Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/744cd803-45e6-373f-ac13-1d00ac580597.roa
File:                     744cd803-45e6-373f-ac13-1d00ac580597.roa (raw, json)
Hash identifier:          sLpGmwBoSS5ZqNWhTd5P6bLb3zPepSuyLbFL5HkJYRM=
Subject key identifier:   7C:16:CC:3A:4C:BF:C7:FB:D7:19:06:C3:5E:7D:B9:D3:6E:CE:25:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845909F5C0D2D49666473AD11B2
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/744cd803-45e6-373f-ac13-1d00ac580597.roa
Signing time:             Tue 16 Apr 2024 13:03:34 +0000
ROA not before:           Tue 16 Apr 2024 13:03:34 +0000
ROA not after:            Mon 15 Jul 2024 13:03:34 +0000
asID:                     20940
IP address blocks:        173.223.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9f:5c:0d:2d:49:66:64:73:ad:11:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 13:03:34 2024 GMT
            Not After : Jul 15 13:03:34 2024 GMT
        Subject: CN=89a4bbfe-09c2-4ec7-9f1a-acda7fab1f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:14:6a:dd:7a:6f:a0:b8:6c:d9:97:e5:70:
                    d6:25:98:be:97:84:fb:25:4c:cd:62:a8:27:e9:67:
                    f9:f5:06:df:17:50:21:43:b2:e2:cb:03:a2:1d:da:
                    62:1a:a7:1f:60:97:c0:de:ee:a9:a6:b9:d3:4e:12:
                    d4:36:25:26:ff:c2:7f:57:14:19:45:36:08:f5:59:
                    0b:53:89:23:81:b1:eb:28:0a:39:6f:d8:f2:c4:d8:
                    ed:51:d3:86:d1:f9:71:f7:a6:ed:df:d4:17:b9:b9:
                    ee:d9:1f:b0:fb:f4:0f:01:e8:74:a3:e9:b9:24:c6:
                    6d:96:45:30:07:74:6d:c7:7b:99:25:72:e3:5a:fe:
                    95:50:e0:eb:59:13:9a:bc:d8:cf:35:5f:2e:2d:76:
                    fc:71:93:4a:08:95:f5:32:a9:cd:13:a7:7c:83:d1:
                    cc:25:c6:d2:ae:6b:14:9d:9f:99:0c:c1:56:75:10:
                    86:ad:56:af:c8:7d:02:cf:46:8a:77:0c:80:6f:fb:
                    4f:28:aa:ac:25:36:5a:8a:d1:4f:9e:80:39:1b:95:
                    b5:da:ec:39:7b:90:4d:1b:51:0e:83:9a:8d:29:4d:
                    6b:12:c9:3b:cd:14:42:d4:0d:8d:ae:15:86:ed:eb:
                    c7:2f:b2:6b:67:86:84:dd:b2:f8:b9:13:fc:f4:1d:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:CC:3A:4C:BF:C7:FB:D7:19:06:C3:5E:7D:B9:D3:6E:CE:25:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/744cd803-45e6-373f-ac13-1d00ac580597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.223.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5c:e1:b1:7c:4a:b8:2a:4a:25:d3:09:ab:dd:22:6d:61:16:
         43:62:70:6d:de:a1:1f:ec:41:cf:8a:48:f5:b3:63:b3:50:99:
         b8:01:e0:59:62:06:f7:8b:e1:60:aa:98:ca:30:70:67:28:1d:
         f8:3b:ab:08:59:7a:e7:02:a6:b5:e2:7b:10:6b:cb:d6:8b:dc:
         38:f3:64:69:21:49:09:bd:ae:3c:a4:1a:e7:5a:f7:9a:73:1f:
         5e:41:93:74:71:d3:5b:7e:56:94:9e:42:99:97:e6:bf:1f:e1:
         eb:ca:32:4e:ac:fc:29:ec:e4:d0:33:e9:9d:37:97:ed:ca:1a:
         41:c6:cb:8b:76:11:9c:fe:95:eb:42:90:e2:1d:71:72:7d:98:
         3e:90:fc:6d:71:8b:f2:2e:e3:29:94:1e:97:57:96:dd:f6:ac:
         9b:80:a9:5c:4d:87:7a:e5:5e:10:9b:0d:fd:24:bc:c7:b0:61:
         53:08:ad:0c:7d:17:22:f6:39:6c:44:1f:db:92:e4:9b:21:26:
         80:80:f3:1d:db:78:94:03:2f:52:8d:b4:c1:ed:68:96:db:ed:
         0d:1a:59:d9:e1:64:6e:10:14:e6:8c:f0:98:14:71:42:5a:58:
         88:51:39:aa:33:24:81:b4:1a:f1:22:d6:ae:e6:22:d6:1a:f8:
         87:7f:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:09:24 2024 by rpki-client on console-ams.rpki-client.org