Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f97d212-04fe-3382-bcdd-869184340e2a.roa
File:                     6f97d212-04fe-3382-bcdd-869184340e2a.roa (raw, json)
Hash identifier:          1cPVHav6vXykYGDE9aPQlcvx3DNjFEQLhTBGuj7AVqM=
Subject key identifier:   CE:83:0D:4A:E7:C5:5F:2A:B6:C1:75:AB:F2:4A:06:B4:7C:5D:B7:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DC0B2EAF7E4C40864DE28CC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f97d212-04fe-3382-bcdd-869184340e2a.roa
Signing time:             Mon 13 May 2024 13:26:27 +0000
ROA not before:           Mon 13 May 2024 13:26:27 +0000
ROA not after:            Sun 11 Aug 2024 13:26:27 +0000
asID:                     20940
IP address blocks:        23.41.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:0b:2e:af:7e:4c:40:86:4d:e2:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 13:26:27 2024 GMT
            Not After : Aug 11 13:26:27 2024 GMT
        Subject: CN=a4175c4f-30f0-440f-b906-07badbcc8a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:20:a2:2d:3f:9e:db:3d:19:0b:01:bb:41:
                    c7:69:4f:03:65:47:c4:a2:71:0c:84:99:46:40:78:
                    3a:09:74:90:3f:f2:ec:aa:a8:1e:31:c2:7b:61:ff:
                    af:37:76:cd:3f:00:c6:35:fe:06:01:c0:92:65:e4:
                    ed:1a:c5:d4:ff:4c:43:aa:5f:ae:ab:8e:ab:6d:3f:
                    8c:82:1a:b3:fc:a1:ed:b5:81:0c:18:26:27:86:f8:
                    4a:be:53:18:20:2d:33:eb:e9:0c:3e:e7:d1:79:86:
                    27:e2:51:e7:f3:dc:89:1d:0f:ac:63:1d:3f:8f:ba:
                    ef:dd:c0:9d:9d:29:2b:88:61:88:ea:e0:c9:13:70:
                    25:06:04:b3:07:45:66:24:8c:8a:6d:ff:f5:60:6f:
                    ef:c6:d6:4d:94:55:e3:8a:f5:4e:e8:7c:8a:2e:ab:
                    36:10:ab:27:97:3e:f4:ad:60:fe:79:f6:ce:56:f7:
                    59:bf:b9:d6:00:66:a6:0f:6e:cc:73:75:ba:7b:0c:
                    ff:88:23:c4:a9:1d:df:80:16:98:82:5a:1d:84:de:
                    5d:17:7d:55:45:f4:73:4e:53:dc:c6:d5:9c:02:e4:
                    f1:45:85:f7:63:ba:cd:e7:ef:8b:96:6f:cb:bc:db:
                    18:9b:e8:97:32:f8:01:2c:2a:96:2b:ac:6f:44:6d:
                    0d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:83:0D:4A:E7:C5:5F:2A:B6:C1:75:AB:F2:4A:06:B4:7C:5D:B7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f97d212-04fe-3382-bcdd-869184340e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.41.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e6:a7:c2:a6:41:ec:98:cc:30:d3:bf:72:3e:ad:71:e2:1f:
         60:e1:e2:10:8b:58:31:50:5e:2c:d3:88:ca:8d:c3:87:dd:27:
         d2:66:91:04:49:3a:36:3a:51:5c:1a:27:6d:7a:76:14:77:ce:
         b0:a8:42:33:1a:3f:a3:76:7f:f5:fb:4e:63:75:0f:f4:d6:bc:
         b3:7e:54:6e:3f:7d:cd:39:b2:fe:ee:a9:35:5c:01:48:73:3e:
         10:f2:39:11:5b:f2:45:1e:b6:69:96:c1:c5:39:40:d1:67:ad:
         42:52:f8:46:7a:5a:c2:0a:18:87:60:df:1e:3b:e4:d6:40:1f:
         7f:ff:b8:ec:23:b7:f2:4e:97:d3:0e:6b:cc:5d:a7:20:25:2b:
         39:89:e1:bd:94:b2:6a:be:46:63:10:5c:db:8b:68:ff:16:bf:
         9e:70:5d:28:9d:cd:fd:1b:9b:d7:04:5d:e2:12:01:73:81:d8:
         62:e7:a9:a9:ec:06:96:1d:c0:d8:59:f9:a8:a9:26:0d:2f:7f:
         69:b2:c0:09:61:57:79:96:a7:12:fc:97:cb:02:0d:10:2a:d5:
         97:a1:98:74:4c:f1:4e:57:5d:e1:62:4d:60:d6:6f:b4:e3:70:
         a4:17:a7:0b:0b:b4:af:ee:8e:66:b2:d0:4d:56:31:cd:de:64:
         fb:d0:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:50:50 2024 by rpki-client on console-fra.rpki-client.org