Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/c8005e4b-a80f-3b04-9773-08a235437886.roa
File:                     c8005e4b-a80f-3b04-9773-08a235437886.roa (raw, json)
Hash identifier:          XgemCOZgvM0tVBeLeU5yFJzq96flshJt7uhRH1M8gKo=
Subject key identifier:   C3:4D:C1:A9:DD:6A:C8:5D:DE:AC:69:50:11:9C:E5:F4:A2:0A:46:05
Certificate issuer:       /CN=77c31fd1-c3ac-425f-9d0e-b9b227466366
Certificate serial:       010D0C9F43285844F7D8DA00E2E9D8FD0E28F200
Authority key identifier: F5:4E:60:BA:39:BC:90:C1:05:BE:FC:9C:91:63:40:C5:71:5D:C5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/c8005e4b-a80f-3b04-9773-08a235437886.roa
Signing time:             Wed 21 Feb 2024 19:40:44 +0000
ROA not before:           Wed 21 Feb 2024 19:40:44 +0000
ROA not after:            Tue 21 May 2024 18:40:44 +0000
asID:                     31898
IP address blocks:        23.131.48.0/24 maxlen: 24
                          72.19.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:d8:da:00:e2:e9:d8:fd:0e:28:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c31fd1-c3ac-425f-9d0e-b9b227466366
        Validity
            Not Before: Feb 21 19:40:44 2024 GMT
            Not After : May 21 18:40:44 2024 GMT
        Subject: CN=40599b8d-6ccf-4b5e-968f-a7761927e2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:09:95:87:cd:74:9e:f3:94:71:c0:45:bf:24:
                    0a:cc:04:5f:3d:6f:85:3a:87:da:0d:37:2b:e6:f9:
                    8b:e4:d7:da:30:9e:d0:85:68:0c:3a:e8:6b:be:e8:
                    63:5f:4a:9d:7a:df:04:8a:cd:62:40:aa:38:1a:f4:
                    35:84:9d:bc:0a:b4:7f:c7:f5:07:84:91:bc:81:83:
                    3d:66:63:42:9e:51:6f:59:3e:f7:6d:b7:4c:dd:75:
                    53:ae:f8:44:c7:aa:ed:a2:aa:f5:a3:18:88:06:60:
                    0f:14:25:7b:63:d5:57:a2:b0:c9:9a:2f:1c:76:b2:
                    f6:ac:d4:fc:61:b0:d5:bd:57:7b:7b:1f:cc:51:1d:
                    6a:19:01:7f:12:b5:06:e4:f3:ea:e8:30:f4:8d:64:
                    ce:34:4d:62:3b:b8:c1:d0:07:81:5e:3d:49:4a:29:
                    09:3d:27:43:a9:b4:ca:bc:40:22:dd:0e:c6:b2:00:
                    8a:7a:f5:22:14:ba:ee:db:bc:f9:ea:27:2d:b3:bc:
                    aa:c0:28:a4:2e:73:51:a0:24:e5:de:ba:bc:54:e9:
                    d9:22:19:14:0c:07:d7:16:2c:67:5b:f8:c6:ba:61:
                    77:72:1c:85:f5:da:d2:88:ef:66:84:4c:36:58:3f:
                    37:b8:99:a0:99:1e:7a:ad:f1:7b:08:04:3e:ed:52:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4D:C1:A9:DD:6A:C8:5D:DE:AC:69:50:11:9C:E5:F4:A2:0A:46:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/c8005e4b-a80f-3b04-9773-08a235437886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366/77c31fd1-c3ac-425f-9d0e-b9b227466366.crl

            X509v3 Authority Key Identifier:
                keyid:F5:4E:60:BA:39:BC:90:C1:05:BE:FC:9C:91:63:40:C5:71:5D:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77c31fd1-c3ac-425f-9d0e-b9b227466366.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.48.0/24
                  72.19.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:eb:c5:7d:3c:c9:0a:e3:00:49:45:a3:31:15:0c:94:ee:
         d1:4f:20:56:9f:0f:95:f9:2a:c3:6c:1c:c3:7b:af:62:54:a6:
         08:09:49:cc:88:b4:8b:4b:d0:2c:f4:67:84:08:82:cd:80:5e:
         0e:60:1b:dd:a7:c7:51:9e:14:48:ec:93:04:59:ca:00:44:8c:
         83:fc:ff:8f:8b:5d:d6:58:68:4e:68:5f:a6:8b:c5:4e:36:40:
         5f:39:ff:20:4a:14:fe:76:a4:9b:e9:66:94:4f:1d:b7:6a:1f:
         e3:bf:a1:28:d4:76:c4:8d:6f:12:bc:01:8a:f2:1b:ce:dc:63:
         a6:ca:e6:c1:83:5d:7f:3c:6f:9e:af:e7:34:b9:c0:5d:9f:01:
         e7:28:36:18:da:81:9f:48:b1:e6:c2:d6:57:20:87:a9:f6:52:
         7b:0b:96:43:d2:6e:ba:69:c4:86:81:8c:13:3b:b7:67:ec:52:
         88:c7:bf:e0:5d:c0:92:28:48:da:01:a8:fc:fc:e5:59:88:32:
         a5:f1:9e:63:a1:db:dd:75:9b:a0:1e:00:8d:44:23:78:f2:eb:
         39:2b:2c:f5:55:67:6c:d9:10:88:e7:e3:f3:08:5c:cc:b5:47:
         0a:28:5a:1c:5b:06:96:ac:0e:db:50:b2:27:e5:68:cf:82:5e:
         06:1b:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:25:25 2024 by rpki-client on console-fra.rpki-client.org