Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/f338e865-bea7-3bab-9ea2-2469041b2ed1.roa
File:                     f338e865-bea7-3bab-9ea2-2469041b2ed1.roa (raw, json)
Hash identifier:          Mm1qDii5wW+5ZqvQQTA53cbCDtIvajC8Yceq4yEQDSc=
Subject key identifier:   F2:83:5A:DB:4A:26:C5:4F:0E:33:3A:36:E1:0F:1C:67:AA:8D:CF:2C
Certificate issuer:       /CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
Certificate serial:       010D0C9F432858420DAD827305769CAD3EBDEF80
Authority key identifier: BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/f338e865-bea7-3bab-9ea2-2469041b2ed1.roa
Signing time:             Tue 30 May 2023 13:00:19 +0000
ROA not before:           Tue 30 May 2023 13:00:19 +0000
ROA not after:            Mon 28 Aug 2023 13:00:19 +0000
asID:                     399568
IP address blocks:        23.181.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 May 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0d:ad:82:73:05:76:9c:ad:3e:bd:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
        Validity
            Not Before: May 30 13:00:19 2023 GMT
            Not After : Aug 28 13:00:19 2023 GMT
        Subject: CN=e445e0f5-db03-4f27-822c-a3018a97d6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:46:3a:ec:7f:2c:78:78:a9:ca:a0:cf:c8:
                    30:2b:b7:10:a1:a0:04:73:c9:05:06:f0:be:6b:1a:
                    0d:3f:28:ee:21:5c:c4:2b:a4:b0:a0:1e:df:52:77:
                    3d:ea:be:c6:60:6e:be:3e:82:d3:40:41:64:9e:92:
                    de:2f:44:25:53:5c:e3:33:d6:e8:de:3e:8e:bc:86:
                    77:72:dd:7c:98:b8:27:42:b6:62:a5:2f:1b:4a:02:
                    61:23:f8:55:da:e0:b1:22:6f:6b:7a:df:7d:ad:b1:
                    08:ab:2f:55:dd:20:63:b8:13:cc:16:2d:12:86:0c:
                    2c:a3:68:45:c0:53:dc:3e:d3:d8:44:ee:75:d5:04:
                    7e:58:ca:9d:70:eb:af:78:44:ce:a4:eb:46:ad:be:
                    c9:a0:a1:c2:83:1b:40:0f:03:e3:ed:88:a3:f3:80:
                    37:70:cd:1d:88:9b:cc:7b:f4:8e:9b:22:fa:0a:a5:
                    3f:21:60:51:38:b0:6a:a1:3c:ab:fb:7e:f0:ed:14:
                    2b:5b:c5:08:30:a1:5f:27:2b:10:a7:7c:c9:c1:c3:
                    e4:4a:06:1d:73:3a:49:28:30:f7:a3:81:1b:e1:dc:
                    94:1d:47:0b:6a:34:c6:f4:51:55:63:20:4d:8a:83:
                    73:e2:10:a1:47:7a:f8:b6:93:ec:32:a7:df:5c:99:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:83:5A:DB:4A:26:C5:4F:0E:33:3A:36:E1:0F:1C:67:AA:8D:CF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/f338e865-bea7-3bab-9ea2-2469041b2ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a8:f9:47:03:ef:6a:27:ac:5c:1d:25:06:98:0a:02:82:19:
         c2:68:b7:57:e2:84:e1:ed:71:f1:f9:0f:5a:6a:e8:a9:2b:c3:
         b0:53:d2:8c:36:00:78:aa:47:2f:48:8e:42:e7:ae:9a:68:79:
         3e:b4:dc:8b:b6:d9:4d:55:ae:d7:09:59:e5:82:ea:49:67:3b:
         68:69:79:81:27:33:b3:ef:45:27:37:82:a3:db:6d:63:cb:a2:
         61:07:01:ff:e6:d0:b0:16:f4:11:d8:e7:70:a4:17:02:0a:00:
         72:e1:e5:81:c3:60:3c:2a:a5:ba:90:7f:80:2d:91:92:61:8c:
         ec:09:30:67:e9:48:2f:c7:6f:d4:cf:de:d2:09:74:20:a7:12:
         cb:04:aa:d4:24:24:cb:22:18:b3:94:31:57:05:8d:41:dd:d4:
         f0:9e:14:e5:db:4a:87:67:c0:83:a1:64:7d:b4:af:1c:c4:83:
         74:7a:b3:15:d1:b0:84:6f:7c:d6:42:b4:a0:79:41:4a:47:cb:
         e6:b1:3b:bd:80:e0:74:17:ef:e0:1b:2b:0e:f7:74:eb:02:ae:
         bb:e8:f7:da:ad:74:93:9a:35:72:95:64:c8:65:b8:fe:17:24:
         83:7c:34:78:1f:8b:0d:63:6c:8e:1c:b4:ec:80:1e:9f:dd:f1:
         6a:0e:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 30 13:32:42 2023 by rpki-client on console-fra.rpki-client.org