Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/09a6ce85-4c5f-3377-82cc-8aca71fd7716.roa
File:                     09a6ce85-4c5f-3377-82cc-8aca71fd7716.roa (raw, json)
Hash identifier:          h3Eszc5BBAxqI5AEpWcpp/H+H8OYQPS7FxAcpjivQVc=
Subject key identifier:   BE:EE:50:A6:16:2B:EC:02:0F:13:84:59:D6:9C:40:49:27:FD:50:C2
Certificate issuer:       /CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722
Certificate serial:       010D0C9F4328584553DAE4E643B136946597EA00
Authority key identifier: 96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/09a6ce85-4c5f-3377-82cc-8aca71fd7716.roa
Signing time:             Mon 25 Mar 2024 18:39:13 +0000
ROA not before:           Mon 25 Mar 2024 18:39:13 +0000
ROA not after:            Sun 23 Jun 2024 18:39:13 +0000
asID:                     16276
IP address blocks:        23.174.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:da:e4:e6:43:b1:36:94:65:97:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722
        Validity
            Not Before: Mar 25 18:39:13 2024 GMT
            Not After : Jun 23 18:39:13 2024 GMT
        Subject: CN=18e825d1-7a8d-49e6-ad55-8acca0d78f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:44:cc:13:a3:52:d2:4e:80:d9:d3:49:74:
                    69:42:63:30:af:7c:81:41:26:7a:75:73:70:62:32:
                    87:e6:e4:d4:b7:5d:5c:5b:27:cb:35:10:c7:05:0f:
                    d1:f1:59:00:11:04:f7:82:ef:9b:d8:f8:a5:05:d1:
                    b1:6d:67:81:b9:d9:25:20:bd:56:f7:98:c2:a5:00:
                    55:11:d2:d3:df:e3:f5:d0:c3:2c:b9:7b:6c:9c:55:
                    17:09:da:8d:a6:e7:ea:29:a6:42:d8:04:a0:cd:10:
                    5f:a8:34:db:34:5d:2e:9e:3a:3f:eb:25:46:67:00:
                    34:14:6a:cf:95:90:33:7f:fe:f0:aa:cb:b2:db:3f:
                    71:93:e4:28:da:e8:f5:33:b7:45:b7:45:7e:7f:26:
                    0b:2f:5d:34:72:92:9b:28:96:cd:91:9a:37:b3:60:
                    c9:12:e5:fa:b4:32:5e:e2:8c:a2:1c:28:ca:8b:30:
                    77:8b:b8:f0:c6:31:68:0f:62:13:04:54:89:df:d1:
                    0f:17:52:7f:da:9a:99:40:e3:81:75:9f:61:1b:b7:
                    6b:74:4b:6d:a6:0f:e5:ed:15:44:da:30:3c:58:06:
                    b4:71:3b:b6:13:93:a1:26:6f:6a:8e:53:b5:f6:33:
                    11:17:b9:8f:81:c4:c0:f0:20:bf:14:3b:0b:a5:d6:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EE:50:A6:16:2B:EC:02:0F:13:84:59:D6:9C:40:49:27:FD:50:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/09a6ce85-4c5f-3377-82cc-8aca71fd7716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl

            X509v3 Authority Key Identifier:
                keyid:96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:21:81:f9:a8:c4:49:39:f5:0e:da:6d:e4:e0:96:af:02:
         2b:f7:49:ee:e4:97:df:cc:86:68:36:22:aa:f6:cf:df:a4:c5:
         8b:39:0e:f0:74:51:fd:4e:55:c5:2b:db:8e:7c:65:fa:63:b5:
         5d:d7:f3:bd:50:39:b4:5b:61:aa:fd:36:cc:dc:44:17:d8:00:
         ea:2e:92:0a:90:a7:7a:f5:11:e0:5e:f4:92:47:8a:e9:16:09:
         43:d9:3f:33:67:04:00:18:ee:fa:27:49:04:e3:63:e5:06:04:
         37:8d:36:a7:86:5b:f1:1a:10:55:00:b3:ed:b7:72:f6:99:4f:
         b6:8d:a1:a9:87:31:dd:76:19:f7:aa:2a:4d:c3:05:9e:78:5c:
         31:9a:ea:e4:71:ce:19:b2:1a:f1:0f:8a:ec:fc:ec:a4:b0:4b:
         cf:53:57:bc:35:0b:e2:df:52:46:6f:9c:d2:27:f6:a2:da:42:
         82:fc:90:b6:f0:2b:7a:50:af:21:07:35:3b:a3:d1:9a:ce:fd:
         7a:d8:77:f4:db:09:3d:2d:19:c0:36:02:5c:e3:74:bd:fb:fa:
         a2:97:3d:5c:20:b7:fd:22:f6:62:cb:fa:0f:7b:20:62:4e:48:
         f7:00:bf:3e:5c:64:53:7e:58:5b:0d:f2:58:84:33:ce:44:e1:
         de:5f:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:53:35 2024 by rpki-client on console-ams.rpki-client.org