Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa
File:                     41a63799-17b8-37d9-84b8-f3de51331877.roa (raw, json)
Hash identifier:          LFhskTaKaJ0Ujf8bAEXkzdbpyRbYP21gL7HOZW2oHIU=
Subject key identifier:   98:7C:DF:7C:95:F3:72:93:84:EA:D1:13:08:0F:16:A0:3D:03:EA:59
Certificate issuer:       /CN=ab1a140b-878b-41cc-864f-08e0177f7325
Certificate serial:       010D0C9F4328584589A322AE5EF33CA5F73EC700
Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     20473
IP address blocks:        23.150.240.0/24 maxlen: 24
                          204.238.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:22:ae:5e:f3:3c:a5:f7:3e:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=b6aa2d44-cef1-40bd-a88b-9e873c26bac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:77:6e:8b:4a:3b:0e:44:3d:e7:93:7b:d2:
                    7f:61:ad:bf:99:52:cb:57:87:77:af:5c:ed:34:46:
                    ee:ec:c2:8d:14:36:dd:11:86:04:a9:ea:68:a4:6b:
                    c1:cb:69:86:70:b8:e7:10:53:3f:9b:62:8d:bb:c3:
                    91:1e:b1:99:25:ae:40:d1:c8:cc:93:06:e0:3f:e8:
                    d2:45:69:c1:e3:ec:0c:ca:ed:d0:f4:05:4e:7f:ef:
                    8a:0f:64:8f:69:d7:f7:27:9d:a6:a8:01:9d:30:e8:
                    e4:6b:7e:2f:b4:c0:82:7d:e7:0a:e8:69:0c:fe:97:
                    d4:dd:18:f2:67:05:4d:1c:17:d3:1a:dd:a2:22:30:
                    5c:89:56:63:81:3d:6e:4f:02:36:0d:ba:ed:af:f3:
                    ec:1b:1b:ef:45:57:f1:29:13:9b:77:43:40:42:ab:
                    fd:b8:d6:14:b8:ad:a7:47:46:c2:38:69:6c:bb:c5:
                    45:c8:6a:84:31:9e:30:f6:cf:6e:6a:52:0c:ed:af:
                    3f:0d:7c:45:34:03:7c:15:97:da:8a:03:29:68:cc:
                    35:53:97:f7:99:32:c5:82:8c:44:9f:25:e0:85:d8:
                    bd:c6:23:b4:39:04:2b:b9:5c:5b:e4:a6:b8:d6:88:
                    f1:2f:60:48:c5:5f:b1:0a:a3:0b:4a:13:1f:7d:c7:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7C:DF:7C:95:F3:72:93:84:EA:D1:13:08:0F:16:A0:3D:03:EA:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl

            X509v3 Authority Key Identifier:
                keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.240.0/24
                  204.238.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:6a:6d:cf:c5:31:49:c8:d4:12:39:97:c5:19:c4:35:f1:
         02:07:68:9f:81:2c:4c:dd:36:ae:66:29:e1:72:cf:a3:35:55:
         ec:d5:00:0a:2c:06:23:13:9a:d7:60:76:ae:98:0e:de:19:e8:
         aa:a0:dd:0b:a6:cf:68:2b:da:72:73:f3:19:a4:f6:e2:84:9e:
         74:87:08:cb:2c:e9:32:31:cf:2b:7b:8b:43:0c:43:14:e1:c1:
         12:0e:cc:88:cb:d8:96:15:77:59:26:eb:3c:c1:b8:70:e8:c8:
         7c:c1:fb:ec:9a:0e:d7:e7:37:82:ff:b2:ff:47:52:e4:e7:60:
         41:0d:9a:e1:6d:8f:d6:98:97:cd:d2:a9:b5:84:0f:af:2f:ce:
         ba:30:51:d7:0d:7b:22:85:73:2a:eb:e7:6e:41:ba:db:43:c9:
         e5:2e:32:49:9d:9a:de:fa:97:39:58:7b:3b:73:23:cb:49:53:
         b5:22:85:8c:83:17:0c:f7:d6:f4:ad:95:3b:ef:72:67:76:d1:
         b1:0c:28:d5:18:89:d6:6a:39:91:c3:ce:4b:eb:d7:06:c9:6e:
         e6:f8:1d:b4:f8:96:91:e8:7e:5c:1b:c1:b4:75:95:84:4c:f3:
         ac:a9:32:57:12:86:06:dd:d5:aa:56:88:e3:19:13:bb:b7:dc:
         bd:6a:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:13:30 2024 by rpki-client on console-fra.rpki-client.org