    86:9b:a1:fd:f3:53:44:fd:b7:24:dc:2d:6c:37:58:
                    82:0c:98:77:6d:87:6f:ba:c0:04:11:8e:36:55:1a:
                    52:c9:ca:62:a4:c9:0b:83:a4:25:41:1b:c4:e1:65:
                    2d:93:73:5e:10:dc:1f:10:cd:f4:b2:28:f9:14:05:
                    7f:1c:64:d6:bf:ca:c5:f4:bb:a4:d7:a0:a0:04:6f:
                    ba:84:58:33:32:7d:0c:55:2e:14:a0:8e:83:e9:02:
                    d5:02:0e:62:bc:85:de:04:5f:66:4a:e7:1b:fb:fe:
                    50:8c:4a:4c:9d:fb:35:b4:29:b4:b2:1b:ad:1b:c3:
                    f7:3b:22:bb:75:07:75:4a:e4:13:d5:da:c3:bf:f3:
                    e6:19:e3:8d:28:7a:97:1b:0d:cb:50:48:26:c1:69:
                    89:c7:96:07:c9:06:ef:5f:03:3d:5f:c1:2f:68:d8:
                    46:65:4c:08:ef:fb:0e:01:89:a2:b8:26:3f:5f:20:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B9:24:48:B1:DF:13:84:27:E3:52:33:89:70:3F:B3:DD:CC:F2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/9bb7624d-5641-3e7a-90ff-5c3d42746a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.crl

            X509v3 Authority Key Identifier:
                keyid:FA:37:7E:30:C4:98:61:DA:07:EE:89:10:AD:D1:05:C7:89:CF:E7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a14cf30-3ffd-4bde-ae67-7cf4e360ad1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.64.0/24
                IPv6:
                  2604:6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6d:3f:01:a1:47:32:2d:09:cb:c3:b3:77:4f:b9:23:e5:87:
         4f:c3:a0:0a:6c:2f:82:75:57:e8:ce:45:0f:01:ad:39:42:56:
         2b:68:f9:db:3b:77:9b:14:dc:d8:ae:cd:f3:f2:26:c3:7d:5a:
         84:74:93:4c:ba:28:1c:d7:73:78:cc:91:92:a6:7e:07:30:a1:
         40:63:1e:91:43:3a:ac:ee:bd:e7:9c:50:93:ea:02:bc:fd:25:
         1b:b9:88:a6:78:8b:c7:5c:ee:a9:cb:3e:4b:93:e9:2f:4b:0b:
         2d:b8:10:f2:60:56:43:e1:36:46:f1:de:c1:5a:2c:81:e8:4b:
         3b:fd:4a:9b:20:49:75:8a:e9:e7:b8:16:06:67:85:47:7a:e9:
         a6:83:8f:18:a8:1f:9e:8e:83:35:28:1c:e4:f6:f8:2f:5d:09:
         4a:0c:7c:69:6a:f0:07:74:ea:62:24:6a:60:be:a4:20:84:09:
         d5:aa:08:b7:f5:81:5f:f8:5f:72:b1:e3:5f:e9:23:2f:98:5a:
         07:a9:b4:e0:cc:c7:02:b4:32:76:66:7a:ff:4f:50:a0:54:0d:
         22:af:45:56:1d:c8:86:96:e9:dc:67:3d:46:8c:88:01:bd:07:
         c5:b5:57:21:91:f2:79:22:e4:be:93:ba:e0:8b:1a:59:25:81:
         52:9e:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:45 2024 by rpki-client on console-fra.rpki-client.org