Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/b765a089-28a9-359f-bb37-aaa584ca4e9a.roa
File:                     b765a089-28a9-359f-bb37-aaa584ca4e9a.roa (raw, json)
Hash identifier:          cV844VrQs5xL/DB3N56VBcHUx7PzlDMDXkPb7q7itEM=
Subject key identifier:   C8:F8:5A:32:BB:53:15:9C:67:F4:EB:E7:EC:76:0E:8E:7B:E6:35:01
Certificate issuer:       /CN=5144f613-8a75-4802-bb71-45eaf8220874
Certificate serial:       010D0C9F4328584582A88F8885AFC1322169FB00
Authority key identifier: 16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/b765a089-28a9-359f-bb37-aaa584ca4e9a.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     8796
IP address blocks:        23.169.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:8f:88:85:af:c1:32:21:69:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5144f613-8a75-4802-bb71-45eaf8220874
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=d1122861-94c9-4859-bb0d-79f4fffb3944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:b3:98:d3:7b:2b:c3:15:8f:70:1b:ab:fd:
                    94:87:6b:1b:ef:cd:82:63:be:f1:4c:da:d1:ee:e1:
                    fb:29:a1:6f:19:ad:1d:1e:38:b3:f5:79:f2:1f:01:
                    a5:66:b6:58:ca:bf:77:10:69:07:74:e8:a6:78:61:
                    87:34:15:13:49:86:0e:b3:2e:c8:1b:55:7e:9c:7d:
                    04:da:99:50:30:41:b1:83:20:ca:1e:0a:3e:89:17:
                    13:4b:c1:23:0d:fc:33:2f:e7:44:61:2a:99:e6:d9:
                    d0:f3:85:cf:32:d7:71:54:b3:56:32:a5:68:87:67:
                    d8:c9:cc:bc:85:11:f5:5f:90:b2:92:cd:da:d5:21:
                    00:31:b8:ca:f1:90:5e:54:27:0a:ca:f0:21:94:aa:
                    03:31:42:a3:54:30:31:30:27:24:c9:ef:bf:d0:68:
                    44:33:07:81:05:99:cf:c4:9e:19:06:fd:1f:c7:ce:
                    b5:4a:0d:a8:6f:0f:9d:ba:64:08:35:6f:0f:ef:ad:
                    42:82:ca:30:d3:67:65:7d:be:ac:b5:8c:4b:ea:3a:
                    f5:b7:47:e0:39:ec:73:88:af:b8:b0:bc:b8:d5:a4:
                    fb:96:a8:17:8e:d0:7c:0a:ea:97:d3:0d:8d:be:04:
                    de:6b:ee:41:e3:4d:41:b1:6c:9e:a7:a6:b8:ac:31:
                    c6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F8:5A:32:BB:53:15:9C:67:F4:EB:E7:EC:76:0E:8E:7B:E6:35:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/b765a089-28a9-359f-bb37-aaa584ca4e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.crl

            X509v3 Authority Key Identifier:
                keyid:16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:81:62:75:b7:7d:78:bf:4a:1f:1a:59:64:a9:b2:9e:0f:40:
         94:9e:df:25:b9:e2:3b:01:42:66:ae:30:06:28:ce:30:8f:c4:
         4e:6d:f4:ea:89:4d:d9:2d:11:2f:f3:59:f8:e5:5d:0b:63:32:
         2a:99:e8:8b:b5:3f:ea:a3:43:47:93:1c:a8:bb:6b:ce:23:5c:
         6c:a5:fd:7f:e9:2c:1a:7e:ea:07:83:5d:eb:58:fb:c4:9f:c5:
         8d:90:48:19:df:d2:02:9a:cd:bc:e1:20:ce:4d:8a:a1:40:e9:
         0f:e4:f8:34:c7:97:b8:8b:1a:d6:36:c1:54:ea:67:98:6e:b9:
         5d:c3:48:26:37:34:ab:0b:8e:c4:a9:8d:63:06:ee:cf:10:0f:
         be:9d:c8:6b:8f:ba:e3:af:3d:36:97:27:4c:9c:bc:c6:37:d7:
         59:71:e7:8c:07:7e:c6:45:f9:ed:e4:91:72:59:dc:d8:11:ff:
         33:44:c5:b7:ae:a9:bd:55:46:52:ef:4a:d7:9e:2d:8a:e5:17:
         a5:1e:70:4a:f2:dd:9c:9d:10:38:74:8b:7e:ea:9b:da:c5:51:
         f6:dd:6d:a4:04:ff:db:9e:ae:19:cb:6a:95:91:6c:c0:3b:ae:
         d3:ac:83:61:dd:0e:79:3e:bd:b4:60:bd:b2:86:3b:4a:4a:39:
         2b:72:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 06:54:47 2024 by rpki-client on console-fra.rpki-client.org