Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cf67b2e-406e-3fab-9049-9ab992826fdd.roa
File:                     6cf67b2e-406e-3fab-9049-9ab992826fdd.roa (raw, json)
Hash identifier:          XXv17UNcASxmLC3XsEpByRlIH4p6Cf/9jkws0VfKR5w=
Subject key identifier:   FC:DE:3B:AF:68:26:43:5C:3C:60:8A:E0:81:EE:43:EC:4E:03:98:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DE4FA5D9F42617521D4FAE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cf67b2e-406e-3fab-9049-9ab992826fdd.roa
Signing time:             Tue 14 May 2024 08:56:01 +0000
ROA not before:           Tue 14 May 2024 08:56:01 +0000
ROA not after:            Mon 12 Aug 2024 08:56:01 +0000
asID:                     23693
IP address blocks:        23.43.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:4f:a5:d9:f4:26:17:52:1d:4f:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 08:56:01 2024 GMT
            Not After : Aug 12 08:56:01 2024 GMT
        Subject: CN=ed497a85-cb29-4fa6-9a4d-677d97f35ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:0f:c5:a5:01:ce:cf:16:fe:69:99:22:3c:
                    37:96:83:5b:02:3f:4b:0e:58:cf:09:e8:26:f9:a8:
                    1d:37:a7:88:56:c3:f6:fc:5a:3a:1d:8e:2e:ca:e6:
                    85:58:b3:51:1d:a8:bb:db:74:f9:8e:99:6c:da:76:
                    38:bc:4f:16:b4:e5:cd:1f:be:1e:7c:b4:b1:c3:e8:
                    8d:c3:91:e3:e5:f1:55:4d:69:9d:a3:28:82:b4:d3:
                    21:ce:09:09:60:91:90:68:9a:0a:91:01:af:fa:fa:
                    8b:4e:d5:34:7b:0e:e1:1a:3b:95:40:aa:c4:c3:a3:
                    fe:54:a3:d1:bb:97:7d:b3:88:bd:5a:d9:bf:7b:8b:
                    9e:4a:fb:b9:86:42:fc:f3:5d:4f:32:ba:00:6c:19:
                    9a:34:ec:ec:de:06:fd:b4:96:48:07:0f:b3:7d:51:
                    ef:b9:d8:3e:50:10:14:14:db:37:f6:68:f5:86:74:
                    86:ba:9a:77:c3:17:56:a5:18:d7:e4:f5:d2:8f:b8:
                    0a:d2:f9:6d:28:1a:7e:3e:cb:58:9c:ef:ec:c2:1a:
                    e7:92:9f:27:0f:2f:93:fe:80:e2:6d:ca:2f:fb:b8:
                    aa:11:52:82:8d:c0:8a:dc:90:a8:0e:19:fd:aa:65:
                    6d:13:2a:e5:c6:fe:e5:16:24:fe:00:19:46:c3:e1:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DE:3B:AF:68:26:43:5C:3C:60:8A:E0:81:EE:43:EC:4E:03:98:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cf67b2e-406e-3fab-9049-9ab992826fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:b5:05:7a:2a:0d:5b:08:b8:06:7c:c1:f5:a5:79:6a:d2:
         a6:05:61:cb:d6:67:c2:d6:7b:94:38:20:bd:09:50:c1:1f:5e:
         a4:4f:1e:9b:14:1a:c1:a2:78:d3:74:93:27:b3:1f:51:a2:ca:
         cd:a7:e6:8d:83:43:19:16:d6:fe:8c:a6:76:b2:52:00:df:11:
         c7:d3:6e:88:40:fa:1d:ae:c5:52:a0:a8:a4:8a:02:fe:2e:46:
         19:5e:b2:fc:f8:95:20:f2:de:d4:4a:11:49:ee:e8:51:5f:7a:
         43:78:45:1e:6e:8e:df:ea:d6:40:2c:ec:9c:22:b6:00:f8:5d:
         b6:30:60:56:f0:70:c1:28:dd:e1:21:79:d9:7e:65:e3:32:75:
         a6:9f:5f:4d:0f:4f:74:de:d3:23:b3:33:4d:00:5c:fd:39:30:
         e5:53:ad:7f:2d:4b:08:43:3f:ba:9e:e7:9e:14:8a:0f:58:ca:
         f9:80:67:a6:cc:c9:01:63:6f:55:0c:63:54:eb:26:45:4a:1a:
         ff:8d:b2:c5:f3:1e:d5:5e:c8:e5:0e:25:3f:df:f0:0d:c2:0b:
         19:d3:be:d0:29:e7:db:b9:cc:a4:7b:65:c1:ce:82:f5:0a:75:
         51:9e:73:03:78:c3:e1:7f:1f:65:d0:e7:3e:2d:56:bb:dc:91:
         5a:26:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:51:44 2024 by rpki-client on console-fra.rpki-client.org