Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1470f452-067d-3623-a28e-75a87cb5b5fd.roa
File:                     1470f452-067d-3623-a28e-75a87cb5b5fd.roa (raw, json)
Hash identifier:          ZdMw5cl/f6vhxCE/dwDz2AK4LS8dCi6Wy9ksGM41QcE=
Subject key identifier:   CA:E5:CB:3D:21:0B:35:C5:5F:9F:79:0F:88:AD:6E:C5:FC:78:27:49
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285845840DBF5609FC1D1313AECE00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1470f452-067d-3623-a28e-75a87cb5b5fd.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     40139
IP address blocks:        69.44.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:bf:56:09:fc:1d:13:13:ae:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=03373e25-289d-46ba-8357-4677456b99ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bd:b7:74:ce:04:33:89:37:a5:c5:03:3c:f5:
                    68:b0:82:be:71:d8:03:d4:5f:5e:bf:90:0a:2a:f1:
                    84:bc:75:2b:13:8c:05:17:fb:0a:f0:4e:73:2b:f0:
                    8c:7e:42:f0:98:90:e5:c5:6d:d9:6e:b7:e1:37:e0:
                    a3:db:a1:31:59:fc:81:aa:7a:da:58:58:86:52:f4:
                    97:49:e2:21:f4:5c:c4:b6:f5:a4:ed:31:45:f3:fb:
                    34:b7:c5:99:11:66:33:e3:ed:37:57:32:bb:bc:80:
                    d7:52:f5:e0:d9:a5:ff:d3:1d:30:4c:9f:af:bb:f6:
                    ef:57:dc:da:32:25:7f:a2:55:c2:a1:e2:fc:50:c5:
                    2b:7e:24:a4:c1:06:fe:68:da:6e:06:00:38:5e:f9:
                    49:00:26:1c:17:34:be:35:34:18:5d:8d:fe:55:65:
                    c5:cd:9c:36:d4:dc:40:65:f8:1d:ac:97:4d:6a:f9:
                    df:b7:78:22:b5:7d:33:f5:0c:25:be:cc:08:2b:9c:
                    47:80:2b:44:4c:1a:63:91:57:2e:71:58:6b:a2:49:
                    0a:e6:90:36:fd:d3:46:71:da:8e:8c:45:02:87:44:
                    ed:9f:1c:8f:87:e6:30:93:69:21:97:9f:47:66:26:
                    67:4a:e9:b1:4e:f1:c3:8c:6a:65:c3:5b:5b:5a:ba:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E5:CB:3D:21:0B:35:C5:5F:9F:79:0F:88:AD:6E:C5:FC:78:27:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1470f452-067d-3623-a28e-75a87cb5b5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.44.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:f5:25:d5:48:c7:f8:e4:20:71:14:21:bc:60:99:64:5b:
         33:da:82:96:8f:2f:14:8f:68:b9:55:e8:1a:e8:35:19:88:99:
         7d:0d:06:54:2f:03:9a:f3:77:2f:da:41:4d:0b:ec:41:00:b1:
         50:4b:ac:90:75:68:d3:a8:ab:c3:a9:46:a9:e6:52:54:36:41:
         7a:c9:9c:12:0f:a0:c3:61:19:e7:81:84:49:45:0f:44:85:71:
         24:47:85:52:b9:65:4a:54:cc:70:bc:68:1b:9e:89:67:92:9c:
         08:76:11:b3:7a:d3:bc:41:a2:4b:7f:a8:17:4e:57:e0:a2:82:
         1a:f7:e5:44:33:bd:59:35:47:a1:59:24:9f:63:69:33:de:50:
         01:f6:ce:fd:50:f1:cd:6b:e5:5b:0f:b4:f7:15:02:2c:f4:71:
         67:14:2f:6c:14:59:01:f3:c9:f8:5e:4d:39:89:6c:95:7c:b3:
         73:95:1f:e8:8c:f9:90:55:21:97:7c:c5:ae:ce:73:70:dc:e3:
         0c:23:22:8d:2a:90:76:a6:0a:69:0b:07:6c:b4:b6:fe:7c:f4:
         42:57:a1:b2:cb:b4:42:4a:ff:a5:ab:90:1c:72:db:b6:71:ff:
         dd:5f:7a:a5:d1:bf:99:87:4d:e9:d7:37:db:ea:32:24:b0:17:
         e1:e3:0c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:41:27 2024 by rpki-client on console-fra.rpki-client.org