Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa
File:                     73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa (raw, json)
Hash identifier:          qzZy7PU01D4ZqHHs6YvRFNV+VA0YkBz4WyMqIrbxvQ0=
Subject key identifier:   AA:EC:B2:98:D6:AA:1E:D8:A6:08:2F:6D:6E:CE:66:FA:D5:42:4E:16
Certificate issuer:       /CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1
Certificate serial:       010D0C9F432858456C5321DC9B9BA24FBC34E100
Authority key identifier: 90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     400154
IP address blocks:        23.128.168.0/24 maxlen: 24
                          2606:8cc0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:21:dc:9b:9b:a2:4f:bc:34:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=9cad32d9-dfbf-4b9f-afb2-4fc3d1249d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a2:50:7d:24:d6:47:ab:41:a8:05:19:47:5b:
                    44:22:21:87:3b:53:b3:31:19:f1:a9:21:aa:46:b8:
                    3d:37:c5:c6:a2:94:ce:55:b0:16:df:77:81:10:1a:
                    e3:90:39:53:f1:ab:df:4d:a1:6b:dc:1e:20:26:91:
                    f9:8d:36:31:73:50:d9:ee:d5:b1:5c:a9:b4:6b:f8:
                    d6:e8:55:ee:7d:c4:f8:36:e0:47:69:7d:2d:ea:f1:
                    80:d4:38:c7:a7:b3:ae:8a:a4:16:fb:80:68:9a:4a:
                    e3:5c:2c:9f:6c:62:08:2c:55:6b:af:27:f7:28:6f:
                    94:fd:70:02:b2:76:be:28:e8:ad:40:b5:21:96:39:
                    23:6b:93:58:49:ba:43:f9:82:7a:a4:d7:47:fe:2b:
                    30:0c:0b:55:bd:dd:5a:15:84:83:08:33:69:70:06:
                    33:9d:de:77:1c:4e:6c:22:07:36:87:61:cc:68:d7:
                    d2:e9:83:c6:58:63:05:7f:ae:ca:61:27:b5:17:9d:
                    32:98:8a:43:b4:2a:e9:69:7c:cd:79:ed:fb:1a:df:
                    1c:ec:98:89:98:13:24:1c:fe:00:05:c6:92:d3:74:
                    e6:e6:a8:30:c7:97:c9:21:2d:64:bb:bb:5d:b1:80:
                    1f:ac:b2:9c:f0:98:45:5c:ae:a8:c3:a2:af:47:7d:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EC:B2:98:D6:AA:1E:D8:A6:08:2F:6D:6E:CE:66:FA:D5:42:4E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl

            X509v3 Authority Key Identifier:
                keyid:90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.168.0/24
                IPv6:
                  2606:8cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:a8:0c:16:39:98:84:dc:7e:ca:df:e6:09:28:ce:05:6e:86:
         82:53:a9:8f:84:80:5b:a2:07:c3:c9:5d:5c:45:44:bc:84:ab:
         dc:e0:a6:88:7b:b5:4d:ad:09:8a:60:49:b5:b0:3d:20:14:5c:
         e3:a6:3e:77:89:7e:60:19:cf:a3:0c:9d:3c:33:cd:af:be:0a:
         c0:1f:17:a4:95:5f:37:ac:77:64:07:65:b1:63:0e:a3:f6:d0:
         dd:31:3d:9d:a2:b9:29:3d:24:33:1a:63:25:34:e7:dc:18:f1:
         c3:19:64:40:3a:61:8a:0a:cc:3d:ed:3f:d3:60:20:51:ed:85:
         42:13:13:32:26:3a:97:a4:d8:85:ce:ca:de:f9:ec:ca:fe:bc:
         2b:e2:d4:2b:d3:dd:27:c4:82:90:ab:4e:46:63:3a:71:cc:dc:
         69:f6:0a:28:5e:38:f0:c5:55:ea:7b:da:7e:d7:50:0e:29:2e:
         0b:a1:1f:9b:0c:dd:e1:86:31:8c:5a:c5:8c:10:d8:1b:9c:be:
         8b:e0:f6:f8:3f:e7:b2:9a:bd:42:92:bf:93:47:8e:2c:82:bb:
         4e:ae:fd:c4:8e:ed:ab:c4:8a:d0:7f:08:53:13:f6:a0:90:10:
         13:c6:84:0c:4e:8a:6e:ef:91:3e:54:e3:ee:1c:42:18:b9:a7:
         c2:7e:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:33:11 2024 by rpki-client on console-fra.rpki-client.org