Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/8d43b2cf-7f69-3e6e-bd60-ad0d1b133edd.roa
File:                     8d43b2cf-7f69-3e6e-bd60-ad0d1b133edd.roa (raw, json)
Hash identifier:          0AI+PcuWMQD5pW4W3wZWdFo38cX4i80qRp43ydc0dZQ=
Subject key identifier:   74:D1:2A:EF:AF:14:A2:50:07:04:40:2C:17:11:3C:F4:40:34:75:C6
Certificate issuer:       /CN=824422dc-901f-4174-bf27-6d89e9fed2e8
Certificate serial:       010D0C9F43285844FB600274ED94F3DFE6671580
Authority key identifier: E3:7D:A5:47:1F:8C:C2:E2:05:FE:A9:D2:7A:DC:62:40:69:84:76:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/8d43b2cf-7f69-3e6e-bd60-ad0d1b133edd.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     11635
IP address blocks:        161.199.18.0/24 maxlen: 24
                          134.195.48.0/22 maxlen: 24
                          23.128.224.0/24 maxlen: 24
                          2604:c4c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/824422dc-901f-4174-bf27-6d89e9fed2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/824422dc-901f-4174-bf27-6d89e9fed2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:02:74:ed:94:f3:df:e6:67:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824422dc-901f-4174-bf27-6d89e9fed2e8
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=a05dc6fb-98f8-4f0c-b8d2-83ae383d757c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:43:6f:b1:6b:21:98:7a:9e:27:6e:23:a4:
                    f9:42:9b:fa:3c:9a:3d:68:62:6e:d7:a2:0e:24:6d:
                    71:6a:6c:64:22:f1:e6:e7:d6:d4:db:6a:a4:ed:52:
                    c4:92:55:2e:81:bb:72:c8:aa:9a:50:81:e1:99:9d:
                    62:de:14:0a:47:87:44:45:88:8e:fe:fd:6c:15:5c:
                    fb:df:a6:42:2f:73:92:fc:99:0e:f1:0f:64:71:2c:
                    cf:b7:05:5f:52:83:94:a9:42:54:ac:85:98:1a:e2:
                    88:1f:64:b7:2a:3e:89:db:d1:da:b0:7d:81:f1:46:
                    04:07:5a:cb:fd:8e:7d:ad:2c:5b:e9:d7:be:8b:1d:
                    1e:27:c6:ca:1b:77:13:2e:6e:f5:02:80:93:32:1c:
                    82:e8:07:f0:5f:7b:24:f8:17:d0:fd:fa:47:61:19:
                    6f:49:23:f7:21:e7:f0:2e:b6:26:6e:d3:f6:f4:a7:
                    0f:e5:50:8c:6b:4c:81:25:75:20:81:02:a2:58:d7:
                    73:b5:53:11:43:c3:a5:a0:fc:1d:b1:35:07:89:3e:
                    f1:ba:93:90:28:77:9c:2b:b3:61:0c:98:af:b6:bc:
                    0a:a0:d0:73:2b:d9:7b:b4:1d:bb:6d:2a:5e:93:55:
                    9c:96:ad:37:e5:d3:80:c6:c0:0b:be:e6:6b:89:09:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:2A:EF:AF:14:A2:50:07:04:40:2C:17:11:3C:F4:40:34:75:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/8d43b2cf-7f69-3e6e-bd60-ad0d1b133edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8/824422dc-901f-4174-bf27-6d89e9fed2e8.crl

            X509v3 Authority Key Identifier:
                keyid:E3:7D:A5:47:1F:8C:C2:E2:05:FE:A9:D2:7A:DC:62:40:69:84:76:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/824422dc-901f-4174-bf27-6d89e9fed2e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.224.0/24
                  134.195.48.0/22
                  161.199.18.0/24
                IPv6:
                  2604:c4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:db:8f:22:e1:76:7f:8e:ff:f7:6e:f1:6b:f3:8a:08:79:75:
         98:54:d4:9e:48:07:14:76:91:d8:6d:6b:91:98:6b:05:77:be:
         5f:c7:ad:33:b5:e3:54:db:d6:b6:8c:cf:b2:53:1d:ba:0f:f5:
         fc:1a:63:bb:5e:ca:93:cf:f5:04:de:55:14:bf:b0:d1:c3:c9:
         42:26:3d:27:6f:87:d5:1e:a3:89:fb:b9:fd:db:05:4d:fa:42:
         36:ed:c4:85:3f:70:4c:b4:da:1a:19:ca:28:ff:7a:38:c1:a3:
         23:11:72:0e:17:ee:95:4c:55:ce:c9:ff:d2:7a:9a:a4:7b:d6:
         53:eb:ec:58:6e:b5:4b:ba:25:69:b0:ee:ba:82:ea:c0:03:f2:
         59:6f:bf:0f:dc:40:35:77:ea:93:88:ec:e7:0d:cb:69:78:e0:
         3f:2e:e2:d2:32:65:73:fb:e5:b4:74:14:d2:02:17:9f:eb:71:
         bb:db:39:31:fb:5d:a2:4c:9f:77:24:6d:13:0a:c0:43:68:24:
         01:25:a4:b7:f9:f8:e7:1c:15:1b:73:00:dd:02:30:dc:30:0d:
         94:26:47:44:94:cc:bd:d7:7a:40:01:9f:40:94:44:ef:c2:92:
         18:ff:a6:9b:c9:53:d4:c1:c2:8c:76:f6:ff:b7:78:8a:ff:90:
         b5:b8:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:37:45 2024 by rpki-client on console-fra.rpki-client.org