Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b6a4077-a159-30ce-98c8-37fbd5007e4c.roa
File:                     5b6a4077-a159-30ce-98c8-37fbd5007e4c.roa (raw, json)
Hash identifier:          A/oWPOzn6vtZAq/laojFQZ3MLmljC0kt+gG9io+ecbU=
Subject key identifier:   2B:01:D0:F5:C2:27:D4:26:29:A8:7A:29:84:3A:61:F2:9C:1B:BE:60
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E12019B10CC81AC298F1B480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b6a4077-a159-30ce-98c8-37fbd5007e4c.roa
Signing time:             Wed 15 May 2024 09:07:38 +0000
ROA not before:           Wed 15 May 2024 09:07:38 +0000
ROA not after:            Tue 13 Aug 2024 09:07:38 +0000
asID:                     16625
IP address blocks:        23.47.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:20:19:b1:0c:c8:1a:c2:98:f1:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 09:07:38 2024 GMT
            Not After : Aug 13 09:07:38 2024 GMT
        Subject: CN=1a01c3c2-5dc7-419c-bb9d-6d4f2105a8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:68:54:5d:cc:48:57:19:70:d6:cb:97:c7:
                    c7:c6:9d:36:d5:f5:2c:7d:5c:9b:97:a5:50:35:27:
                    71:7b:bd:f4:84:74:5c:3c:cb:1c:fb:71:36:52:77:
                    42:b8:e1:31:83:32:f5:2e:85:8d:db:f2:e6:dc:8f:
                    03:af:07:b1:88:d9:dc:dd:08:e5:46:40:7b:17:e5:
                    f2:f8:8d:6d:f5:4e:e0:eb:5e:59:84:2d:c3:58:18:
                    a9:c0:cb:9f:fb:cc:ce:e1:84:98:ad:2b:3d:9c:8e:
                    16:16:68:bd:da:36:1c:02:69:15:e0:8d:a5:31:24:
                    b4:08:19:3a:9f:c8:6c:d6:48:67:8e:30:1b:99:91:
                    65:46:1d:d3:df:ba:67:36:cc:01:25:44:a0:37:6d:
                    f2:c0:59:98:99:5f:11:e1:fe:a8:9f:8c:26:76:7b:
                    70:0e:ae:31:54:7a:4d:86:e0:04:de:1b:a0:e3:bc:
                    8b:e4:7c:0b:70:1c:ec:55:9c:04:7b:ba:ac:b4:10:
                    a5:03:c8:cf:00:48:0d:c7:96:80:6d:ed:93:87:21:
                    0b:c1:28:e7:13:ab:1b:e9:92:d3:5d:0c:cb:a7:ed:
                    13:39:c3:56:04:d8:ad:11:11:3a:98:fd:9d:61:a2:
                    ab:fc:62:a1:16:ab:57:cc:a3:ae:40:52:56:b6:b6:
                    28:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:01:D0:F5:C2:27:D4:26:29:A8:7A:29:84:3A:61:F2:9C:1B:BE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b6a4077-a159-30ce-98c8-37fbd5007e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:50:0f:06:25:42:3f:44:8f:9c:c5:7e:b0:ab:1c:18:56:
         95:ff:93:d3:3f:53:60:25:69:24:bb:01:a5:65:4c:86:72:bc:
         32:93:77:24:13:35:ba:83:c4:9f:b9:15:c2:f1:7c:ff:ed:7b:
         7d:20:98:24:d5:6e:38:19:79:0b:b8:68:33:c6:09:d9:36:52:
         46:1b:85:51:c6:da:2d:0b:62:ce:4f:e9:29:1b:d1:4f:fe:f4:
         1d:e2:7a:45:4f:43:bf:bd:f5:c3:46:32:b8:ec:af:9e:57:7d:
         8b:98:b8:be:51:cc:1f:f6:3c:84:06:74:df:70:ff:0d:e3:c2:
         b8:24:db:7b:d5:88:59:59:0b:09:ff:9f:2d:7f:98:84:17:1e:
         ee:a6:37:c7:6b:31:01:ea:cc:9e:24:74:0f:79:54:11:f4:b2:
         36:19:e6:bb:84:e2:ee:d4:95:12:74:f1:35:89:cd:d5:91:9e:
         bd:97:24:ee:1c:be:b1:cb:e6:96:50:be:a1:75:85:d2:e2:db:
         77:aa:dc:ed:05:91:0c:6f:5c:25:29:d9:13:ed:b1:99:5c:8f:
         bf:3b:6d:b3:5f:4f:f1:53:86:c6:7f:44:13:8c:c7:2f:00:2e:
         c3:c3:17:ac:fa:a8:c3:a9:c2:49:9f:25:ee:12:38:22:d3:70:
         4a:17:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:02:35 2024 by rpki-client on console-fra.rpki-client.org