Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/380e54e4-fa02-34d2-af80-9fb812670bf5.roa
File:                     380e54e4-fa02-34d2-af80-9fb812670bf5.roa (raw, json)
Hash identifier:          iLxIEyQKYJYlazbgjvqOaTGNcH9ksHi83wCbNLuHIww=
Subject key identifier:   1D:87:56:D7:13:71:04:3C:E8:DA:76:B0:3F:09:E1:48:C1:30:C6:6B
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F4328584525404604DA5803C0A56ED080
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/380e54e4-fa02-34d2-af80-9fb812670bf5.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     400587
IP address blocks:        23.145.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:46:04:da:58:03:c0:a5:6e:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=ce5dbf5a-aa45-427d-b8ff-efe87314b111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:cb:ff:ef:40:76:40:1c:c9:a9:02:c6:1b:
                    af:bc:07:67:6b:b3:59:1e:ee:53:9c:81:ba:04:ea:
                    31:a2:3f:94:aa:fc:96:4b:3d:dc:2b:77:9f:d3:4d:
                    fa:68:ff:e6:1c:f8:00:49:95:f6:d1:b4:14:36:97:
                    cd:4a:70:5e:44:d9:ae:cf:84:ae:c6:0f:35:e3:da:
                    f7:c1:96:a2:32:1c:af:f1:a9:f1:e7:08:23:8f:b4:
                    52:cd:1c:9a:42:34:5b:e6:e6:93:60:cc:b7:30:55:
                    d6:27:84:bf:54:05:49:e3:54:e8:03:3d:93:fc:ff:
                    e2:0e:70:db:ab:07:a4:20:ed:29:37:4c:c1:c0:f0:
                    97:76:86:87:ca:0c:17:a9:1e:a8:35:fa:be:fb:ab:
                    d8:71:24:cb:73:49:82:0c:48:a0:61:e8:4b:4d:86:
                    94:c0:bd:4f:fe:bb:ea:85:22:ce:c0:b7:fb:a3:ac:
                    a1:62:e9:6e:c7:80:46:95:a5:3e:67:19:72:96:81:
                    54:a5:c8:85:27:45:91:f8:ee:67:2a:6d:91:f6:db:
                    da:f4:70:6d:67:85:1b:d6:1f:36:89:30:97:ec:56:
                    ba:83:27:52:d7:0d:24:e8:53:63:8d:62:46:2c:f2:
                    d4:83:1f:63:fe:de:9f:1c:81:5b:2d:88:ce:bd:6f:
                    03:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:87:56:D7:13:71:04:3C:E8:DA:76:B0:3F:09:E1:48:C1:30:C6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/380e54e4-fa02-34d2-af80-9fb812670bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:93:28:61:34:ad:c0:d1:77:f6:16:ae:8f:7b:eb:4c:76:84:
         89:af:07:ed:c3:78:e2:4e:36:21:9d:df:2e:62:43:2c:db:d5:
         11:ba:d9:e7:26:ab:15:1d:46:4e:78:a8:69:5a:37:68:43:2b:
         34:cb:c0:86:4b:50:e1:e1:e7:a6:10:01:72:54:b6:47:3e:ec:
         b4:2e:f3:52:31:55:04:db:d0:1d:56:83:a5:46:ec:e5:a1:a2:
         0b:15:dc:a0:c9:9e:4b:1e:98:53:e4:dc:c8:8c:b3:13:56:11:
         01:50:d1:e0:67:63:4f:0d:48:00:e5:66:c8:f9:c2:d1:cb:6c:
         ca:5e:a1:e2:61:45:df:7f:80:cb:90:02:f7:b0:d8:df:f1:00:
         4c:7a:39:ec:c0:f2:2e:91:7a:44:15:16:07:c4:9f:88:a8:94:
         be:96:50:62:2b:21:7c:91:8e:b3:27:64:2c:1d:44:0c:93:66:
         fd:a1:9c:b2:da:2d:43:5d:b7:1c:4b:b7:fa:7f:a4:60:2c:c6:
         e2:26:26:ca:cc:9b:a6:4e:f4:82:1e:e0:06:89:3a:60:56:a5:
         d1:4c:60:b4:6f:48:3a:6c:e3:3d:75:af:97:06:b9:2a:df:bb:
         71:b7:29:da:14:50:ce:c6:b9:4c:21:21:08:4d:39:35:54:57:
         58:f4:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:13:08 2024 by rpki-client on console-ams.rpki-client.org