Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa
File:                     1591f74c-28e6-3beb-a060-29508edef5ad.roa (raw, json)
Hash identifier:          +y1FoJxxSoIXqv62VJz7AOl0kSue9TJbslPNPjjy4pA=
Subject key identifier:   8A:24:F9:50:38:15:EC:41:6B:FC:0C:47:E3:80:53:29:9B:42:7F:62
Certificate issuer:       /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial:       010D0C9F4328584532305AC5325EE50079414900
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa
Signing time:             Wed 13 Mar 2024 17:13:55 +0000
ROA not before:           Wed 13 Mar 2024 17:13:55 +0000
ROA not after:            Tue 11 Jun 2024 17:13:55 +0000
asID:                     397423
IP address blocks:        23.173.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:32:30:5a:c5:32:5e:e5:00:79:41:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Validity
            Not Before: Mar 13 17:13:55 2024 GMT
            Not After : Jun 11 17:13:55 2024 GMT
        Subject: CN=f8dbd981-31cd-4470-a927-ad6a1e5ff66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:38:11:db:5b:13:1f:b5:96:39:72:9a:99:
                    dd:c3:b1:ef:b2:9a:b9:0e:d7:94:a6:f1:f0:06:3d:
                    55:a5:70:6d:8c:d7:f9:e5:dd:68:c3:14:32:63:d6:
                    2d:76:3a:27:10:c2:2c:96:13:63:c5:a5:4c:fb:70:
                    15:a7:f2:d7:af:69:8a:27:0c:08:6e:31:59:3e:6c:
                    c1:8b:07:65:84:60:0a:34:37:e7:14:95:fa:cd:e7:
                    e9:c5:63:0d:fb:0c:a7:4e:cb:38:96:c0:20:8e:1c:
                    11:02:5d:92:7a:4e:97:75:f7:57:ec:20:29:4d:d7:
                    58:d4:95:78:d8:15:9a:7e:44:44:c9:10:98:2d:d9:
                    93:46:c9:d0:40:69:73:0c:53:01:18:be:ea:3b:b2:
                    0f:72:b8:f0:d4:3c:35:99:7e:0d:46:8b:4d:6c:97:
                    37:69:3a:b0:fe:c6:b7:2d:df:66:5a:e4:3c:16:c7:
                    2c:3f:d3:9e:26:dc:fc:2f:b1:b8:27:29:d2:55:2b:
                    af:bd:e9:ff:45:c5:0e:dd:6c:00:59:2e:3d:6a:28:
                    d3:19:a4:07:0b:c2:b6:ee:2e:40:94:c9:7c:e4:29:
                    96:2f:a0:c1:70:98:4f:8f:d6:de:6f:a0:85:f8:5e:
                    24:a0:58:02:c2:7c:cb:07:91:32:89:25:b0:9a:ef:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:F9:50:38:15:EC:41:6B:FC:0C:47:E3:80:53:29:9B:42:7F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/1591f74c-28e6-3beb-a060-29508edef5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl

            X509v3 Authority Key Identifier:
                keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d5:89:36:e7:e3:6a:93:5f:3a:0c:d6:27:8a:28:4d:12:aa:
         a9:9d:c2:dc:0c:ee:f2:80:e5:54:52:c2:fe:12:c8:6d:ac:21:
         d3:ff:ed:7a:c3:33:04:a4:f0:00:33:5a:ae:ae:17:64:36:61:
         5d:a3:e0:15:d1:22:eb:12:39:df:8e:b5:9e:2a:2d:78:74:70:
         d4:37:af:24:b1:0f:1a:38:a4:d7:db:e6:83:9c:3a:a1:75:95:
         95:b3:88:74:16:35:59:8d:0d:af:19:ff:1e:b2:7b:d3:af:f9:
         33:ad:b3:5e:01:d3:0a:82:46:af:44:1d:ac:66:88:44:53:ff:
         40:42:a9:a3:c3:7c:f8:e4:ce:36:01:5d:d1:1f:bf:ca:09:02:
         7d:ea:9b:34:10:d4:f1:14:a2:cf:40:b1:37:5e:ae:7a:c0:c9:
         a6:86:aa:93:ef:24:04:69:cc:2e:d6:54:c2:a1:5c:e5:38:47:
         55:49:7c:0d:73:49:82:17:7a:53:21:61:61:3a:bc:b1:a9:32:
         a7:2b:70:f4:7c:66:d3:ad:e0:26:6e:6c:b9:79:82:e8:50:3e:
         2f:2b:41:e1:a2:d6:fe:f7:d5:3d:6d:0c:5d:e9:6e:f9:f3:8a:
         0e:8a:1a:b6:7b:cf:8e:2f:c9:0b:9c:1a:c1:93:21:3c:43:22:
         f2:a2:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:31 2024 by rpki-client on console-ams.rpki-client.org