Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa
File:                     284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa (raw, json)
Hash identifier:          Ummyz4fEab6kdoAnfbUIoX8cGLxEc3hTx2oCBzHauCQ=
Subject key identifier:   7A:51:19:EC:F8:E1:F5:A3:57:30:BC:0A:4F:D1:B9:00:F9:1E:2E:A1
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584563F30DE9D98DBD1F967F4080
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     22188
IP address blocks:        23.134.96.0/23 maxlen: 24
                          2604:bc40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:0d:e9:d9:8d:bd:1f:96:7f:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=f45159f0-8094-4fbb-b807-cf83cda4eb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:95:d4:6d:fd:4e:f4:22:4e:bd:92:2a:6a:78:
                    f3:42:4d:4f:85:79:8d:5b:26:66:87:92:8a:44:91:
                    1f:23:36:f4:16:a7:06:03:aa:f3:b2:e2:39:04:0e:
                    54:df:6d:f8:91:47:37:95:72:03:70:b3:a9:ba:21:
                    98:5f:8e:40:9d:e3:8a:e9:18:90:fa:56:08:56:6d:
                    75:88:58:1b:f4:ae:97:69:80:c2:6a:44:21:60:03:
                    bc:60:d7:e8:8c:d4:17:e4:41:24:b5:ca:cd:ba:a8:
                    30:11:de:82:e2:61:e2:63:89:0a:ca:95:a8:71:db:
                    5f:db:bb:40:12:fc:83:d1:ba:b0:ba:84:49:77:ae:
                    54:29:0f:5d:bb:74:16:c0:17:6a:99:e7:f4:bf:31:
                    42:43:9a:1c:98:77:e4:d4:50:07:f7:50:02:8a:21:
                    03:c6:5d:e5:fb:75:8a:64:0c:ba:de:78:ff:53:c9:
                    0b:e0:95:6c:ff:4d:9d:a3:51:8a:8d:64:fc:10:24:
                    cf:50:10:2d:ba:02:b8:7f:f8:c5:35:aa:a9:13:9a:
                    41:07:b0:13:16:18:13:ab:f4:e9:e7:5d:33:93:7a:
                    2f:67:0d:df:3f:87:5a:3a:1e:af:e7:9c:39:c6:34:
                    1d:1c:42:56:8e:b6:e3:74:2e:52:2c:97:da:f3:bf:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:51:19:EC:F8:E1:F5:A3:57:30:BC:0A:4F:D1:B9:00:F9:1E:2E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/284ab122-ae5b-30a1-b0cf-1e04886c15f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.96.0/23
                IPv6:
                  2604:bc40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:71:d7:cf:6b:3b:11:9d:8d:44:92:4b:07:45:b0:75:72:9c:
         e5:6e:8f:b3:03:a2:35:f5:55:6b:33:5c:61:67:4a:bb:31:46:
         6e:4a:45:7a:f0:55:b4:bc:7b:c7:32:c2:0e:e1:ad:76:76:b9:
         df:89:fc:57:8e:bf:ca:c8:61:80:84:8e:da:93:8b:8d:4c:34:
         a7:ec:a8:7e:c7:cb:38:fd:a1:9a:09:df:72:59:bf:ae:da:40:
         e5:b4:09:13:7e:ea:3c:ce:a8:6e:10:4b:f4:9d:de:e0:97:76:
         0b:a5:5b:90:99:11:ac:20:36:8f:99:ac:06:44:f6:68:da:3c:
         3b:c2:06:bd:1a:eb:0b:f9:be:f5:8f:60:58:b3:91:84:3a:c5:
         66:5b:2b:43:db:3c:8b:8a:65:ff:99:36:b5:66:8b:0e:15:48:
         81:81:b1:a6:73:af:f2:72:62:cd:77:63:5d:67:34:1d:cb:7d:
         91:49:fc:65:8c:8e:b2:15:55:35:2c:56:74:b5:fb:51:67:71:
         5a:a9:d5:2d:d6:a4:b2:1e:11:1f:38:3d:bc:4a:b7:8b:bf:41:
         39:51:85:15:78:bc:cd:4f:60:dc:23:3f:a3:e9:0e:75:b5:0b:
         45:b2:92:84:55:91:e9:8a:6d:7e:ec:f3:fa:52:9b:74:95:41:
         4f:4e:a5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:10:51 2024 by rpki-client on console-ams.rpki-client.org