Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab0c148c-7d69-3320-8568-39518b8b328e.roa
File:                     ab0c148c-7d69-3320-8568-39518b8b328e.roa (raw, json)
Hash identifier:          UZDtM/E2MONuJwVkQuzzRSZBkfS0e34uUlhMS9bE+5c=
Subject key identifier:   7A:48:65:14:92:36:45:27:9B:02:71:2A:96:28:BE:41:E4:30:8A:5C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BD8F65C6931402945BC89F30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab0c148c-7d69-3320-8568-39518b8b328e.roa
Signing time:             Thu 02 May 2024 15:22:47 +0000
ROA not before:           Thu 02 May 2024 15:22:47 +0000
ROA not after:            Wed 31 Jul 2024 15:22:47 +0000
asID:                     20940
IP address blocks:        23.48.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:8f:65:c6:93:14:02:94:5b:c8:9f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  2 15:22:47 2024 GMT
            Not After : Jul 31 15:22:47 2024 GMT
        Subject: CN=96c0506c-0be5-4d36-9e03-e8cfa8c96650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:56:4d:33:66:bc:b3:ec:e5:e3:d4:bc:de:
                    82:68:c5:c8:86:56:c4:d8:53:62:c0:22:9c:96:75:
                    cb:a8:5c:d8:fb:be:c4:2a:45:17:37:1a:10:c0:e2:
                    64:52:79:78:99:72:01:f5:8a:96:38:00:c5:77:47:
                    ca:17:50:8b:26:16:26:07:09:80:a6:49:85:3f:8b:
                    c1:f7:7a:31:1e:25:28:e5:45:5c:90:1b:fd:bf:c0:
                    51:51:63:6b:fb:0e:ef:29:6c:72:e2:e4:03:98:95:
                    3f:70:66:96:92:7c:23:b0:da:9a:a4:da:32:4a:5c:
                    c4:7b:ed:25:ac:35:b5:95:be:89:0a:f1:95:12:3f:
                    d9:59:8f:25:a2:8b:9e:df:c3:30:1f:81:04:f8:c8:
                    41:11:99:72:86:24:58:dc:a5:45:fd:4d:39:50:d4:
                    fd:5b:29:41:61:ae:53:27:8c:0e:df:3e:88:fb:18:
                    45:cf:e5:d7:0f:2a:1f:7e:d1:26:f9:67:fd:ce:04:
                    9c:cf:e7:24:3b:77:7a:48:d4:c3:ce:7f:a6:e9:5d:
                    15:91:d9:2e:c6:69:68:e6:94:5e:70:63:08:5e:c0:
                    8b:e8:63:18:67:7f:0f:fb:85:57:7a:d1:2c:2b:7d:
                    96:fd:43:83:11:96:8d:19:af:11:56:fb:23:85:1b:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:48:65:14:92:36:45:27:9B:02:71:2A:96:28:BE:41:E4:30:8A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab0c148c-7d69-3320-8568-39518b8b328e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:64:75:c5:31:0b:11:dd:02:71:48:7b:78:93:e2:90:8e:
         51:79:c0:29:3b:62:03:69:05:4e:7b:ca:9c:ac:f8:3d:5d:73:
         9b:bc:cd:15:0f:2c:31:73:cb:b7:72:bd:22:4e:ae:33:c4:91:
         1c:79:b4:b5:89:23:df:69:2b:22:84:be:73:2b:6b:40:d1:08:
         87:b2:60:ee:dc:18:de:f7:26:32:bb:b6:bc:51:b1:9a:25:bc:
         c3:94:3d:5c:1e:31:69:cb:38:43:51:47:7b:a8:b1:44:8d:d2:
         c1:4c:9c:f2:8d:ec:92:60:1b:c3:a3:4f:85:60:d9:2c:da:51:
         70:6f:be:fa:1a:06:e8:53:40:49:7f:b9:d2:b9:41:7a:6a:50:
         65:bf:05:fb:99:21:9d:06:45:87:63:22:aa:6a:65:7b:10:0e:
         b4:2c:cb:10:ac:3e:f4:6d:1e:36:cb:b5:07:23:8f:e4:58:8a:
         81:ea:c2:d4:b1:e8:56:41:fc:7e:a3:a4:bf:25:4c:a3:b0:5a:
         ea:c8:ff:4f:44:62:33:46:8b:c5:44:f1:a8:58:ba:64:f8:16:
         58:64:cd:01:e8:fd:68:77:18:4f:bd:8b:98:e9:36:31:d5:49:
         0c:94:2f:b1:86:65:93:86:70:f8:6b:b9:b8:29:7f:b9:06:de:
         bb:13:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:05:34 2024 by rpki-client on console-ams.rpki-client.org