Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf7c400-7bdd-3b41-affe-e37b1b14a6bd.roa
File:                     ddf7c400-7bdd-3b41-affe-e37b1b14a6bd.roa (raw, json)
Hash identifier:          2qz7Ia+qhHEhFN33/eP10ibIdDd94YhGQFHz4xePZiU=
Subject key identifier:   F8:7C:D9:CB:10:CD:32:79:68:D5:58:BF:F7:36:58:24:60:45:3E:40
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DBCE9C9B2BE591C98E62AA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf7c400-7bdd-3b41-affe-e37b1b14a6bd.roa
Signing time:             Mon 13 May 2024 11:24:24 +0000
ROA not before:           Mon 13 May 2024 11:24:24 +0000
ROA not after:            Sun 11 Aug 2024 11:24:24 +0000
asID:                     20940
IP address blocks:        23.39.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:ce:9c:9b:2b:e5:91:c9:8e:62:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 11:24:24 2024 GMT
            Not After : Aug 11 11:24:24 2024 GMT
        Subject: CN=14f4a640-6cf3-4c2c-8d71-9995cd327e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:fe:62:ed:f6:58:6d:57:23:4f:8c:e3:8b:
                    4c:4b:d2:21:45:41:d9:21:42:fc:a6:2e:37:88:a8:
                    7a:e9:7f:94:31:5c:25:e9:3a:44:cc:ea:16:bd:04:
                    38:d5:9d:53:1e:a1:fe:63:19:0a:56:00:b7:42:6c:
                    07:24:61:a3:13:71:f0:6b:e8:18:c4:0a:83:f8:50:
                    43:b1:df:a8:11:0e:9f:a8:bd:6d:ec:41:e5:9f:08:
                    cb:fc:c0:e7:3c:db:ac:6f:dc:32:71:3a:62:93:9a:
                    6c:e9:75:73:05:54:dc:c4:f0:4a:ad:99:fc:9c:1e:
                    8f:0d:09:18:d6:39:0c:ae:a8:5d:0f:c3:f5:ff:be:
                    bb:13:ef:f4:20:88:19:56:68:10:e9:63:7b:3a:49:
                    e9:13:bf:d2:4b:c2:2f:34:d3:67:b4:26:7d:20:8a:
                    1b:88:6b:42:51:b8:f2:8b:82:2b:67:f0:43:a0:23:
                    55:33:ca:26:61:5a:45:fc:b1:d1:d5:99:88:be:83:
                    e7:33:cd:c8:7b:10:e9:38:91:36:dc:5b:f6:3e:41:
                    36:6b:34:b7:52:c7:f8:58:33:f6:de:2e:ea:21:01:
                    a0:46:7e:43:de:a7:25:13:80:8e:4d:ab:8e:4d:94:
                    01:8f:7d:a8:9a:ea:d9:5b:bb:ad:93:9c:45:4a:c8:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7C:D9:CB:10:CD:32:79:68:D5:58:BF:F7:36:58:24:60:45:3E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddf7c400-7bdd-3b41-affe-e37b1b14a6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.39.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:5b:64:6d:26:73:c4:77:e5:36:7a:e5:db:dc:8f:a0:6b:a7:
         c5:de:2d:a3:d6:ad:4f:08:6b:9c:b7:df:8f:b5:ef:46:e9:16:
         40:13:4a:93:b0:25:05:81:0d:f9:58:2b:24:18:fe:67:ae:fd:
         1e:a2:bc:7e:c5:5c:0f:db:bc:8a:52:77:95:8b:d9:65:6b:63:
         37:b4:b0:bb:e1:2b:12:bb:bb:56:c1:bc:8f:c0:e2:6c:e4:f0:
         33:e9:4e:48:aa:b6:88:df:2c:1d:cc:e9:b8:09:06:76:68:6e:
         26:eb:fc:bd:3d:e9:42:17:21:05:fa:61:84:53:67:c8:21:df:
         3f:00:34:1c:68:ab:29:4a:cf:5e:21:d5:96:e4:eb:9d:43:ca:
         3f:bb:98:26:f2:bf:44:36:66:57:56:a8:d6:42:2d:ba:de:41:
         ad:0d:3d:ec:38:e5:38:46:be:b6:35:66:98:4d:73:01:25:21:
         65:31:aa:53:de:f5:2f:71:76:a6:1b:8a:61:7e:f7:ef:c1:8c:
         c4:75:5c:f4:1b:96:6a:84:36:7b:60:26:86:16:a2:81:ba:c0:
         bd:d5:d4:e6:86:e9:e0:6e:37:a5:2c:c7:b9:2d:a3:45:b1:d6:
         01:0d:92:48:3e:d0:36:78:8f:37:60:73:dd:23:11:28:67:96:
         61:d9:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:07:50 2024 by rpki-client on console-ams.rpki-client.org