Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a56103c6-1f4e-3e14-ae9a-fef795b9e099.roa
File:                     a56103c6-1f4e-3e14-ae9a-fef795b9e099.roa (raw, json)
Hash identifier:          GSb4RDbhbFVysgHIF6Zo6v/B/t9Hz+T9XVcHy35B+PI=
Subject key identifier:   1E:0B:0F:C8:04:AC:AF:2B:07:63:B0:77:43:9D:91:E2:63:52:37:C6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E120057B3A2CC50CE4EF6600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a56103c6-1f4e-3e14-ae9a-fef795b9e099.roa
Signing time:             Wed 15 May 2024 09:07:28 +0000
ROA not before:           Wed 15 May 2024 09:07:28 +0000
ROA not after:            Tue 13 Aug 2024 09:07:28 +0000
asID:                     9829
IP address blocks:        23.47.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:20:05:7b:3a:2c:c5:0c:e4:ef:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 09:07:28 2024 GMT
            Not After : Aug 13 09:07:28 2024 GMT
        Subject: CN=4beb30d7-254f-4e0f-940e-db6530bfc3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:ca:7b:ee:c7:02:5f:ff:bc:3f:9d:9a:60:
                    3f:c2:a8:ce:6c:2a:05:b7:12:30:fa:c1:3a:c8:87:
                    ba:4a:f8:45:08:75:a3:c8:e3:b0:8b:8a:8e:4d:34:
                    a1:b4:85:98:30:d6:81:d2:6e:9e:f0:24:26:df:ea:
                    0c:78:bb:2f:ef:c7:89:5b:0a:67:7b:14:69:18:74:
                    26:9d:b1:83:5b:47:30:20:cb:88:cf:43:4d:c9:85:
                    aa:09:b9:69:50:40:5b:69:d6:25:5d:b9:56:26:9a:
                    6e:94:1d:fa:78:bf:3d:c1:d2:9c:76:dd:eb:d7:f1:
                    2a:e0:fd:41:a7:15:95:a1:ea:80:3f:44:fb:12:f5:
                    13:51:86:75:bd:ea:bd:1a:36:d5:47:02:17:1f:dd:
                    3d:33:90:28:1d:a1:9e:b4:18:b0:a4:8d:e1:cb:76:
                    4d:ba:5b:6a:20:3b:e2:7d:21:4e:ca:a1:a1:e9:dc:
                    50:04:fb:d4:70:e7:a6:3d:0b:75:80:93:a7:85:df:
                    df:b5:ae:43:f2:af:8d:7c:98:7a:d2:79:6a:b5:e9:
                    85:da:ee:8b:5d:5d:b7:b6:02:f4:45:9b:45:da:64:
                    06:35:aa:69:10:49:e0:8e:2d:20:75:e4:b3:95:69:
                    57:79:37:28:da:e0:ce:63:25:a3:94:cb:bf:cb:06:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0B:0F:C8:04:AC:AF:2B:07:63:B0:77:43:9D:91:E2:63:52:37:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a56103c6-1f4e-3e14-ae9a-fef795b9e099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:cb:ed:6e:62:14:88:33:11:9e:6f:25:4e:60:48:24:6d:8c:
         bf:82:3c:c5:6c:da:b1:b3:9b:d0:a1:e9:cb:5d:55:ba:e1:85:
         93:70:16:86:1b:16:fc:f7:4a:0d:76:a7:29:67:af:3a:5b:52:
         27:e7:84:a1:79:d8:56:56:94:65:5d:5a:4b:b6:1c:78:36:58:
         3f:33:de:c7:92:96:51:16:f0:ab:2d:32:f3:a7:0e:5c:0a:6b:
         a4:07:c3:89:0f:3d:52:6e:9c:23:57:09:70:9e:f8:96:43:5f:
         27:36:96:59:94:de:4f:74:02:f7:5e:07:64:ee:c1:34:94:3c:
         3c:37:d0:cb:3a:21:86:2c:f8:cf:e7:57:1b:f8:72:dd:e7:95:
         82:b8:61:40:c6:36:92:a9:0f:23:5d:a6:3a:5c:0c:2f:38:a2:
         d6:02:e2:df:5d:6f:ac:4a:97:75:3b:03:d3:19:76:f0:03:38:
         a5:78:8a:86:64:fe:29:17:15:84:6d:29:15:37:9b:5d:27:1b:
         b5:4e:6e:25:f5:d0:61:2e:e5:2c:8c:72:fa:a1:23:1f:9f:3e:
         c6:83:2f:1a:4c:0b:cf:b3:df:9b:8f:a1:25:ad:fb:cd:1f:f2:
         5a:4c:14:d0:2a:ea:69:d6:a8:c2:e3:60:a9:06:86:a4:8a:53:
         f2:5b:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:59:15 2024 by rpki-client on console-fra.rpki-client.org