Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa
File:                     a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa (raw, json)
Hash identifier:          1KDbAyxt5+78b5UYjlH+NEwpboAaGBM46AbCPogxxSQ=
Subject key identifier:   0A:BF:8F:72:5C:52:67:F2:E6:1E:D6:CA:1D:5D:AF:5D:5E:B4:85:82
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F432858459C93C54907B679535F414B00
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa
Signing time:             Sat 20 Apr 2024 19:49:55 +0000
ROA not before:           Sat 20 Apr 2024 19:49:55 +0000
ROA not after:            Fri 19 Jul 2024 19:49:55 +0000
asID:                     62563
IP address blocks:        23.174.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9c:93:c5:49:07:b6:79:53:5f:41:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Apr 20 19:49:55 2024 GMT
            Not After : Jul 19 19:49:55 2024 GMT
        Subject: CN=504b026e-b480-47f4-855d-e467d89e40cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:06:98:ea:46:44:53:96:97:4a:d3:83:96:
                    35:8b:46:eb:03:01:df:ef:4d:79:5f:89:47:a1:0a:
                    10:96:ec:2e:21:f0:18:7f:c7:ff:4e:5f:64:a4:19:
                    80:2a:be:fd:68:c6:e7:ea:25:16:82:d9:61:91:bc:
                    0b:93:ff:0b:6b:1b:79:16:30:49:71:fa:f9:04:85:
                    56:ff:c8:fd:60:e2:11:aa:a0:b9:39:44:94:ac:53:
                    88:be:d3:60:03:53:11:7c:93:f7:bb:e2:f7:62:a7:
                    f8:54:5c:9c:62:66:b4:96:0b:d0:13:dc:74:98:2c:
                    78:6f:58:a3:21:b0:b5:7e:f5:a1:c3:60:74:49:0c:
                    57:8f:fe:6e:42:06:da:74:d7:f4:c6:6c:68:31:2a:
                    f0:31:9c:c0:96:63:be:34:11:b3:24:28:78:09:b4:
                    9d:b1:46:ba:05:75:79:9e:38:b4:ee:95:a3:81:2d:
                    b2:b1:c6:80:20:76:7c:f6:51:b4:77:a7:1d:aa:56:
                    af:6b:0d:98:89:3b:c4:fb:cf:80:a3:d6:ce:d1:fc:
                    98:81:7d:73:2d:65:50:e0:34:0a:80:27:cf:d7:e4:
                    78:d3:36:7a:82:c7:56:c7:52:6a:ed:73:a0:b0:70:
                    d7:87:e5:2c:83:a1:42:fa:3c:f6:25:c5:1c:b7:e7:
                    f6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BF:8F:72:5C:52:67:F2:E6:1E:D6:CA:1D:5D:AF:5D:5E:B4:85:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/a9422bc5-e3dc-3d3d-af95-2c46e7106556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a5:30:d3:10:b2:bc:72:0d:a2:17:5c:56:62:2a:1e:f4:fb:
         bd:e4:c2:14:14:9c:d9:8a:ae:58:6c:3c:6e:1e:63:6a:a4:a5:
         30:29:b4:39:ae:0d:27:7b:e6:29:e4:bd:7f:94:6c:96:1d:1d:
         99:e6:88:68:e0:d9:6e:12:c2:0a:7f:3c:4a:0c:13:c7:45:ab:
         c3:81:63:2c:1b:9c:0a:bf:0a:fb:44:85:8c:6a:c6:66:48:40:
         00:f5:d2:56:5e:1f:c4:0a:4a:7b:16:ad:01:ac:25:fc:7b:b4:
         ae:02:03:91:da:30:e8:47:a7:50:28:7a:68:7f:42:9a:25:bf:
         70:96:b4:33:e4:39:ba:4f:f0:64:d2:45:de:89:74:44:0e:9e:
         14:54:44:c2:be:b5:40:d3:60:50:22:2f:30:e8:fd:26:2b:86:
         b0:70:08:fe:a1:53:34:e1:b7:dd:b1:ae:ef:31:b1:3a:6b:f1:
         7f:ef:0d:40:09:96:c9:b6:dd:06:d9:8d:96:38:30:78:bd:99:
         44:96:5d:9e:e3:28:a2:5f:d0:b6:b3:f8:8e:20:4d:42:fb:0e:
         23:81:32:94:a6:66:80:55:55:06:16:9a:38:f2:ea:39:f3:1d:
         cd:61:99:f1:d0:cd:d0:27:50:24:a9:ca:a1:ad:d6:58:8e:fb:
         55:ea:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:43:36 2024 by rpki-client on console-fra.rpki-client.org