Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/587232f7-fb44-3c9a-9052-19c9094e3ac6.roa
File:                     587232f7-fb44-3c9a-9052-19c9094e3ac6.roa (raw, json)
Hash identifier:          J97h+fiNyUFUp3MvY5OiJGEvHes4FLO6ixePKKMbf+U=
Subject key identifier:   33:E4:4B:38:B6:26:77:E7:77:D5:96:92:E6:F9:DC:E4:B3:B6:60:B4
Certificate issuer:       /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial:       010D0C9F43285845CE08F50AEA2D43074165C740
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/587232f7-fb44-3c9a-9052-19c9094e3ac6.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     7018
IP address blocks:        23.154.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f5:0a:ea:2d:43:07:41:65:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=992adaa4-a02e-4ce3-a39b-bbde5b5394da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:b8:f7:9f:d6:e5:2d:79:bd:3d:f1:09:40:
                    b2:cc:64:08:65:8c:83:7c:cb:66:e1:fa:fd:b8:bd:
                    06:e3:2b:b7:95:02:78:bf:07:c1:67:e3:a6:5a:24:
                    cd:fe:65:fc:67:81:46:d2:a4:e4:74:86:5b:4c:1b:
                    a8:1a:51:d7:e1:7d:29:f4:9e:9b:f2:d6:6b:a9:6e:
                    89:08:df:da:60:d0:9b:5e:a9:02:ec:40:83:8b:2a:
                    66:f3:4a:72:13:d0:34:59:cf:05:77:a9:b2:03:cc:
                    20:75:47:91:53:3c:de:2a:eb:d5:31:a2:8a:31:95:
                    64:27:bf:db:a2:db:08:33:f7:68:29:03:0e:c3:01:
                    c1:a9:fd:60:70:59:e0:b3:f0:e6:d2:52:f2:6e:d5:
                    f0:d4:48:8d:41:2d:5d:34:87:77:fe:4c:75:37:2a:
                    9d:2b:d6:dc:32:cc:44:2f:28:aa:5d:2b:05:3f:ab:
                    41:e5:fd:80:8f:13:c4:87:ff:2d:5e:c4:d5:1e:d9:
                    9e:73:71:00:27:89:0d:92:f1:34:f5:5e:10:be:e7:
                    75:00:14:21:f2:eb:fe:e8:37:28:59:0c:4d:b2:53:
                    c1:ec:57:74:4a:ae:83:5b:95:04:3c:a2:a0:2e:a9:
                    d0:8a:46:49:d3:9e:3a:c5:b0:fb:5d:cf:c2:c7:94:
                    54:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:4B:38:B6:26:77:E7:77:D5:96:92:E6:F9:DC:E4:B3:B6:60:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/587232f7-fb44-3c9a-9052-19c9094e3ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl

            X509v3 Authority Key Identifier:
                keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ac:e3:46:98:1a:92:81:36:eb:bf:74:7d:7f:d7:ff:d7:c5:
         c4:be:bf:db:db:76:82:dd:9d:f7:4c:38:a0:af:87:88:fb:da:
         b6:f6:d9:5e:24:58:03:f3:e7:1e:fd:15:5e:d9:d8:95:b8:d7:
         ea:06:14:81:da:8c:a0:4d:da:d6:c2:81:11:68:b3:b7:51:72:
         4a:68:83:89:69:9d:9f:f3:77:ab:c2:ce:eb:30:f9:e8:1b:d7:
         0c:bd:e9:f4:2a:35:56:dd:1b:cb:0d:96:5c:78:53:ec:4d:32:
         a5:7e:43:25:65:be:ce:c6:ba:b5:b8:26:f9:63:a4:14:95:fe:
         49:13:26:bd:0e:25:3c:49:f6:fb:78:29:ce:b6:65:f0:16:33:
         a5:e4:c4:12:4c:8d:41:8b:95:ba:b6:1f:92:43:30:79:2b:ad:
         12:24:60:fc:f2:9f:de:73:c7:61:5a:71:5f:41:d4:66:1b:ed:
         19:ec:eb:3d:af:13:09:27:5b:95:e2:33:12:42:d8:99:d9:f8:
         63:d2:85:1a:ea:e7:95:ed:c8:4a:09:59:b6:e8:dc:26:ff:a4:
         1f:53:54:23:15:63:bd:ba:8e:47:a1:dd:1d:cb:69:b4:dd:0f:
         95:91:b3:11:89:5d:eb:fc:b6:c5:98:d5:24:e7:6d:14:65:88:
         d6:23:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:06 2024 by rpki-client on console-ams.rpki-client.org