Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6d74ca8f-5abd-3703-8fab-eb3ed9a376bf.roa
File:                     6d74ca8f-5abd-3703-8fab-eb3ed9a376bf.roa (raw, json)
Hash identifier:          IRV+/uy/4tPTiI91ldvEne78aw1LtcP26hNJ8fmStLM=
Subject key identifier:   36:D9:03:F4:78:AC:32:61:61:7A:82:E5:6B:EE:D5:E5:D5:82:DB:27
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584500F564A30F512014A98A49F1
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6d74ca8f-5abd-3703-8fab-eb3ed9a376bf.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     26421
IP address blocks:        209.234.216.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:64:a3:0f:51:20:14:a9:8a:49:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=7a63ff2f-bbb7-409f-be14-3cd03cbfaceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:61:1b:7d:f5:c2:4d:46:56:7f:ae:fb:f1:
                    e3:fd:e5:34:df:3d:5c:9e:e1:de:b8:6a:45:ea:3f:
                    18:ee:78:44:1a:2f:d7:3c:6d:81:ed:64:3c:3f:31:
                    37:f6:36:8b:ae:64:52:34:87:9c:82:50:8a:c6:9e:
                    b0:54:e0:ce:70:04:7d:71:cf:dc:dc:78:b0:41:11:
                    9b:2e:5f:6e:7d:5f:83:16:dc:87:28:f5:1c:b4:19:
                    ec:6a:17:c7:eb:59:af:d2:48:13:82:6e:22:be:31:
                    c2:86:32:b4:c4:9a:ff:d6:e9:92:c4:9d:d4:1e:3c:
                    5d:ec:34:54:5a:9f:5f:16:8e:10:cf:30:e3:42:88:
                    0f:a9:61:05:d7:ce:a6:57:aa:ff:dd:46:f4:1c:ae:
                    47:38:cf:2a:40:07:b8:fe:ff:71:3e:c3:04:b7:52:
                    80:93:85:a0:1b:0a:29:4c:c1:fb:9b:0e:58:5e:e5:
                    46:f5:30:3a:7b:8a:8b:20:01:24:2c:0c:31:9f:6d:
                    32:78:e7:bb:e4:b5:71:48:02:67:b5:f0:da:47:57:
                    9d:cf:d9:0a:54:9f:ae:97:b9:13:7d:bc:4c:c0:49:
                    05:bf:44:1d:94:e2:2d:e9:fe:cd:1d:a6:be:c0:a7:
                    11:13:53:eb:31:b5:e0:17:a8:f4:86:c2:75:ee:ef:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D9:03:F4:78:AC:32:61:61:7A:82:E5:6B:EE:D5:E5:D5:82:DB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6d74ca8f-5abd-3703-8fab-eb3ed9a376bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.234.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:82:fe:c4:50:ed:e5:ef:7e:2d:4b:9c:f2:49:d4:54:dd:92:
         c3:cd:0b:08:2b:d4:e3:77:ab:f6:97:1d:8e:36:85:75:0a:8d:
         32:df:67:a3:86:c7:ef:4d:9e:94:df:5f:d5:13:b4:66:c5:35:
         78:1d:26:95:35:39:75:ae:8e:3b:ce:85:2a:4c:f4:51:48:b2:
         28:1e:17:9c:c7:bd:f7:62:9b:51:66:02:8d:0e:9a:7d:1f:a5:
         18:a7:8a:0f:a5:eb:cd:1a:fe:f2:e3:7d:d4:78:91:6b:57:ea:
         00:c3:a8:46:f6:99:a2:3f:b5:b8:9f:c9:ab:77:74:1e:0f:d5:
         d7:d1:62:c6:29:65:dd:37:04:48:71:78:03:a6:3a:b9:be:38:
         5a:ff:45:6d:59:51:8d:17:46:27:13:cf:d2:94:38:8c:9f:75:
         d1:45:93:b5:be:68:20:3c:83:2a:78:56:84:61:5e:1a:a0:8f:
         c8:88:4c:e6:12:3d:94:d8:46:03:29:1c:fb:17:3a:44:b4:d0:
         00:43:d5:36:c6:f1:97:8f:da:e5:27:2d:8f:9d:74:e0:6e:a7:
         4a:8b:b0:fe:99:92:1e:19:80:43:25:2b:cb:b8:62:1e:ae:89:
         2a:52:37:9d:64:43:de:32:52:73:af:d3:0f:2b:bc:42:82:0c:
         b6:d3:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:41:27 2024 by rpki-client on console-fra.rpki-client.org