Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1d81728-e55c-3ac7-9853-2fd3e8d1dd8f.roa
File:                     d1d81728-e55c-3ac7-9853-2fd3e8d1dd8f.roa (raw, json)
Hash identifier:          7KmBQksnYcoy9sfQRuFWDjAuzlcBhzflkXC6OMEbLPM=
Subject key identifier:   E9:89:23:5E:3A:3D:21:97:2E:68:B5:2F:48:50:E1:FB:0B:E8:D1:2B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DE4F7A7398D11179051F5300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1d81728-e55c-3ac7-9853-2fd3e8d1dd8f.roa
Signing time:             Tue 14 May 2024 08:55:40 +0000
ROA not before:           Tue 14 May 2024 08:55:40 +0000
ROA not after:            Mon 12 Aug 2024 08:55:40 +0000
asID:                     20940
IP address blocks:        23.43.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:4f:7a:73:98:d1:11:79:05:1f:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 08:55:40 2024 GMT
            Not After : Aug 12 08:55:40 2024 GMT
        Subject: CN=4f100b87-d073-4608-a428-9d1ed99e12e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f7:7b:43:3c:e2:85:4b:66:86:4e:72:79:96:
                    01:ef:68:79:87:39:37:33:93:6d:69:d5:f6:d8:84:
                    7b:d9:73:d3:e4:60:47:bd:ba:f0:f0:14:a1:df:8d:
                    b3:f3:26:69:ab:ca:f7:65:72:f4:1f:87:8c:4d:76:
                    ef:f1:44:a5:c7:da:69:6b:82:be:0d:8b:dd:70:d3:
                    c2:34:6c:a3:25:71:e0:9d:dc:dc:79:e7:21:42:0d:
                    a4:dd:34:33:ab:d5:1f:73:62:6c:a2:21:30:41:ea:
                    c1:e4:a6:db:ce:15:be:0a:c5:a1:cc:15:29:fd:f5:
                    c9:fa:93:90:73:0e:63:a2:c2:0e:6e:a8:04:87:ab:
                    67:11:2f:eb:31:dd:22:42:0e:2d:40:ed:d8:87:ac:
                    7f:25:06:d4:d1:8e:ec:32:4f:57:ed:cf:f5:58:da:
                    20:d8:51:67:d1:57:4f:0f:c1:bc:85:f1:74:52:f0:
                    7d:de:cc:f5:9b:b1:1d:57:84:37:f6:ab:d9:a0:44:
                    61:76:1e:ec:c0:f2:b7:3e:f3:bb:4e:1e:09:80:cc:
                    9b:cc:21:21:66:14:c5:43:c1:bf:ff:97:01:a9:d7:
                    ea:14:32:4b:db:d9:1d:47:28:a7:c0:03:86:06:5a:
                    33:83:4b:b8:e5:53:ce:d4:a0:35:12:7b:4f:68:75:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:89:23:5E:3A:3D:21:97:2E:68:B5:2F:48:50:E1:FB:0B:E8:D1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1d81728-e55c-3ac7-9853-2fd3e8d1dd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:12:29:c1:2b:0b:02:f5:cb:6c:d0:58:d0:13:d8:e3:0a:6c:
         fa:57:d1:29:53:eb:ff:cd:dc:26:8f:39:64:b1:6e:fa:8f:52:
         e7:9a:2e:30:59:73:84:a9:be:b8:b6:6d:09:9b:f9:e5:ca:fa:
         9f:0e:a3:26:ad:df:19:23:61:15:48:e8:de:62:b3:bc:be:d0:
         98:b7:c1:99:af:2a:35:fe:89:af:36:01:fd:c8:05:bd:a9:af:
         a7:b8:6c:5b:de:45:70:a0:b9:0b:5d:2e:95:1c:0e:11:a1:40:
         16:46:b5:0d:ae:11:01:76:93:22:cc:fa:e2:46:9b:85:9b:83:
         13:b6:4c:d8:44:d0:7d:bd:79:24:80:b7:3c:4d:66:82:dc:91:
         11:78:28:5e:ff:17:10:06:7d:da:c1:cb:4b:7e:a8:52:82:83:
         71:62:80:4c:c3:db:ec:d8:94:e9:f6:c2:81:7a:0d:02:81:c5:
         9d:6a:86:8f:ae:0a:91:c5:86:99:bf:2e:f3:b2:e3:32:be:d5:
         74:1d:a8:d6:0d:fa:9c:b7:24:12:d8:7d:fb:6a:ac:d4:b1:ae:
         56:37:ad:75:3a:35:bd:62:78:50:d9:32:ba:1a:b0:a0:61:b7:
         4a:c7:e2:88:bc:85:05:4f:b7:b8:dd:c8:db:d0:cd:67:4d:85:
         81:ca:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:07:46 2024 by rpki-client on console-ams.rpki-client.org