Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c35cba64-003a-38df-8227-ab7c48b04261.roa
File:                     c35cba64-003a-38df-8227-ab7c48b04261.roa (raw, json)
Hash identifier:          w36fZKQHijlpo/stcUSVqjiADM+CDFs5auj3xwIHtyY=
Subject key identifier:   A8:CE:7A:5E:A2:70:D0:68:3A:C2:33:6D:1B:BF:96:03:28:05:F5:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BFD4F74D510FAAB17E9150C8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c35cba64-003a-38df-8227-ab7c48b04261.roa
Signing time:             Fri 03 May 2024 10:54:34 +0000
ROA not before:           Fri 03 May 2024 10:54:34 +0000
ROA not after:            Thu 01 Aug 2024 10:54:34 +0000
asID:                     20940
IP address blocks:        23.50.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bf:d4:f7:4d:51:0f:aa:b1:7e:91:50:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  3 10:54:34 2024 GMT
            Not After : Aug  1 10:54:34 2024 GMT
        Subject: CN=970c4a16-2bcc-43b6-81c6-9b465e3c271a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:7a:7e:45:4d:e4:74:74:f8:38:ee:f6:91:
                    7a:b6:4c:0f:38:e7:cb:00:d9:00:df:8a:f0:c1:78:
                    d0:d2:5b:de:b9:a1:5e:7c:76:dd:67:11:74:0c:e2:
                    44:1a:42:44:32:da:18:7e:00:01:45:09:d5:a3:0f:
                    de:99:55:57:f0:b0:d1:31:77:eb:e4:c9:bf:a0:56:
                    6c:5c:27:07:e4:a7:84:eb:5b:b1:fe:31:8f:e5:a4:
                    ad:8e:69:1f:f1:3a:36:e4:e8:b8:91:ce:8a:d2:d8:
                    fa:bd:27:eb:dd:88:75:76:a2:7e:3e:35:72:05:f2:
                    19:db:fc:92:4e:b5:f1:59:72:bc:1b:e9:62:dd:dc:
                    88:6b:c0:e8:a4:a7:10:ff:e9:61:6a:ad:e3:64:03:
                    17:0c:14:ce:33:49:cf:70:a3:20:b7:87:2b:80:7e:
                    b0:ad:2b:93:a6:40:f8:b7:12:83:ae:a3:ee:73:53:
                    43:78:af:de:2e:dd:98:14:1d:93:81:ce:9e:84:24:
                    f8:01:84:0b:00:54:b7:0f:ee:0e:cc:37:8c:27:8a:
                    a2:b6:d6:3a:37:6a:9c:b0:e5:74:54:ef:dc:d2:98:
                    25:ab:6a:30:ea:33:7c:ad:a2:42:b9:49:eb:fe:06:
                    63:11:8a:1a:4e:25:0f:0a:fa:17:1a:45:6a:a3:90:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CE:7A:5E:A2:70:D0:68:3A:C2:33:6D:1B:BF:96:03:28:05:F5:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c35cba64-003a-38df-8227-ab7c48b04261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f8:39:73:08:ec:c3:9a:0d:40:22:37:ee:6d:45:d9:b9:71:
         5b:91:8e:5f:96:ef:3a:d8:56:95:11:cd:1e:bb:df:f6:6a:fb:
         de:c5:b1:54:4f:06:a3:bb:ad:ac:c6:9c:09:50:17:a7:04:a7:
         ba:25:a7:1c:d8:67:d6:f4:d5:00:49:2e:15:3e:89:f1:52:f2:
         20:f1:a3:72:22:3f:88:a1:dd:95:2e:da:89:1f:eb:ca:37:f0:
         56:ea:56:7d:00:fd:fd:15:16:28:07:0e:89:76:7a:53:e0:3a:
         4a:80:30:8c:db:51:04:51:97:a0:53:00:15:42:61:72:59:e4:
         76:ae:16:97:32:ad:be:20:b8:23:6b:0f:03:3a:e8:7b:6b:d8:
         2e:c0:e0:e8:6f:d7:5c:92:10:2f:3a:eb:d5:6b:5d:6b:90:5f:
         4c:5e:2c:51:63:72:2b:5f:df:97:72:68:cf:14:ac:66:7e:1e:
         8e:3b:2d:85:3b:ac:1c:b7:b7:a4:fe:5a:91:e5:0e:15:ee:c5:
         72:94:5c:99:63:57:c1:87:9e:70:aa:08:48:30:88:47:ae:66:
         ad:58:2b:9b:07:fd:cd:96:b0:1c:40:74:d3:a6:6a:87:ae:c1:
         6f:93:ee:27:2c:63:17:70:ec:45:5b:81:36:77:fb:f7:b7:3f:
         b7:44:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:44:24 2024 by rpki-client on console-fra.rpki-client.org