Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0d055b4-9c7a-3b4e-94d0-44b9472e86c4.roa
File:                     e0d055b4-9c7a-3b4e-94d0-44b9472e86c4.roa (raw, json)
Hash identifier:          JFaE9nC1KrWol9817z4zZS5BSPkpTfEfAyMafMfZMTo=
Subject key identifier:   EC:61:69:D6:AF:E6:82:0E:E4:49:3D:9F:89:D3:03:52:4A:2B:B1:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DBB97FC691DAE8447EE15800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0d055b4-9c7a-3b4e-94d0-44b9472e86c4.roa
Signing time:             Mon 13 May 2024 10:41:52 +0000
ROA not before:           Mon 13 May 2024 10:41:52 +0000
ROA not after:            Sun 11 Aug 2024 10:41:52 +0000
asID:                     20940
IP address blocks:        23.38.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:b9:7f:c6:91:da:e8:44:7e:e1:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 10:41:52 2024 GMT
            Not After : Aug 11 10:41:52 2024 GMT
        Subject: CN=c8fb4d17-69fb-4e87-b5a1-33fb1e37f81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:7d:40:4f:7e:d6:31:ad:53:db:06:44:38:
                    93:ec:02:43:28:69:91:94:fc:74:15:8c:58:af:f3:
                    04:30:ac:00:34:00:22:d2:ff:a5:d4:66:6f:74:77:
                    cd:f1:a8:a0:0f:a7:d8:ff:08:ef:d9:a3:b3:e1:9d:
                    e7:d4:13:54:f2:16:4c:30:e2:2b:20:5c:c3:ca:68:
                    a5:3e:b2:c9:ca:7d:1a:9b:ca:33:80:95:a4:f8:f9:
                    7c:13:95:e8:47:3c:ec:48:12:4a:d5:90:3b:2a:d3:
                    d1:2d:34:a3:ae:77:fd:af:74:d4:b3:cb:0f:46:43:
                    f5:85:af:fe:ba:46:94:8e:4f:4e:88:e9:c7:0d:5d:
                    70:76:c6:4f:de:ec:d1:ff:c4:78:85:64:1c:3b:32:
                    06:b2:82:83:15:46:0c:fc:bf:95:08:6e:b3:6e:7a:
                    cd:9e:cd:36:ba:c9:04:1b:88:22:97:85:d2:06:ee:
                    32:c8:fc:54:54:f5:e8:86:f8:69:e5:65:92:19:0f:
                    50:37:83:d6:8d:68:16:c3:b2:43:0f:68:59:f1:b7:
                    1d:6d:03:41:da:46:ea:be:e6:0e:ae:68:d7:af:72:
                    d4:c3:49:f0:e9:4a:0b:f8:b1:88:8d:46:4a:c5:e0:
                    eb:8f:58:d7:7e:d5:bd:12:a9:24:b5:c5:97:17:ba:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:61:69:D6:AF:E6:82:0E:E4:49:3D:9F:89:D3:03:52:4A:2B:B1:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0d055b4-9c7a-3b4e-94d0-44b9472e86c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:45:f9:05:de:73:e3:31:4d:5e:30:9e:41:df:16:a1:0c:b2:
         84:14:6f:cc:7d:e7:ef:9c:cd:6e:20:67:d7:ce:c3:fc:e4:3e:
         e2:f3:db:16:fb:85:6b:f3:2a:3f:82:38:f1:b4:f5:29:23:94:
         18:04:b6:ec:86:ee:5a:23:f2:17:3c:0d:96:16:dd:22:c3:6f:
         84:a7:1e:69:e6:cc:60:b5:b7:e5:53:84:30:5d:76:c9:af:b8:
         90:a6:bf:ca:f4:e2:4b:86:10:a3:57:05:51:95:03:d5:b4:2a:
         52:58:c4:7e:2d:dc:cf:8f:df:eb:59:72:f1:40:2c:2e:62:ee:
         7c:8e:96:b1:d8:1c:27:0e:56:aa:88:7a:0a:4b:19:95:ec:f1:
         22:34:7e:e4:16:df:0f:c0:5f:68:06:ad:ed:e9:02:3c:4f:2c:
         c4:20:33:fa:ea:c2:4a:53:d8:09:fc:c7:a3:d0:98:a6:91:9a:
         8f:29:02:62:d1:2e:81:c1:9b:b8:dc:da:40:2a:04:b6:01:25:
         b5:0b:89:35:ea:f4:d9:7c:6f:65:76:39:23:b6:4b:f7:e2:49:
         a9:d6:79:57:ef:b8:40:be:0e:b5:6b:39:84:bc:f9:1f:bd:96:
         43:4c:6c:93:ea:01:00:ed:1d:00:02:dd:ea:bc:b9:2b:7d:c4:
         d1:e2:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:17:16 2024 by rpki-client on console-ams.rpki-client.org