Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7797fa14-1a05-350f-bc0a-0cbf51b503b8.roa
File:                     7797fa14-1a05-350f-bc0a-0cbf51b503b8.roa (raw, json)
Hash identifier:          kx7FLSNmEwJmuVV3/VHQWaD3SSUe/fLg8ShFJYlEdWA=
Subject key identifier:   DF:A4:94:27:F5:E1:98:5D:CE:1C:CE:7D:11:47:0E:61:8D:D5:18:5E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584595C9FFA61C8267062CF433C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7797fa14-1a05-350f-bc0a-0cbf51b503b8.roa
Signing time:             Thu 18 Apr 2024 09:28:31 +0000
ROA not before:           Thu 18 Apr 2024 09:28:31 +0000
ROA not after:            Wed 17 Jul 2024 09:28:31 +0000
asID:                     16625
IP address blocks:        23.64.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:95:c9:ff:a6:1c:82:67:06:2c:f4:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 09:28:31 2024 GMT
            Not After : Jul 17 09:28:31 2024 GMT
        Subject: CN=d617f32c-8658-45c7-8208-7490b614b50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:d2:6d:b5:e1:b9:f8:bb:6f:b0:10:e5:7d:
                    36:3c:e0:a5:2f:d7:42:59:fd:43:33:47:bc:e9:68:
                    11:12:68:82:73:50:bf:d7:a1:ff:90:be:a9:da:d8:
                    11:6c:f7:c5:0e:96:ef:c6:8a:b8:7a:61:26:45:a2:
                    31:77:be:d3:e7:86:d9:5a:bf:13:f8:bd:17:83:6e:
                    61:c0:f0:ea:99:94:c7:52:b5:39:93:c9:27:40:0d:
                    b6:da:49:40:3f:e8:f1:b0:23:6f:3f:6a:bf:c1:17:
                    bc:2e:87:44:91:aa:30:b5:08:32:3a:5d:7d:8a:19:
                    ac:15:61:38:9b:89:74:0d:f9:35:83:d8:98:1d:ca:
                    34:95:22:fa:30:dd:8c:ab:b9:ee:52:4c:b5:01:0e:
                    00:8e:f9:ac:c1:d8:4c:30:ab:d8:7f:6e:f7:fb:08:
                    e7:48:1f:13:e8:69:2e:78:27:f3:e4:36:91:90:1b:
                    7e:b5:94:1a:95:c7:80:52:2a:92:96:e9:23:73:dc:
                    e4:13:17:ed:c9:cb:ea:c8:79:b8:52:49:70:48:b6:
                    ec:91:3e:27:04:61:c3:a3:f4:00:a1:2b:94:a9:ab:
                    e3:7a:59:c1:0c:49:01:2b:4c:b1:3c:88:cd:64:8a:
                    ba:f9:35:47:6e:c8:2c:42:38:5e:81:c7:35:bf:86:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A4:94:27:F5:E1:98:5D:CE:1C:CE:7D:11:47:0E:61:8D:D5:18:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7797fa14-1a05-350f-bc0a-0cbf51b503b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.64.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:98:ea:35:cd:45:00:f7:e5:a4:b5:a7:10:97:da:76:f1:
         17:e2:86:d2:25:36:85:64:03:04:06:41:c5:62:73:c7:8d:6f:
         8b:ec:bf:91:20:76:08:e4:ef:34:1c:4d:5d:7a:77:a6:67:1d:
         10:e5:9f:5f:36:a3:cf:d7:3f:47:6c:b3:7b:e0:89:a6:dd:18:
         80:c4:7c:6a:ba:1f:17:23:3c:32:f0:cd:1d:1b:7f:8c:35:3b:
         3d:6c:14:d7:a4:47:8a:7e:46:6c:32:04:b5:93:f9:88:01:78:
         c4:1f:66:b2:9a:3a:27:74:f4:74:80:94:54:31:ad:4e:da:46:
         e0:c2:9c:cd:5c:e8:3f:6c:12:59:5d:a5:82:ef:3a:e1:49:9b:
         a5:6f:d7:7e:9f:8e:e8:ef:f0:55:f3:b1:f5:00:fe:bb:57:34:
         41:d7:76:f4:0a:44:86:38:2a:bd:be:29:84:7c:02:66:e1:1c:
         40:dd:ce:b5:5c:e4:0a:8a:03:10:f9:7a:75:c9:a2:c9:2a:a4:
         73:39:6f:a3:c2:59:30:ee:e4:ee:2a:ac:4d:01:73:e1:4d:0b:
         83:7c:8f:20:fb:29:6c:bc:cb:91:44:8f:a0:b2:31:b4:d8:ca:
         07:d3:ad:0e:4f:02:c1:b8:93:fb:7e:63:33:80:2d:59:b6:f0:
         49:14:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:10 2024 by rpki-client on console-ams.rpki-client.org