Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d33242c2-4936-3b9e-a769-0abece0988f0.roa
File:                     d33242c2-4936-3b9e-a769-0abece0988f0.roa (raw, json)
Hash identifier:          tCpLtsUPmVRhbxLQXfLwhUNzuOHwi+IsIJMNg1Ocino=
Subject key identifier:   18:B4:67:E3:50:BC:DD:46:11:93:14:99:33:C6:CD:29:04:87:D8:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DEC02E5E888C3017C707F434
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d33242c2-4936-3b9e-a769-0abece0988f0.roa
Signing time:             Tue 14 May 2024 12:42:45 +0000
ROA not before:           Tue 14 May 2024 12:42:45 +0000
ROA not after:            Mon 12 Aug 2024 12:42:45 +0000
asID:                     20940
IP address blocks:        23.45.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c0:2e:5e:88:8c:30:17:c7:07:f4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 12:42:45 2024 GMT
            Not After : Aug 12 12:42:45 2024 GMT
        Subject: CN=d9197ffb-c49b-4711-b2bd-ccd78d6174c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f0:78:f8:16:1a:56:6d:19:91:8a:69:b9:30:
                    9b:20:a1:c3:e7:96:6e:72:6a:42:a3:cc:15:be:7f:
                    e2:dd:ca:eb:c8:fb:c2:f8:b6:a0:d8:41:0f:b7:e9:
                    ff:2b:5c:d3:59:e8:c2:39:0d:5e:9f:99:8d:fe:1c:
                    70:d8:49:f7:1e:e7:76:cb:2a:7b:54:2e:24:f9:24:
                    20:7f:c2:22:ce:6c:01:a6:7f:2e:d2:f3:0d:79:0e:
                    75:2a:cc:ba:17:da:02:d5:e4:f6:ee:7a:3b:ac:54:
                    66:06:a9:1d:13:96:74:d3:10:6f:43:a3:90:74:cf:
                    34:7c:63:21:62:8b:fa:df:d0:bf:c6:8a:24:e5:46:
                    fe:fb:f0:bf:7b:5e:91:ed:43:6b:5c:1a:2a:f2:d0:
                    73:bf:63:1a:fb:35:2f:dd:cf:b3:0b:a3:a6:e7:2d:
                    e8:a6:21:a6:f7:60:70:38:25:da:5c:51:a9:e5:54:
                    2a:a7:6c:6f:c1:0b:5c:da:59:ba:4d:bc:25:43:97:
                    8b:7a:59:80:13:0a:53:b3:1d:d2:ab:5c:3d:30:66:
                    90:e6:76:e4:87:ba:67:b6:52:73:d7:f6:5b:e8:be:
                    60:2b:1c:e8:6e:18:db:17:13:67:df:b0:9b:3a:18:
                    d7:d4:6b:b4:e8:0e:44:b6:3b:4b:92:f6:9e:09:9f:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B4:67:E3:50:BC:DD:46:11:93:14:99:33:C6:CD:29:04:87:D8:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d33242c2-4936-3b9e-a769-0abece0988f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:97:3c:6d:9f:71:df:0f:46:0c:06:7f:ea:e5:f7:28:08:
         95:4d:1c:57:1b:c3:7b:9c:4c:da:d7:66:91:36:1a:9c:41:7c:
         b5:13:5b:3b:2b:a3:28:1d:3a:dd:08:e6:50:ae:57:18:63:42:
         d0:93:e0:6c:d8:46:8b:2e:ba:77:d3:a4:8f:60:8e:49:4a:31:
         3e:36:29:d6:02:75:f2:e5:64:47:06:c0:a1:e5:b7:41:72:93:
         5e:27:0f:62:2a:99:24:84:fe:f1:35:a8:ed:dc:7c:54:51:33:
         63:d0:55:e6:c6:e1:67:e1:c9:36:1f:ef:c4:a6:f0:eb:b0:87:
         f6:9d:92:6e:b5:af:a4:b5:cf:8e:19:68:d2:28:5d:d0:8f:a7:
         2c:c0:8b:8d:7c:61:08:eb:80:91:a1:dc:1d:dd:2c:dd:15:0d:
         20:35:b8:a9:6c:c7:4c:03:48:3e:2e:9e:d2:26:bb:dd:99:27:
         65:b4:2d:79:47:57:c5:83:e1:c2:bc:55:f1:da:db:fa:50:3a:
         4b:63:49:8b:18:e1:64:38:4b:c7:72:89:97:d3:8a:04:b6:de:
         17:87:bd:88:4e:ff:2c:26:f6:9d:c5:2b:34:7f:d5:1e:4d:d6:
         a7:4f:8c:73:ad:f1:c4:1e:7f:7d:03:18:ec:a4:c4:38:53:e8:
         0c:2b:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:17:12 2024 by rpki-client on console-ams.rpki-client.org