Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a16ec6-2253-3685-9296-4d762ee75d63.roa
File:                     97a16ec6-2253-3685-9296-4d762ee75d63.roa (raw, json)
Hash identifier:          3QFYzudxC854cYDEUb+2lagZiRdwgxdYKkBx3EmoM/k=
Subject key identifier:   20:F9:64:6C:11:60:98:B4:EE:1A:A8:C1:39:1E:53:97:04:AE:F2:64
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DE959B17A6E7ED5103333A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a16ec6-2253-3685-9296-4d762ee75d63.roa
Signing time:             Tue 14 May 2024 11:16:58 +0000
ROA not before:           Tue 14 May 2024 11:16:58 +0000
ROA not after:            Mon 12 Aug 2024 11:16:58 +0000
asID:                     35994
IP address blocks:        23.44.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:95:9b:17:a6:e7:ed:51:03:33:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 11:16:58 2024 GMT
            Not After : Aug 12 11:16:58 2024 GMT
        Subject: CN=11fdef77-7e5c-485e-943f-e19e239ecba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:83:69:51:05:26:7d:b6:8c:d2:e4:7d:71:
                    0c:d8:c7:f4:48:b5:eb:93:41:08:7f:d3:c0:8b:43:
                    4f:0c:b9:f0:15:2b:c6:cd:85:dc:a0:36:08:c5:cc:
                    79:12:9b:95:8e:b1:85:92:31:2f:29:5c:5e:55:68:
                    f3:18:1e:ce:06:8f:66:4b:3c:5c:cf:e6:16:a6:66:
                    69:a9:a8:a2:ed:83:0e:91:2c:66:e9:ef:a6:23:a1:
                    e2:bf:f9:8d:34:1e:0f:0e:3f:d2:9d:c8:75:97:26:
                    e3:5f:9f:fd:9e:1d:53:db:36:f7:62:3d:cd:30:3d:
                    60:9c:5f:98:c2:0c:73:11:9d:ec:cc:fa:a7:a5:89:
                    6e:1b:54:54:20:58:ee:51:8b:d5:4c:4b:87:d4:db:
                    84:8f:80:f0:18:2b:59:2d:d3:8c:ad:24:43:18:e0:
                    70:f3:c4:3c:70:55:9d:f8:d2:14:76:7e:6d:e4:4f:
                    80:4d:09:41:6a:da:da:96:0c:50:60:07:ee:ef:8e:
                    5d:b9:a4:ca:a5:10:f9:1e:4e:23:f7:fe:4a:15:98:
                    25:cc:cc:f2:aa:e2:9f:cf:13:27:07:45:8f:14:d5:
                    c9:ef:26:c5:f4:33:b8:f1:5e:61:70:67:ed:1c:92:
                    da:27:8b:12:53:5c:8e:90:75:02:1d:34:5f:15:7c:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:64:6C:11:60:98:B4:EE:1A:A8:C1:39:1E:53:97:04:AE:F2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97a16ec6-2253-3685-9296-4d762ee75d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:20:9f:9e:48:40:94:8c:32:3d:b5:04:58:77:c1:98:5c:4e:
         65:ff:9b:7a:be:89:03:ab:1c:ce:13:e6:3e:18:5e:1a:ac:30:
         c7:41:9b:e9:36:74:7f:27:0e:c5:c0:cb:e9:77:40:4b:93:74:
         b5:4b:2f:6d:0a:48:c1:60:a8:b8:15:d0:ed:12:f5:44:e1:d9:
         fb:91:dc:61:8f:8a:6b:7e:ff:ab:cf:cd:a7:83:e4:1d:2f:3e:
         52:a6:b4:d8:6b:93:18:20:20:6c:6a:27:83:6f:f1:77:9e:31:
         e9:b4:c6:6e:24:47:a4:a7:d7:3a:ec:7b:cd:58:e6:d3:63:14:
         75:a3:67:e3:5b:c0:49:9a:f2:86:f3:9e:19:4d:95:5a:c0:fd:
         84:94:7a:f0:de:e5:66:2e:62:72:55:ec:ea:0e:68:b4:59:5d:
         af:cf:c8:c8:68:41:e2:bf:51:58:dc:86:d0:0d:ad:c0:d0:9d:
         12:21:bb:8e:31:10:a0:59:7b:a7:1c:0b:fe:44:8f:63:28:40:
         f2:01:16:a5:cc:a2:04:0f:cb:40:97:c5:1a:2d:8e:46:87:b1:
         45:be:2f:12:9e:b0:fc:4e:89:17:d8:57:9a:e8:c5:fa:32:0c:
         c1:b4:49:32:b5:c1:86:47:8a:c3:7b:8d:62:74:d6:cc:e0:16:
         64:6f:b0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:40:35 2024 by rpki-client on console-ams.rpki-client.org