Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa
File:                     3e1f93dc-6520-3778-ad3d-37750549a980.roa (raw, json)
Hash identifier:          VnUpMzsXzdwl/Jf0UFQuw7RwxiS31/xLzI+oh4oO/TI=
Subject key identifier:   2A:AD:74:87:48:1C:6A:ED:65:9B:18:D3:EA:83:01:04:ED:CE:90:5B
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285845777DD678C757EA6F83C3A860
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     393886
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d6:78:c7:57:ea:6f:83:c3:a8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=23612ab5-7867-4ac2-9c1d-e983b2d16288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:7f:45:38:0f:7e:41:41:b3:52:d0:97:b6:
                    16:c3:f8:1f:f7:7e:b2:2c:85:5f:c0:a7:c3:cf:c4:
                    8d:5c:93:c3:32:32:a4:eb:a4:6e:1b:65:d2:36:ed:
                    79:45:75:c6:b1:1b:db:fe:3e:78:ad:db:a9:68:d6:
                    5b:33:c4:39:3b:f9:15:4e:78:63:31:da:3a:75:37:
                    46:92:b9:34:b3:12:b6:1d:1f:c0:c4:4b:e6:9a:e1:
                    79:f7:1e:6f:6e:c8:72:85:60:40:48:63:ed:99:f4:
                    d2:8a:b9:e4:9e:cf:28:e5:1d:36:a5:f3:42:de:e5:
                    c5:17:f6:0a:61:a9:85:7b:a3:71:0a:f1:10:e4:8b:
                    3e:56:f7:4f:b2:1d:ac:48:ba:a8:9d:67:79:dd:e7:
                    76:b5:de:35:c6:b1:69:85:e3:36:b9:d8:4c:e1:1d:
                    40:ca:6f:4f:b5:93:8c:4a:d7:68:af:d6:dc:e2:b0:
                    89:d5:30:65:9d:eb:fc:96:b3:3f:b7:5d:6e:ea:bb:
                    57:d8:f5:d7:51:b4:9a:30:dc:56:8d:50:f5:5e:da:
                    ee:1a:1d:d8:fe:11:5b:63:d5:29:70:d8:7f:d9:c6:
                    eb:cf:94:9d:76:e4:52:57:71:a2:75:fa:70:96:8f:
                    5f:5e:62:cd:e6:a0:85:31:7a:c2:e7:4c:9a:e0:a1:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AD:74:87:48:1C:6A:ED:65:9B:18:D3:EA:83:01:04:ED:CE:90:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:3e:d1:3e:aa:36:ad:ab:eb:66:78:17:2e:e6:dd:5c:35:aa:
         b9:42:a7:1b:42:80:12:0d:f7:09:9e:a6:47:04:a1:50:e2:5c:
         79:e8:9f:01:68:77:c8:f3:dd:75:8f:cc:a7:9e:05:2b:9a:99:
         ea:44:53:aa:be:a1:1f:33:ce:93:fc:82:f9:ed:cb:e2:ce:23:
         73:e1:75:fb:f5:12:93:f6:2e:90:09:14:4c:d1:bd:5c:eb:9c:
         90:18:d7:c5:88:63:14:f2:4c:fa:10:fd:81:7c:dd:cd:1b:bd:
         d4:74:95:60:03:e2:65:ab:fd:7e:8d:93:89:5e:db:47:00:19:
         53:15:ba:eb:52:59:8a:09:25:15:8a:44:d0:f4:5e:b5:04:24:
         8e:a0:ce:4c:47:36:80:ba:3c:59:fd:d0:e8:a6:c5:1b:bd:3e:
         73:be:5c:46:b6:26:ce:6e:90:87:3a:de:b7:19:d8:a7:a0:58:
         57:dc:7a:99:9d:d8:0c:c0:18:e2:fc:43:95:fa:6b:10:61:1c:
         51:72:89:ab:61:f2:95:15:93:90:0a:e6:44:47:6f:23:1a:59:
         20:4b:26:3b:67:70:b1:f5:63:b3:45:77:33:e2:5c:a3:be:cd:
         cb:9f:09:67:0b:a9:38:f2:b0:89:56:83:0c:17:d2:e3:6f:eb:
         09:0f:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 16:40:24 2024 by rpki-client on console-fra.rpki-client.org