Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/b76bb5c3-1808-362a-b768-0fb52162da41.roa
File:                     b76bb5c3-1808-362a-b768-0fb52162da41.roa (raw, json)
Hash identifier:          bbKEtk0R+lBOAj4OxS0K4yQfBCkFDV+atPVK0SB6Tlg=
Subject key identifier:   2D:4D:AB:76:FD:ED:D1:B0:1C:A2:51:65:DF:BC:9E:DB:DA:F0:18:13
Certificate issuer:       /CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
Certificate serial:       010D0C9F432858457D132CB0A4A397617F76E040
Authority key identifier: 46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/b76bb5c3-1808-362a-b768-0fb52162da41.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     397095
IP address blocks:        23.153.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2c:b0:a4:a3:97:61:7f:76:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=4cdec535-2cda-4430-a190-c5960fbcb53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:83:d2:02:98:af:18:93:31:d8:83:3a:49:
                    ad:31:f3:25:e5:17:43:22:db:1b:21:77:60:92:ad:
                    66:8e:4b:c7:3a:9c:b5:b2:c6:83:8e:d6:8d:76:74:
                    ee:72:45:a9:26:82:08:04:74:6e:da:a6:33:33:28:
                    e9:c7:b2:b4:53:5d:11:2e:76:3b:f6:1e:8b:43:c6:
                    fb:1b:d2:22:3b:05:46:c4:33:d2:30:50:d1:e5:56:
                    a5:e1:dc:a8:61:29:bd:a1:24:8d:c6:6c:e9:7c:29:
                    af:40:74:c7:21:8d:44:60:fa:dc:60:9c:46:e2:86:
                    80:4f:15:cc:ce:6d:55:2c:8c:7a:37:ed:b0:46:0e:
                    32:7d:0d:fd:56:c7:aa:e3:49:66:b6:ed:2d:f2:e0:
                    cf:ac:b9:13:90:99:5f:de:9f:59:56:92:80:1c:0f:
                    d0:ff:02:a2:65:da:26:17:77:4c:1f:55:86:a8:48:
                    fd:a9:b7:be:a4:f0:3a:c3:34:0e:0d:d2:56:c3:71:
                    d6:13:cf:e4:76:63:80:9f:0e:7c:94:a2:66:d1:dd:
                    cc:68:81:cb:06:78:66:f5:e6:f5:20:e2:83:a3:20:
                    bc:76:4e:22:19:6a:04:75:b2:e3:fe:33:64:8d:f1:
                    fc:ae:84:0f:0c:74:c3:c4:e4:05:00:42:fe:c6:27:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4D:AB:76:FD:ED:D1:B0:1C:A2:51:65:DF:BC:9E:DB:DA:F0:18:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/b76bb5c3-1808-362a-b768-0fb52162da41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl

            X509v3 Authority Key Identifier:
                keyid:46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:be:87:ed:47:03:42:4e:0b:a9:d2:c5:99:90:c2:a9:cc:d3:
         0b:33:0f:b4:5a:0d:11:2f:6d:fe:3f:61:42:40:37:1b:72:6d:
         cb:3e:14:f1:b0:ef:c3:9d:a7:d0:01:be:45:58:13:cc:26:19:
         5d:37:88:5b:1b:42:0c:df:bb:7a:81:1f:8d:b4:a2:f9:46:61:
         e4:50:ac:1e:85:cb:9a:fc:c2:dd:20:bb:ae:7e:9c:e7:c0:98:
         cb:da:43:58:f4:61:7b:c1:34:e9:f0:57:fe:cd:62:f0:13:ae:
         b8:78:c9:97:e7:2b:49:09:4f:ca:d2:22:32:a1:d1:09:65:d9:
         61:eb:36:21:47:31:87:aa:37:00:ae:65:33:ed:4d:76:ff:49:
         aa:88:67:fd:ce:8f:d6:30:4e:db:c3:d9:1d:87:64:de:26:77:
         66:91:89:8a:07:19:ff:27:3e:c4:32:c5:7e:c2:83:26:04:7d:
         8e:c3:32:64:b9:1d:05:30:56:e5:6e:ff:f0:81:98:c8:f3:6c:
         32:2e:a7:8a:b8:b4:df:b2:c0:83:5a:dc:ea:39:86:80:43:7a:
         92:17:8f:ea:51:8e:9b:2d:1e:41:02:5c:09:4b:a4:d3:fc:94:
         88:33:e7:d7:75:52:18:9a:49:3a:bd:9a:30:e8:3b:4c:bc:7e:
         2d:a5:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:04 2024 by rpki-client on console-ams.rpki-client.org