Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/9674487c-1ddf-3e7a-8046-d83acc78b963.roa
File:                     9674487c-1ddf-3e7a-8046-d83acc78b963.roa (raw, json)
Hash identifier:          5UwKNMLrrnIW9u1uqJWaQ3QPzoiAdc2YxIP7eKhFrLw=
Subject key identifier:   61:75:73:5A:4F:13:BD:F3:26:F2:02:21:6B:7E:23:E7:EC:F3:BA:7C
Certificate issuer:       /CN=16a8300a-6b73-42c6-b812-6b49b6587a38
Certificate serial:       010D0C9F4328584543BA7E131DFC24E582724000
Authority key identifier: 99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/9674487c-1ddf-3e7a-8046-d83acc78b963.roa
Signing time:             Wed 20 Mar 2024 00:01:00 +0000
ROA not before:           Wed 20 Mar 2024 00:01:00 +0000
ROA not after:            Tue 18 Jun 2024 00:01:00 +0000
asID:                     22497
IP address blocks:        23.173.248.0/24 maxlen: 24
                          2602:f946::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:ba:7e:13:1d:fc:24:e5:82:72:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a8300a-6b73-42c6-b812-6b49b6587a38
        Validity
            Not Before: Mar 20 00:01:00 2024 GMT
            Not After : Jun 18 00:01:00 2024 GMT
        Subject: CN=7229ec6e-dfbd-4214-bcfa-5e3c92c6a0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:0d:6f:27:5e:e0:87:f8:a0:ea:45:5e:7a:
                    17:60:35:a6:fd:88:05:26:ac:01:b7:5e:37:83:d2:
                    6b:d5:2c:cc:d5:4a:82:40:42:ca:d3:3c:ee:11:b7:
                    ee:25:c4:c4:19:54:81:d8:10:58:f9:6d:9f:8d:1f:
                    f3:f7:5d:0a:9e:5f:76:ec:8e:52:3c:a5:1d:04:21:
                    8e:86:55:a4:16:4d:7b:85:fc:4a:c9:b4:23:f4:27:
                    62:ab:c1:77:54:dd:23:53:c8:e8:e0:c2:27:d5:29:
                    51:28:d4:11:ab:9d:e3:a3:eb:56:4c:97:ef:e4:a2:
                    da:4f:7c:61:6e:9b:c6:dc:85:20:e9:a6:7d:4e:f8:
                    23:b1:27:f7:f7:12:7d:b0:33:9b:e2:2d:21:71:19:
                    58:c4:1f:4d:9e:88:4b:55:75:57:fa:38:b0:7c:49:
                    ba:c2:45:cf:b4:14:ef:c1:37:cd:74:13:68:f2:98:
                    d7:fa:40:c0:23:e5:40:99:40:59:05:f5:1d:3e:ae:
                    fc:32:e6:4a:50:af:2a:79:49:67:5c:f2:09:5c:6d:
                    ec:fd:cd:25:ba:21:fa:13:a0:0e:3b:7d:ff:ba:a7:
                    43:c1:a8:90:5f:5f:a5:41:c3:ee:24:c3:b9:8a:59:
                    5d:65:79:d3:79:78:fc:08:8c:ca:66:7e:07:de:ef:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:75:73:5A:4F:13:BD:F3:26:F2:02:21:6B:7E:23:E7:EC:F3:BA:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/9674487c-1ddf-3e7a-8046-d83acc78b963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl

            X509v3 Authority Key Identifier:
                keyid:99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.248.0/24
                IPv6:
                  2602:f946::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:44:44:d5:36:a2:22:46:9f:7c:92:4c:07:73:fe:be:cf:ff:
         bb:ac:8a:20:b2:6b:43:17:c4:2d:5d:46:7a:c5:b7:fc:ea:16:
         a0:98:2b:69:ac:d3:61:55:c9:8b:f4:f6:54:c7:66:d0:43:4d:
         40:8c:36:c0:cc:ce:5a:47:8a:7f:4e:a0:e2:3d:fd:32:bc:c9:
         45:56:3e:00:28:0e:1a:f5:8e:48:b0:5e:7e:3d:a6:18:01:79:
         84:06:4b:4d:79:76:94:1a:60:59:3b:4f:26:43:0e:65:cf:92:
         65:f8:7e:b9:79:60:fa:d1:3e:41:76:07:38:d0:c8:17:e7:1c:
         02:02:08:7e:83:99:4a:a8:8a:fe:ea:f5:3c:a4:b6:fc:70:d5:
         52:a2:7e:40:d0:b3:db:58:76:44:de:39:1b:04:b3:97:e1:8a:
         9d:da:a3:84:b6:b4:10:7a:e8:11:2b:4d:13:bc:d2:28:ad:3a:
         13:45:9a:dc:f2:b5:c5:22:bb:0a:5a:51:89:7a:ad:3c:55:56:
         47:70:ab:68:d1:24:b4:b4:fd:4a:85:7e:5e:4b:65:b2:80:56:
         e2:c4:d4:63:07:93:11:cc:59:0d:13:a6:f7:b8:72:d3:ee:ce:
         9c:8f:8d:9f:4f:05:0a:81:d7:1b:e7:2e:fc:50:2d:16:40:db:
         35:e0:c8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 17:46:42 2024 by rpki-client on console-ams.rpki-client.org