Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/688356e0-5ac9-356c-a7c7-aca430574b09.roa
File:                     688356e0-5ac9-356c-a7c7-aca430574b09.roa (raw, json)
Hash identifier:          w2M72NMRCwPERzLSZcjHXcS37RReC3nn/+UoGudn+Qo=
Subject key identifier:   75:F2:F2:9E:B8:5A:D4:F5:AF:B0:5C:1A:0D:5E:BE:40:82:88:A5:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E191C9EA464FD9F2790B8540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/688356e0-5ac9-356c-a7c7-aca430574b09.roa
Signing time:             Wed 15 May 2024 12:56:42 +0000
ROA not before:           Wed 15 May 2024 12:56:42 +0000
ROA not after:            Tue 13 Aug 2024 12:56:42 +0000
asID:                     20940
IP address blocks:        23.48.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:91:c9:ea:46:4f:d9:f2:79:0b:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 12:56:42 2024 GMT
            Not After : Aug 13 12:56:42 2024 GMT
        Subject: CN=6afc987b-5501-4771-a511-ec2370bf8795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:28:da:09:e8:52:8a:2c:06:a8:3b:1d:c1:
                    c8:15:2d:06:9d:e7:86:72:51:30:d8:61:08:86:ca:
                    ca:1d:59:eb:3b:b3:f4:32:92:1f:6e:5b:ed:e7:84:
                    69:4b:9f:be:ba:ec:96:23:5a:3a:ef:db:8f:a9:87:
                    ec:a8:f1:a3:33:8c:ee:ae:f4:34:55:06:2b:55:f2:
                    9a:83:b7:bf:68:43:70:0f:f7:3a:76:5b:16:3a:fc:
                    fe:2f:79:3f:83:01:6f:2a:1b:ff:ce:3f:ab:1f:ef:
                    23:3e:fc:b0:51:e4:0a:41:33:fe:c9:54:6f:e5:3c:
                    5d:31:f4:21:c2:7b:49:b4:7b:5b:6d:4e:2a:24:f6:
                    ef:81:79:79:2d:e6:7a:c3:b7:99:3a:13:f7:88:d4:
                    af:4f:ce:11:71:89:18:0e:7e:f2:d8:41:53:29:49:
                    2e:ab:f8:2e:1f:f8:85:4d:89:91:79:b0:b2:80:14:
                    06:a4:07:68:99:2e:61:e6:95:3e:46:0a:35:f2:d1:
                    44:ec:5e:33:07:bc:85:34:55:28:5b:b5:0c:14:db:
                    b2:5c:fd:10:8e:2e:1f:0e:45:c7:b2:1e:f9:42:48:
                    da:36:e4:6a:b4:65:f6:ee:6a:2e:99:c7:0b:73:23:
                    71:13:72:1f:f6:3f:ad:7a:8f:41:18:1e:48:e1:cc:
                    ba:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F2:F2:9E:B8:5A:D4:F5:AF:B0:5C:1A:0D:5E:BE:40:82:88:A5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/688356e0-5ac9-356c-a7c7-aca430574b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:75:98:12:14:6f:8e:b0:84:fd:1c:a3:12:74:56:0f:82:
         95:13:00:77:5a:4e:a8:59:0a:94:84:98:f6:4f:ca:aa:73:12:
         d9:14:55:97:d8:8e:8e:f2:80:7a:95:68:b3:04:80:96:a5:3a:
         8c:f2:c8:11:2d:91:31:75:05:32:6e:72:70:1e:d8:05:13:dd:
         aa:2e:42:5e:56:dc:d4:0b:87:10:e2:3a:44:ac:be:21:b7:28:
         95:88:eb:f3:e3:2e:78:7c:f6:02:30:26:41:bb:ee:67:78:2e:
         61:4f:55:3b:ca:3a:7a:2c:e5:40:90:6c:ca:31:15:79:2c:79:
         21:c0:7c:57:fe:a1:48:60:f8:b5:04:c6:bd:98:1c:a2:11:fd:
         c6:e2:26:bd:a5:5d:0b:97:5b:56:2a:de:ca:60:22:55:bd:ee:
         dc:82:68:b7:a2:76:08:0e:ea:bb:df:d8:47:ee:40:0d:bd:5d:
         fa:86:4e:23:ae:86:e3:1e:e7:07:96:58:09:e8:a0:08:07:f8:
         60:f9:79:74:2a:82:1b:e3:dd:15:55:c3:cd:24:0b:ac:9f:e6:
         53:a6:e9:6a:91:fe:4d:45:00:3f:d0:c2:ec:db:6f:7a:52:37:
         8e:cc:af:66:d2:33:30:e7:d1:b4:76:c1:75:41:f0:1b:cc:c2:
         71:88:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:51:43 2024 by rpki-client on console-fra.rpki-client.org