Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/312bf3d8-fd99-3cba-82dc-dfbc379ff4c2.roa
File:                     312bf3d8-fd99-3cba-82dc-dfbc379ff4c2.roa (raw, json)
Hash identifier:          IyhMDcKXyGdwmVJEdbFVzj9pcTXPSyzXEaGK2PYLZxI=
Subject key identifier:   3E:0D:F1:05:E1:E6:F8:04:AB:EB:9B:BA:5A:57:02:B9:69:D2:34:83
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E473F38A9F58873DA352D8C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/312bf3d8-fd99-3cba-82dc-dfbc379ff4c2.roa
Signing time:             Thu 16 May 2024 13:44:00 +0000
ROA not before:           Thu 16 May 2024 13:44:00 +0000
ROA not after:            Wed 14 Aug 2024 13:44:00 +0000
asID:                     16625
IP address blocks:        23.51.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:73:f3:8a:9f:58:87:3d:a3:52:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 13:44:00 2024 GMT
            Not After : Aug 14 13:44:00 2024 GMT
        Subject: CN=48cd5c2c-9d12-4958-86f6-82cc5695ca6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:22:f1:a5:e1:6a:25:be:34:af:f2:6d:4a:d1:
                    78:c5:26:fc:b2:54:0b:f0:78:d4:fb:47:72:0f:9d:
                    f3:50:b9:3e:3d:d1:c3:da:a9:4a:c0:ce:1e:aa:01:
                    3f:29:9c:89:3e:a3:66:a0:bc:59:85:93:52:8d:f8:
                    13:af:b3:e3:df:51:40:cb:a3:b6:88:28:ff:26:17:
                    aa:16:74:cd:1a:f9:27:a8:09:2f:a2:c4:f6:f3:f7:
                    7f:89:1a:71:11:a4:26:ab:5b:dd:24:ab:66:f7:f7:
                    a4:1d:46:65:70:6e:3c:5e:79:8a:e8:5a:85:c8:b4:
                    74:1c:63:bd:0f:1b:db:85:ac:7b:12:b3:99:34:04:
                    5a:ad:59:b4:6a:6f:53:86:8e:b6:7f:f1:14:10:1e:
                    00:76:df:a8:f2:77:2d:7f:30:32:99:15:9e:4b:7a:
                    f9:59:59:34:09:9d:bc:09:d5:8b:03:76:c3:6d:41:
                    46:81:98:bf:51:e9:aa:f7:e9:f2:e3:4e:1e:5a:59:
                    c5:bf:0a:2e:a5:ce:41:b2:8b:79:49:05:db:a8:3f:
                    99:01:79:0e:a7:76:0e:01:92:15:19:46:63:77:43:
                    5e:f5:b0:c2:95:7f:23:21:f6:86:3f:2f:45:9b:05:
                    31:96:c3:fb:bc:d0:06:34:e5:73:d0:a1:f0:7a:3a:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0D:F1:05:E1:E6:F8:04:AB:EB:9B:BA:5A:57:02:B9:69:D2:34:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/312bf3d8-fd99-3cba-82dc-dfbc379ff4c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.51.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:dc:d3:da:62:11:30:df:f6:c1:e2:d4:5e:b3:85:68:33:
         a7:59:71:2e:f9:b3:3a:03:6b:ff:04:06:e3:40:8a:39:18:dd:
         3b:ca:5f:a0:cd:09:1e:2f:ca:44:97:35:b6:9e:01:aa:b6:46:
         fa:3e:71:a1:11:da:2f:78:df:da:ba:c4:c2:31:98:1d:87:52:
         6f:0d:00:95:44:36:5e:f1:fd:8a:6c:54:9e:8f:6b:1c:14:ba:
         05:f1:95:01:80:c7:36:40:5a:19:de:70:58:87:69:1b:4a:2b:
         fb:3b:ee:62:ae:b3:ce:3a:ee:31:7e:a4:10:fa:6c:5e:22:08:
         54:2d:5f:63:46:3a:75:f1:bd:8b:10:f0:fd:e8:9c:fe:7f:44:
         f9:7d:88:e5:53:a6:01:82:46:ca:3f:68:de:71:bc:d8:5f:4e:
         59:35:3f:07:05:84:d9:63:7f:9a:8c:85:9d:b7:22:92:2c:54:
         6e:4a:17:f5:8e:0c:ea:e6:21:84:4e:8b:b2:41:c3:d7:f6:1e:
         ee:fb:94:76:b0:2a:01:1d:6e:c4:75:17:e1:7a:65:c9:33:b8:
         55:ca:c7:2c:f4:4a:3e:c1:bb:1e:02:dc:0d:95:60:54:61:bc:
         dc:85:86:ef:f8:3b:7c:df:5e:24:88:de:40:0a:45:55:12:77:
         7f:b0:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:02:27 2024 by rpki-client on console-fra.rpki-client.org