Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/60c27ecc-ef6c-3e51-ab5e-d481138b83d8.roa
File:                     60c27ecc-ef6c-3e51-ab5e-d481138b83d8.roa (raw, json)
Hash identifier:          fuCIKhzYTqHZ0GjGY2++PHFylxeG/UziBCgNF+PC23M=
Subject key identifier:   5E:B3:C1:CD:7D:1D:A3:86:62:92:BB:CC:1D:11:7E:63:04:5B:5B:64
Certificate issuer:       /CN=4e15d598-623b-4ab3-ad43-b720fb599027
Certificate serial:       010D0C9F43285845698C572105D0545977D8E100
Authority key identifier: B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/60c27ecc-ef6c-3e51-ab5e-d481138b83d8.roa
Signing time:             Tue 02 Apr 2024 13:08:43 +0000
ROA not before:           Tue 02 Apr 2024 13:08:43 +0000
ROA not after:            Mon 01 Jul 2024 13:08:43 +0000
asID:                     16276
IP address blocks:        23.174.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:8c:57:21:05:d0:54:59:77:d8:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e15d598-623b-4ab3-ad43-b720fb599027
        Validity
            Not Before: Apr  2 13:08:43 2024 GMT
            Not After : Jul  1 13:08:43 2024 GMT
        Subject: CN=a58e47c7-7bbc-4f28-8ba7-47ad0edc95cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:ec:ca:34:de:83:86:d0:8d:42:29:83:b6:
                    5f:f7:8e:83:41:8a:a3:31:46:b8:00:0f:92:4e:b0:
                    0b:fc:69:51:7e:a4:3e:1e:6e:8d:54:4b:94:5e:3a:
                    e7:71:43:8a:78:9b:3c:40:40:3b:4e:9e:40:02:2a:
                    ca:2e:e1:45:4e:1c:b8:fa:20:d7:df:9b:95:9f:4d:
                    8e:0a:6d:b4:95:54:d5:04:13:fd:18:fa:7e:27:88:
                    23:29:23:b0:2a:56:39:bb:cd:db:40:df:37:11:f2:
                    42:a6:c3:77:36:3a:90:c7:bb:dd:0a:fa:16:47:21:
                    5f:2d:b9:07:69:a8:69:2a:63:61:20:32:9c:06:a1:
                    43:0f:c6:86:37:a4:e2:3f:b5:12:88:9b:ee:8f:e3:
                    52:d9:9e:11:b4:5b:ab:fc:49:4a:c1:32:a6:82:b9:
                    5e:57:0b:eb:54:ad:e6:35:42:90:77:59:e8:09:e3:
                    0b:8b:58:55:20:42:92:c4:aa:eb:0c:05:d9:3b:6b:
                    cd:1f:d1:72:8d:3f:51:fa:b8:d1:0b:42:4c:00:9a:
                    93:f0:35:12:f5:f8:cb:da:0e:57:db:94:ce:ff:4b:
                    dd:61:d5:1e:0e:af:d8:fc:a3:ee:67:86:eb:99:c0:
                    aa:67:a2:e5:64:92:50:fe:76:08:a7:28:dc:b8:a8:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:C1:CD:7D:1D:A3:86:62:92:BB:CC:1D:11:7E:63:04:5B:5B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/60c27ecc-ef6c-3e51-ab5e-d481138b83d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl

            X509v3 Authority Key Identifier:
                keyid:B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:13:9f:87:d2:75:9a:a7:b6:e8:15:e0:a9:7c:2f:b7:97:
         45:35:49:36:b8:ad:c8:80:55:f3:29:96:0d:35:65:10:8c:b0:
         c7:8e:25:62:74:16:6c:60:43:99:0c:24:e5:d4:ec:e3:15:dc:
         39:b6:b2:67:28:bb:9d:21:ee:b3:06:c1:33:c8:b9:eb:4b:d3:
         e0:12:2e:76:58:e1:79:d4:49:af:6b:34:3e:3d:2e:5a:4f:bd:
         81:41:c4:bf:c1:d7:25:b1:22:80:f1:05:59:02:30:3b:fe:1e:
         62:7a:34:fe:25:bc:f5:81:30:7d:2c:8c:73:3b:29:5b:07:5a:
         d5:46:65:c0:27:af:d2:82:b1:e9:2e:ba:b1:5b:ce:7a:d0:28:
         52:a8:9f:a7:12:5d:d2:1a:fe:36:11:4e:c1:e3:cc:55:51:1a:
         fb:6e:dd:02:aa:36:3b:46:19:b4:2a:63:71:d7:36:5f:df:24:
         ca:33:f4:12:f6:9d:93:85:a7:23:cd:0f:98:d4:70:2f:1e:23:
         8b:cc:91:64:f4:20:f2:99:c9:a5:3f:12:4b:c6:76:56:dd:c6:
         de:49:a1:e8:42:79:7c:e4:98:d9:05:8f:b0:68:e3:53:d1:51:
         cd:a0:eb:d7:bf:a9:36:1c:71:0b:91:2f:37:fa:d4:0b:6e:44:
         75:08:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:18:42 2024 by rpki-client on console-fra.rpki-client.org