Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/f6acc70e-c734-33fd-b763-a2d285f343fe.roa
File:                     f6acc70e-c734-33fd-b763-a2d285f343fe.roa (raw, json)
Hash identifier:          bQwLqSJl2rozqzd3pDbO2QToTHYDUpu9JYAyPjmHZCY=
Subject key identifier:   E4:9B:EB:46:C0:F2:D3:B8:21:59:14:A9:BD:C4:E2:8B:6E:A9:4D:97
Certificate issuer:       /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial:       010D0C9F432858464A445837A15624333FF89B00
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/f6acc70e-c734-33fd-b763-a2d285f343fe.roa
Signing time:             Sat 22 Jun 2024 01:00:24 +0000
ROA not before:           Sat 22 Jun 2024 01:00:24 +0000
ROA not after:            Fri 20 Sep 2024 01:00:24 +0000
asID:                     11831
IP address blocks:        23.111.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4a:44:58:37:a1:56:24:33:3f:f8:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
        Validity
            Not Before: Jun 22 01:00:24 2024 GMT
            Not After : Sep 20 01:00:24 2024 GMT
        Subject: CN=634a7de1-d184-431a-9b2e-c48cb2bf219e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1e:8e:05:ef:37:ce:a7:20:15:43:d8:d8:39:
                    73:2b:74:07:ab:11:05:be:97:b7:1b:9b:33:67:80:
                    52:0b:be:5d:2e:49:b9:91:c6:a9:18:18:a3:7e:c6:
                    ee:22:1c:c9:77:07:a2:98:33:8a:ed:07:c1:1d:85:
                    76:43:b4:a9:34:3d:c0:89:dd:fc:c3:77:73:9d:84:
                    e3:34:59:a6:49:77:fc:88:30:27:a8:ad:51:bd:df:
                    18:b5:32:00:36:17:e3:f6:ab:ac:e1:cf:37:b4:19:
                    f1:f2:33:56:3c:50:f2:c8:32:72:14:85:01:0c:c6:
                    53:71:92:74:0e:a4:ec:b2:ff:91:23:db:3b:d0:79:
                    0b:df:4c:41:fd:80:b8:03:21:fd:4a:23:af:a7:d9:
                    36:f5:41:52:2e:2f:0f:49:bc:c8:65:f0:08:92:e6:
                    18:2a:8c:87:62:26:4d:4d:33:df:fa:22:29:66:2a:
                    02:d2:cb:3d:23:81:f6:77:0b:a5:08:ea:ae:f2:2b:
                    af:09:1b:1a:0b:f4:69:85:39:22:97:e9:1e:08:b1:
                    ba:f2:55:b3:ed:79:74:1f:89:ea:0e:72:05:eb:14:
                    0a:57:8f:86:16:be:b7:49:a5:e0:5b:1d:9a:45:81:
                    5f:f3:b8:ee:eb:82:d9:22:9b:60:0d:2e:94:17:78:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9B:EB:46:C0:F2:D3:B8:21:59:14:A9:BD:C4:E2:8B:6E:A9:4D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/f6acc70e-c734-33fd-b763-a2d285f343fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl

            X509v3 Authority Key Identifier:
                keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.111.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:8f:e8:af:50:81:06:05:89:aa:f5:2c:52:fc:ec:83:ae:
         0d:84:83:bc:58:59:9b:64:8b:be:9a:6b:f6:db:ed:07:23:a4:
         3e:d7:21:5a:92:f0:17:09:fe:92:e7:f7:ef:43:1c:7f:e3:b2:
         95:1a:5e:5e:36:c6:f5:f0:f5:cd:9e:8b:d8:53:c2:dc:fe:b7:
         ba:fc:2b:59:dd:49:94:2f:68:0d:34:21:0e:03:b9:37:05:4f:
         c2:fb:a7:f1:b2:27:19:99:7a:3f:f8:63:7b:4b:50:28:a9:f6:
         1d:43:e7:6f:0f:34:0c:f7:70:1d:b3:d5:47:00:80:f6:fd:cb:
         68:db:54:28:bf:03:e1:f6:c3:78:60:78:2d:7f:2f:a5:4c:7c:
         68:8b:59:f2:e6:10:37:cb:f6:f0:b7:88:4a:83:c8:84:b3:67:
         0f:05:90:fa:35:c5:4f:ed:57:2d:77:82:be:db:f6:b2:7b:23:
         d3:14:da:a7:9e:81:49:c4:e2:52:bd:38:f0:7c:49:2d:03:71:
         37:03:bc:e5:92:94:a6:8e:10:2a:5e:7f:9d:1e:ce:42:2b:42:
         a9:e2:69:20:c2:a8:8b:de:1d:fe:f2:fb:0e:a5:01:1b:16:35:
         33:1a:7f:ba:bd:da:66:1f:c3:22:a1:c1:03:37:4c:2f:cc:7d:
         08:12:b4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:11:23 2024 by rpki-client on console-fra.rpki-client.org