Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da1645-c73d-3094-88f3-b59befb6e9b2.roa
File:                     88da1645-c73d-3094-88f3-b59befb6e9b2.roa (raw, json)
Hash identifier:          nxDjBtnZnE/dE18HfOgoOZ5z6vsdBRLJ9JTdPgkyEKE=
Subject key identifier:   89:67:65:D0:C0:C5:2B:37:87:08:06:DA:0E:BB:48:61:52:99:EB:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DEC00C26BBF7B09473F936C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da1645-c73d-3094-88f3-b59befb6e9b2.roa
Signing time:             Tue 14 May 2024 12:42:29 +0000
ROA not before:           Tue 14 May 2024 12:42:29 +0000
ROA not after:            Mon 12 Aug 2024 12:42:29 +0000
asID:                     20940
IP address blocks:        23.45.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c0:0c:26:bb:f7:b0:94:73:f9:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 12:42:29 2024 GMT
            Not After : Aug 12 12:42:29 2024 GMT
        Subject: CN=19415726-aec4-45f9-9640-17f15a9c6e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:5e:86:bc:44:2b:ca:24:94:7d:82:47:92:
                    0b:52:3d:9f:70:79:1c:3a:82:d6:4e:4e:28:0e:12:
                    db:33:b3:73:59:94:47:96:e1:56:a3:e1:de:9e:a5:
                    cc:96:d8:4f:6a:21:b7:08:b0:9f:ca:52:20:e1:a6:
                    22:21:13:a4:ed:fa:6b:89:07:4c:ef:5e:49:b6:c5:
                    41:bb:b9:ab:a1:51:ad:56:cc:5f:95:eb:28:07:61:
                    20:0e:c0:b2:cd:77:a6:14:97:90:b3:82:67:6a:b4:
                    45:b6:c8:af:c3:45:73:43:b2:00:06:d5:ac:35:67:
                    63:0c:13:96:65:8b:8d:e2:c1:df:36:ad:a9:67:2e:
                    12:81:38:77:3b:a0:06:bb:54:a3:c3:37:72:7e:39:
                    5c:b3:46:29:5e:66:05:c9:20:d5:af:dc:37:e8:a2:
                    45:31:17:68:20:14:6d:ab:66:70:f9:2b:2a:70:4b:
                    01:5e:1c:74:3f:13:03:23:9b:ef:08:c5:7e:d7:71:
                    c7:d9:2a:fa:73:c5:e3:26:0e:21:47:dd:b3:d2:91:
                    da:06:00:ab:bf:1b:c4:8e:c6:d6:08:db:dd:a7:cb:
                    33:97:e3:7b:76:99:a3:26:13:ee:4b:4f:c6:17:a8:
                    8f:c9:79:0f:6b:ca:c9:fa:02:b9:76:c4:f8:90:79:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:67:65:D0:C0:C5:2B:37:87:08:06:DA:0E:BB:48:61:52:99:EB:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da1645-c73d-3094-88f3-b59befb6e9b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:85:df:21:5f:5e:9b:45:c6:34:e3:33:15:80:10:2c:1d:
         c3:d6:94:8e:d3:cf:68:a5:1b:cf:22:fa:46:6e:7d:fb:da:ad:
         97:e4:2f:24:45:3b:54:f7:cb:5e:aa:38:4b:58:0c:bc:c4:d2:
         c0:48:f3:ae:47:1c:79:18:11:49:6e:a8:98:07:38:83:28:e8:
         70:a8:bc:59:71:95:ff:60:a1:4d:cc:f9:97:6c:17:37:1f:f0:
         f0:65:a4:b5:45:18:fc:2a:48:8f:b3:09:ba:cc:63:d4:48:74:
         ee:1d:58:b8:96:c4:85:fb:48:7b:1a:ba:39:35:86:3c:1e:87:
         16:8e:4e:5a:1f:05:06:aa:ca:c7:f4:e3:c5:4d:27:04:81:f6:
         0a:6b:5f:40:88:a7:9a:86:7b:10:59:e9:0b:56:ec:2b:6b:f6:
         3d:07:a4:ac:a7:14:c2:e2:d8:2f:27:01:fc:8f:62:f7:76:e3:
         f3:ab:52:77:a1:69:d9:b2:77:6c:76:8b:8a:40:a0:70:3a:1c:
         d3:88:48:44:0f:cb:c0:55:08:34:af:71:d2:68:ad:79:c0:40:
         95:5d:31:2f:86:ff:1d:37:35:b9:8a:d0:77:7b:1c:40:0d:f1:
         66:07:45:26:55:dc:fa:59:28:40:37:48:48:58:04:67:d7:f4:
         3c:e5:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:44:14 2024 by rpki-client on console-fra.rpki-client.org