Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e19302d3-54e3-3784-8553-4362e2b89940.roa
File:                     e19302d3-54e3-3784-8553-4362e2b89940.roa (raw, json)
Hash identifier:          oLh3cLpYynT6A2VAnfgFfqVmzi4UBaBeQK7++BQN/lM=
Subject key identifier:   EE:27:7A:77:77:B5:28:8A:34:E8:27:86:19:22:57:43:71:B6:BA:8C
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F4328584554981EA66BDED3D2EE23C3E0
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e19302d3-54e3-3784-8553-4362e2b89940.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     210645
IP address blocks:        23.151.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:1e:a6:6b:de:d3:d2:ee:23:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=f49fa754-294d-4afd-9c16-b66f90b93a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:93:9b:f1:cf:4c:4f:64:c3:02:82:4e:e4:
                    31:61:4a:5e:53:97:4b:5e:4e:b7:67:47:a0:4c:0c:
                    b6:84:54:ce:4e:cf:2a:32:ff:e6:cb:0c:f7:f7:e7:
                    20:4d:84:b7:df:25:9d:ca:72:fc:58:e3:e5:c4:cd:
                    f3:11:85:05:e6:33:10:43:91:88:40:3b:2d:c5:36:
                    90:43:5a:f9:59:fd:77:e0:da:0b:ff:3b:ac:13:5e:
                    fd:bd:b6:03:89:55:e9:24:92:ac:66:30:d0:ed:fc:
                    a6:c9:b8:f2:d7:48:c0:35:03:ba:8a:c4:cc:4d:c8:
                    b0:d4:0e:0d:63:f6:de:5e:44:ef:bc:2a:89:05:aa:
                    d8:8e:c8:2e:6b:ea:4f:3c:c3:10:d7:e7:e7:db:d0:
                    85:e2:28:22:d2:21:86:67:99:07:6a:66:3b:d4:a5:
                    bd:77:73:5e:3e:50:6f:14:38:43:c8:37:e5:6d:ba:
                    7c:a5:e6:5e:17:f1:b2:3f:34:73:d5:40:20:0b:35:
                    43:ab:42:6b:44:42:7b:bb:91:8d:7a:ab:2e:db:ef:
                    f7:84:e6:1f:4b:d3:1b:1b:18:11:a2:04:a0:dd:26:
                    98:81:b0:fc:e4:1d:9a:19:8a:89:3b:c9:26:bd:79:
                    2c:ec:d8:8a:e8:55:c2:b4:2e:b4:f2:5d:b5:b1:d1:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:27:7A:77:77:B5:28:8A:34:E8:27:86:19:22:57:43:71:B6:BA:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/e19302d3-54e3-3784-8553-4362e2b89940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:28:92:36:46:0d:0b:fc:fd:2c:32:74:d2:71:00:7b:50:85:
         38:51:06:84:eb:c4:72:b8:91:e6:ed:fc:4a:dc:bb:11:e9:8a:
         fa:93:21:11:17:bb:1f:e7:c8:fd:d8:33:5f:dc:e1:1b:7e:0c:
         f2:eb:d9:0e:0c:37:b1:d9:ac:7c:89:7c:41:53:a8:3d:96:e6:
         66:b7:ef:f5:24:de:8d:40:d2:7e:4b:49:29:65:cf:ad:1c:28:
         96:e6:ac:fc:31:4f:7a:97:c9:6e:fd:65:15:65:2d:25:0d:d4:
         2c:ae:a0:c8:7d:32:45:b8:23:a6:22:23:e9:38:b1:fa:42:2a:
         27:77:50:36:e7:7e:58:3f:ed:56:d2:5c:32:fb:b4:09:ce:fa:
         ae:a5:87:11:49:5c:a3:98:84:d1:93:16:05:43:f8:8d:74:8d:
         a7:92:4a:70:34:58:16:08:d3:68:c5:2b:5e:89:5b:fd:33:7e:
         3f:f2:04:e2:3b:f0:e2:77:51:5c:33:d2:3e:ae:b4:cf:15:e5:
         45:87:12:d2:4a:4e:d6:0f:14:95:ac:84:9e:a9:c1:a9:bc:43:
         14:f1:1b:ee:51:7f:50:aa:53:08:1d:06:59:2a:3b:c2:75:94:
         ec:9a:61:35:a6:6a:4a:a6:8e:a2:cb:65:1e:09:f5:80:8d:7b:
         94:d6:1e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:05 2024 by rpki-client on console-ams.rpki-client.org