Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac82341f-29d1-3d4c-81c1-fa617be6a25b.roa
File:                     ac82341f-29d1-3d4c-81c1-fa617be6a25b.roa (raw, json)
Hash identifier:          OeNOpOU+mg5J1IxDkoOqCHySkKLUIzjNtwhNyUkS4mI=
Subject key identifier:   C6:38:B7:63:AB:B4:79:31:B3:64:5F:D1:67:D2:E8:67:06:7F:49:73
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845CE184BEF135EC2283C9AECC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac82341f-29d1-3d4c-81c1-fa617be6a25b.roa
Signing time:             Wed 08 May 2024 13:31:33 +0000
ROA not before:           Wed 08 May 2024 13:31:33 +0000
ROA not after:            Tue 06 Aug 2024 13:31:33 +0000
asID:                     16625
IP address blocks:        23.32.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:18:4b:ef:13:5e:c2:28:3c:9a:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  8 13:31:33 2024 GMT
            Not After : Aug  6 13:31:33 2024 GMT
        Subject: CN=5e7fc794-e6df-431c-bad4-77eb7f7d5245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c4:a9:b3:4d:dc:b5:af:82:2e:67:05:fc:97:
                    15:24:55:ca:68:78:1f:e1:e2:19:ed:94:d0:2c:24:
                    fe:a4:ca:b9:a5:48:e0:2a:5c:45:ce:84:60:ae:6c:
                    c8:f5:d0:ef:03:4f:8c:2d:38:12:b2:16:ea:0d:72:
                    42:03:c0:60:90:37:e7:a4:4c:1e:e6:c2:15:1c:99:
                    41:f5:6b:31:d6:bd:01:85:da:07:d1:49:c3:00:24:
                    c1:e0:cd:79:84:6c:43:00:ff:5d:0c:c1:f5:5c:d4:
                    bc:dc:ed:1d:ab:39:7c:55:00:0f:a2:f7:83:3a:7c:
                    f3:cc:dd:a7:f4:0e:67:26:0f:e6:a8:ed:ad:92:4a:
                    c9:81:16:55:06:8b:68:e5:28:e8:25:07:7c:7e:71:
                    23:67:62:72:e5:81:b1:f1:3f:e5:25:86:c3:a3:8d:
                    70:71:b8:ed:e2:a3:14:2e:25:31:15:fd:78:08:d2:
                    68:00:6e:e6:df:64:02:d8:0b:7e:5e:ab:bd:02:60:
                    42:7b:21:70:f6:c1:6e:06:83:2d:13:44:a9:af:da:
                    37:bf:b8:e6:b8:f0:b8:3e:c2:cb:23:ca:2c:d4:9e:
                    14:f5:45:8c:7b:b8:9c:45:da:9c:61:1c:29:e0:e7:
                    f8:1d:50:6b:b9:75:2c:50:10:a1:8a:27:02:6b:7a:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:38:B7:63:AB:B4:79:31:B3:64:5F:D1:67:D2:E8:67:06:7F:49:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac82341f-29d1-3d4c-81c1-fa617be6a25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d2:3b:c3:d6:0d:af:7b:d7:08:8b:fa:58:f6:3b:97:99:4e:
         11:f6:cc:12:89:96:5d:37:e3:e5:d9:c9:fd:0a:82:8a:1e:d8:
         3e:74:0a:f1:ee:7d:8e:2e:8a:6d:f4:42:05:72:ad:c3:de:f0:
         5e:e8:5e:5c:f5:b1:de:99:c4:0c:be:e2:39:33:f2:64:16:71:
         db:77:75:b7:cf:5a:e1:1e:d9:78:98:ec:12:de:9f:72:26:7f:
         54:81:1f:1a:8c:7f:f0:c0:05:9e:c2:71:61:35:4b:cd:8c:8a:
         bd:36:d4:db:f6:c5:2a:f2:44:0b:b5:f0:d0:9e:79:e4:19:2a:
         ed:13:43:2e:87:e3:d8:eb:16:a4:28:a3:0f:37:4e:61:88:6b:
         21:dc:24:66:52:f2:55:69:8c:fb:fb:83:b5:97:14:1c:d4:56:
         99:98:7d:2a:40:b9:8d:36:c1:54:84:4d:aa:bb:6b:d0:af:12:
         16:dd:67:47:7e:e2:a0:0e:3f:73:ee:47:ce:e4:72:d6:78:43:
         20:59:1d:3c:d3:4e:f9:a0:e6:75:d3:bf:b3:5c:a0:7a:71:b0:
         22:38:16:84:45:e2:cf:1e:53:4f:96:e4:f6:61:bc:58:ab:f4:
         e8:36:b0:78:53:03:06:e0:85:07:67:54:83:b9:3a:64:47:5e:
         43:0a:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:51:54 2024 by rpki-client on console-fra.rpki-client.org