Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8a162833-2c56-333f-86df-46f6eb8ce0de.roa
File:                     8a162833-2c56-333f-86df-46f6eb8ce0de.roa (raw, json)
Hash identifier:          mx1JukJZvXtIfytTK2vqPE0wgqO41EUP+/X7yh/MlKw=
Subject key identifier:   E9:0B:6B:C5:40:E1:9A:A6:8E:82:2D:5F:56:B4:83:78:DF:1A:69:E0
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285845777DD6B1280E877543912340
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8a162833-2c56-333f-86df-46f6eb8ce0de.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     30633
IP address blocks:        23.19.197.0/24 maxlen: 24
                          2607:f5b5:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d6:b1:28:0e:87:75:43:91:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=2e51bb4b-9dea-4019-845a-318c7bd3472f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:49:da:ab:40:23:02:0a:bb:27:cb:21:69:e0:
                    77:d7:b0:15:12:5b:35:51:67:98:68:aa:53:53:20:
                    c7:ac:9c:23:ef:bf:48:d7:c9:4d:1a:53:d4:b6:84:
                    e1:02:b1:ac:b8:7c:06:a9:ee:6c:2e:45:fb:f8:ba:
                    30:3b:a5:65:9b:5d:42:59:d1:1e:73:80:a0:76:8f:
                    cc:f7:a3:88:ed:8a:2e:6a:a9:f2:e8:89:48:d6:ab:
                    1b:7b:0f:62:1b:9a:92:7d:5d:ef:b8:e0:36:85:b3:
                    90:1e:c8:91:73:33:c2:4d:d0:74:40:38:da:4f:b2:
                    e6:96:c2:f5:cf:37:3f:78:a1:c7:37:eb:2e:0c:7a:
                    d7:92:a1:75:8f:14:78:0b:8e:84:fd:e8:92:91:dc:
                    44:26:37:e5:e8:d1:d2:87:77:96:b7:2a:29:f6:0b:
                    27:45:50:8f:d2:6f:ac:43:62:71:52:e5:c8:29:35:
                    ba:22:84:9c:c9:2b:39:cc:29:79:05:7b:46:89:c0:
                    9b:d4:e2:f8:de:6b:ee:b8:38:5c:33:ab:ff:34:92:
                    a1:cd:ee:4a:03:f2:17:50:5c:0f:4b:51:f3:5b:f5:
                    e4:4c:4f:e0:4c:27:a0:54:0f:95:b9:0f:0d:9d:f3:
                    7b:8d:cf:88:bf:5b:9d:24:57:b8:ec:28:a1:ed:db:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0B:6B:C5:40:E1:9A:A6:8E:82:2D:5F:56:B4:83:78:DF:1A:69:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/8a162833-2c56-333f-86df-46f6eb8ce0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.197.0/24
                IPv6:
                  2607:f5b5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2c:16:75:57:f1:fb:24:5c:ec:30:5e:eb:fc:98:17:0b:f3:
         78:ab:ad:7b:53:5e:e5:15:24:d2:eb:a0:f9:17:ff:02:dd:a0:
         d5:39:aa:0d:72:b5:b6:b9:31:9c:cb:86:24:74:f1:0e:c7:58:
         89:3e:ba:4e:59:b5:61:e3:db:26:46:be:5a:8b:4d:dd:0d:cf:
         d7:9e:31:c8:7e:21:53:aa:29:1a:a3:b1:aa:2b:71:b7:26:c9:
         18:83:13:b3:8e:14:c9:ed:b4:3f:a0:c2:cf:e1:6b:d9:f9:de:
         b3:ad:d3:fa:dd:74:9b:7d:f8:51:50:f8:e5:2e:b5:a9:a8:02:
         17:c2:28:5e:e9:db:ee:cf:c6:78:48:b8:30:8a:fd:83:e6:96:
         d9:03:2f:93:9c:83:65:2a:a9:f7:24:96:e5:0b:74:b7:69:41:
         bf:95:70:bb:56:e9:7d:a0:38:e0:28:97:b8:66:e5:98:cd:e9:
         7f:f5:a6:73:4d:67:7b:50:f9:01:80:cc:e9:8b:a5:0c:b7:70:
         ff:6d:f7:84:60:4c:3e:7e:b6:55:e3:27:37:bb:6a:3b:1f:80:
         28:36:8d:44:91:10:0c:cb:82:6d:99:02:e7:1d:8f:8d:1a:7b:
         cd:68:46:68:f3:ba:66:8d:4a:79:14:8e:7d:f0:24:56:56:3d:
         c8:26:dc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:47:11 2024 by rpki-client on console-fra.rpki-client.org