Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26a525f6-c6ab-39a9-95d0-393398920884.roa
File:                     26a525f6-c6ab-39a9-95d0-393398920884.roa (raw, json)
Hash identifier:          4WHmqC/qRVrN6XPaISgPJ8b754vdj1r0KLLwVt9/uhw=
Subject key identifier:   CA:BD:B6:C6:3A:34:66:C6:19:00:D8:E0:F7:34:08:E0:9E:2C:28:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DE956B9B092A13EF8B715D60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26a525f6-c6ab-39a9-95d0-393398920884.roa
Signing time:             Tue 14 May 2024 11:16:36 +0000
ROA not before:           Tue 14 May 2024 11:16:36 +0000
ROA not after:            Mon 12 Aug 2024 11:16:36 +0000
asID:                     20940
IP address blocks:        23.44.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:95:6b:9b:09:2a:13:ef:8b:71:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 11:16:36 2024 GMT
            Not After : Aug 12 11:16:36 2024 GMT
        Subject: CN=1b027f7d-93dd-4dfc-844a-d98268f7e248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:a6:ae:35:7d:eb:bd:5b:08:bf:c3:3a:a2:
                    50:05:25:ba:df:50:51:d2:e1:3d:01:fb:0a:d2:c8:
                    d1:8a:0d:64:3c:57:5a:33:38:1a:83:da:13:c5:0a:
                    6c:6d:b5:e7:dd:82:a4:16:07:70:59:29:81:fa:4c:
                    e8:0f:60:f3:cf:33:e3:67:8e:99:e4:06:31:65:3c:
                    a3:5d:43:7b:18:3a:09:7a:d7:aa:f6:17:5a:b4:95:
                    c1:00:cc:ac:5b:78:ba:80:e7:a9:45:15:6f:45:2b:
                    0f:e0:b8:9d:fd:a2:b1:28:2d:d6:f5:ab:ee:18:34:
                    cc:3f:d9:d4:03:e5:cf:e8:e2:d9:17:bb:e9:c1:a4:
                    8a:a4:4c:b8:b5:21:e0:d3:23:2a:ea:a9:a0:aa:14:
                    03:aa:5e:fd:77:51:18:61:24:5d:bc:0e:17:5a:4d:
                    31:db:a2:1a:91:6f:82:fc:ef:3d:a1:ef:67:d1:bc:
                    e6:a5:5f:33:b9:9c:10:15:65:bc:b5:cf:14:85:99:
                    5c:4b:88:b1:aa:ce:2e:7f:cd:71:77:3a:f3:4b:eb:
                    1d:3b:ff:b7:21:01:2b:55:e0:1c:1f:c5:ce:c6:a4:
                    ab:a3:89:39:39:c4:9d:f6:ba:3d:e0:27:8b:98:61:
                    b9:f4:bc:3e:bf:cd:ed:c4:3e:61:c4:35:eb:2a:13:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BD:B6:C6:3A:34:66:C6:19:00:D8:E0:F7:34:08:E0:9E:2C:28:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26a525f6-c6ab-39a9-95d0-393398920884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:c4:f9:9f:5f:00:87:ad:11:6b:1e:2c:d6:c3:e4:4d:24:
         de:3f:28:15:5f:ef:3a:c8:7c:cc:6c:92:ec:eb:f2:e5:00:e8:
         d2:df:ed:64:3f:b7:70:fe:10:a4:1e:46:61:92:d6:4a:3c:58:
         8b:ec:a5:8e:ca:ad:13:16:4b:71:9a:1e:39:25:54:e4:f9:e6:
         1c:8b:4d:79:df:ed:3d:de:e3:9d:be:3a:50:a7:eb:83:47:f3:
         dd:d4:09:22:e9:b3:05:dc:9f:c2:9a:f6:23:20:ef:03:63:dd:
         82:58:cc:ea:47:67:aa:42:34:a6:d0:01:71:7f:c0:39:03:64:
         9b:cd:2e:df:b6:9c:a5:89:7b:94:8c:20:ee:4d:aa:18:e5:fa:
         12:ab:5d:cc:f9:37:aa:5b:08:e7:43:1e:1e:40:c6:b2:05:ec:
         dc:62:23:2d:a8:bc:19:e9:fe:99:9a:8e:44:da:ab:8d:9b:fc:
         2f:72:08:27:f7:08:6c:0b:3a:ff:e0:96:6f:78:a5:31:e1:f7:
         f9:21:06:69:8e:53:d1:dc:18:e1:23:05:89:d1:08:91:3b:f1:
         bd:b9:bd:98:9b:7a:d3:48:aa:4b:6c:28:6b:a0:84:fb:16:fa:
         59:07:14:3c:01:08:a5:0b:a5:5f:70:e1:12:bb:df:34:5b:1a:
         91:f9:d6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:15:49 2024 by rpki-client on console-ams.rpki-client.org