Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62e10976-1cb6-3d2f-b7cd-a53807898b0a.roa
File:                     62e10976-1cb6-3d2f-b7cd-a53807898b0a.roa (raw, json)
Hash identifier:          5g2IWwwDuN+ZMfeSsZ0M7rVy1zw7QuwTkSmpU7lOgl4=
Subject key identifier:   33:7D:89:96:CC:55:9F:75:32:8A:66:62:E6:15:6C:34:D5:F4:E6:37
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845CE1871141D153C56B29E2D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62e10976-1cb6-3d2f-b7cd-a53807898b0a.roa
Signing time:             Wed 08 May 2024 13:31:50 +0000
ROA not before:           Wed 08 May 2024 13:31:50 +0000
ROA not after:            Tue 06 Aug 2024 13:31:50 +0000
asID:                     20940
IP address blocks:        23.32.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:18:71:14:1d:15:3c:56:b2:9e:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  8 13:31:50 2024 GMT
            Not After : Aug  6 13:31:50 2024 GMT
        Subject: CN=8392a2b3-aa76-49d2-8443-65103228fced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:88:bd:a3:75:04:4e:98:a9:e3:f7:a7:9b:
                    e4:a2:86:e0:9c:95:ed:a4:8a:10:ea:35:e8:12:b4:
                    81:bf:c9:48:fc:04:9b:e4:04:25:a3:24:55:39:de:
                    2c:fa:44:a0:09:e3:d1:bf:81:a3:f1:5f:c0:e8:04:
                    95:da:0d:79:ca:2b:51:93:e8:c1:34:8e:9f:33:e4:
                    81:69:01:42:4a:9a:38:89:93:09:4f:49:4a:60:8e:
                    5c:6a:7b:36:bc:a0:9a:a2:60:3d:3e:77:71:8f:b4:
                    76:9b:86:77:f3:30:f8:73:b2:ac:a6:62:02:69:b3:
                    de:28:1d:b3:0a:f3:ce:d6:e6:09:8f:7f:10:43:6f:
                    58:86:b9:d9:54:97:aa:08:ea:a0:f2:d7:80:66:2d:
                    61:41:38:2d:df:8b:c1:66:1e:d5:a9:95:b5:97:78:
                    6b:89:d0:85:8b:4c:11:1b:26:5b:ce:d9:49:e4:38:
                    ea:ac:b7:89:12:7e:55:a9:15:a0:f3:3f:72:5c:d6:
                    d8:0c:c8:18:1d:a6:66:ed:01:6f:40:1e:ef:74:75:
                    71:13:8b:69:f0:ab:82:ca:e4:12:14:34:6f:77:65:
                    31:d1:80:fc:4e:d9:fd:b7:9e:39:ea:9d:97:db:1e:
                    6b:d0:c4:a7:c5:2a:09:88:ac:78:13:b7:72:43:a1:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7D:89:96:CC:55:9F:75:32:8A:66:62:E6:15:6C:34:D5:F4:E6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62e10976-1cb6-3d2f-b7cd-a53807898b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:17:ba:3f:c6:46:74:c4:ac:22:71:bb:23:16:c3:cb:1e:fe:
         72:cd:77:14:84:0e:d1:b4:88:3a:0d:12:8e:28:86:e2:2e:5a:
         7b:fb:ef:00:a7:55:98:a5:c7:31:82:c1:8c:0d:26:a1:cd:67:
         e7:66:13:9a:11:41:21:a7:55:04:45:91:c5:00:10:81:1c:97:
         e3:5d:a3:47:5c:d4:63:af:44:ff:69:6c:6e:3a:2b:7d:ce:8b:
         fd:20:10:b1:d0:95:39:8d:e5:a1:c5:17:91:63:d6:8c:d5:91:
         6c:ee:b0:ba:b8:0f:d4:82:7a:24:30:1f:ea:ec:99:8a:65:57:
         0f:5e:61:e0:47:43:41:0e:59:38:1e:13:15:10:e7:da:a8:ff:
         29:2c:ad:e1:fd:1a:11:45:b1:c6:a5:6f:91:6d:80:35:99:62:
         35:86:f4:86:09:bd:a3:c4:fe:98:56:14:4b:65:98:31:aa:92:
         c0:ad:c3:52:d1:f2:cd:c9:17:68:bb:12:7f:b6:e4:bb:e0:30:
         93:c0:ff:35:64:85:b4:d9:d3:9a:39:31:de:ff:f2:d3:ed:6d:
         18:b2:e0:00:2c:4a:c4:1b:f1:53:94:5a:dc:a1:69:b7:7c:0e:
         7c:12:41:77:e1:bf:c0:d9:dc:50:56:0b:70:95:c8:78:84:af:
         96:7c:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:40:18 2024 by rpki-client on console-ams.rpki-client.org