Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519266df-8e4b-3a1f-a2db-26ff0c67aa4e.roa
File:                     519266df-8e4b-3a1f-a2db-26ff0c67aa4e.roa (raw, json)
Hash identifier:          pD8NHXNgO7M+vYLcHtzy5S0kANXJ1GGTmDyfEuiW44s=
Subject key identifier:   13:60:20:F0:9D:3D:22:3E:73:3B:02:41:D5:7B:6E:05:81:AB:96:8D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584585732C31683CE8B0285BCC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519266df-8e4b-3a1f-a2db-26ff0c67aa4e.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     24319
IP address blocks:        23.196.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:2c:31:68:3c:e8:b0:28:5b:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=243f95df-c67a-4e2f-a27c-c5cafeef234c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:2b:df:a7:6d:87:29:57:58:ab:89:0c:f8:
                    f6:69:f9:e8:83:65:07:25:02:0b:cc:ac:6d:56:71:
                    05:e5:0c:2a:f1:51:cf:c0:99:a7:d2:62:3f:57:c4:
                    e8:ac:34:a8:fc:c1:74:d1:51:a0:a9:bc:1c:a6:a8:
                    0b:f5:96:ec:df:67:fd:b2:b2:cc:38:7e:80:5f:1d:
                    06:fe:e1:1d:d3:53:20:77:65:05:b3:ff:e2:90:a8:
                    cc:75:97:92:7b:77:f0:f1:03:68:ae:10:a9:1f:9e:
                    84:4b:ae:d3:89:c3:43:f2:fc:44:2e:6d:4c:8e:23:
                    bf:70:d7:8a:ba:41:f7:28:d6:9e:1f:3c:93:b2:fe:
                    b7:7f:55:cf:97:1b:6c:ce:8d:c2:06:df:75:5a:fb:
                    4c:a2:5b:c7:ca:8a:ff:35:62:fe:0d:2d:3a:dc:52:
                    5b:9f:5c:05:5c:47:d9:3b:51:b1:5c:df:bd:fa:7b:
                    47:cb:9b:8f:a6:a8:91:f2:04:31:5e:67:0a:7d:9f:
                    b3:a8:dd:3d:1a:61:85:f8:21:ad:48:4a:2f:64:fd:
                    f5:b7:1e:65:f2:8a:66:08:e2:e9:e7:a0:df:5a:9a:
                    bd:45:b7:3c:51:75:d5:cf:2f:90:05:4e:5c:e6:52:
                    3d:4f:a1:f0:aa:60:3b:72:88:19:4d:eb:2f:67:e4:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:60:20:F0:9D:3D:22:3E:73:3B:02:41:D5:7B:6E:05:81:AB:96:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519266df-8e4b-3a1f-a2db-26ff0c67aa4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.196.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:f5:57:a3:61:c4:b9:14:23:c4:a0:5e:35:1b:91:fa:f3:
         19:5f:ee:92:e1:4e:07:07:fa:b7:de:0e:a5:1f:91:85:21:02:
         8f:23:c4:70:26:8e:21:af:64:e7:24:93:9d:a1:34:e9:f4:b6:
         d1:26:e1:bb:6a:43:ff:f1:2d:54:99:22:af:5c:70:a1:22:34:
         3f:63:1d:32:ec:28:0e:c0:f9:6c:a3:b8:4f:b3:24:c5:5b:0b:
         8e:5d:87:90:60:6a:28:22:10:b0:1f:f8:6d:e3:52:04:6d:e6:
         8e:27:40:21:f4:3a:20:32:88:f2:f4:34:66:a2:02:dd:9a:28:
         24:4b:c5:fa:5a:cd:bf:b3:a5:3e:70:8a:df:ad:28:ed:e9:47:
         0d:23:18:80:dd:49:e7:eb:78:a4:85:29:ba:b7:30:05:fe:3d:
         9e:c6:51:bd:ed:21:03:b3:29:e7:c3:92:c4:ea:0c:0b:74:15:
         b1:c8:6a:1d:1d:eb:b6:74:fa:1e:4d:a1:0a:01:f1:c4:91:aa:
         1b:72:8a:ab:d3:5f:c7:d3:1f:e0:07:db:79:d8:a3:9b:03:42:
         82:8d:bf:fc:87:74:79:f9:10:34:15:79:48:1f:ce:1c:2b:cc:
         b2:26:57:78:0b:f0:86:cc:74:53:3e:db:c4:27:f1:75:3b:17:
         e0:b6:de:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:11 2024 by rpki-client on console-fra.rpki-client.org