Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa
File:                     dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa (raw, json)
Hash identifier:          dxfOCJqQWFeUzxVAWGhQe9QFd3fuZJsBYHGLmDrs89U=
Subject key identifier:   93:05:DF:1A:4C:46:24:19:10:C7:31:73:B4:73:BD:0E:64:38:26:D9
Certificate issuer:       /CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99
Certificate serial:       010D0C9F43285845628D8D10838D2B885BA7B480
Authority key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     396935
IP address blocks:        23.135.48.0/24 maxlen: 24
                          2602:fdd9::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:8d:10:83:8d:2b:88:5b:a7:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=f9e1b6c5-e0a6-406f-9a43-6bee010480e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:c7:ec:b1:40:c3:ae:07:37:b4:f6:12:8f:
                    e4:37:b7:d8:27:a6:c1:ac:e0:59:4f:c8:74:35:18:
                    2d:2d:67:c4:0b:09:e8:cb:3a:ef:da:cf:fd:cf:dd:
                    fe:b1:2e:25:a4:32:3e:96:8d:27:ae:02:73:89:a4:
                    8a:3d:d2:e6:be:8d:49:75:43:90:97:f2:c3:e0:7d:
                    a9:54:93:14:e6:21:5a:0d:79:68:58:83:fe:f2:fc:
                    48:75:c9:5e:2c:04:7a:35:91:d1:a9:84:db:a8:87:
                    81:79:d3:ef:af:79:0e:01:2b:b3:b7:3d:d4:8f:98:
                    a8:8e:48:88:bc:44:67:14:56:4f:7b:9a:21:8b:55:
                    1e:8d:da:02:fc:03:6f:ef:7a:82:08:2f:92:48:64:
                    78:0a:b7:50:c6:88:70:3d:cb:6d:0f:42:23:f1:9e:
                    3d:7a:3d:49:58:74:96:20:d9:36:de:e1:0b:ad:95:
                    33:6b:cd:0c:09:7b:4f:b6:a6:d8:ea:ae:7b:62:51:
                    a7:00:e5:aa:29:6d:a0:17:90:bb:bd:d6:87:6d:74:
                    17:41:df:84:a2:26:f0:1e:53:1a:6a:b0:3c:f0:67:
                    a1:5b:b0:77:60:f0:af:80:91:c6:05:ac:00:81:fc:
                    88:9a:b2:5c:18:e0:50:fc:a4:ac:4a:fa:77:ac:8d:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:05:DF:1A:4C:46:24:19:10:C7:31:73:B4:73:BD:0E:64:38:26:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl

            X509v3 Authority Key Identifier:
                keyid:F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.48.0/24
                IPv6:
                  2602:fdd9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a5:ce:f9:77:3a:16:a4:67:8b:55:d7:f8:95:e7:5b:fc:7f:
         d8:d6:09:67:f2:d7:e9:47:b5:5e:09:01:06:4d:5b:44:31:ec:
         a9:f0:c6:20:80:9e:05:62:9a:53:b1:e0:c3:b7:48:64:1d:54:
         f5:33:3f:6e:7c:85:0b:72:24:f2:e1:85:9c:2a:e4:91:c8:5d:
         41:d5:8a:54:61:8e:8e:65:f8:60:0d:ed:86:25:ad:32:f4:f5:
         5e:64:de:b6:04:75:ac:c2:39:a1:51:94:53:51:25:f5:80:4b:
         c6:18:83:cd:f8:d4:da:f1:54:4f:59:43:7d:86:47:6a:5a:ea:
         6f:a0:77:6c:67:79:e3:32:f1:76:25:8a:06:02:55:b0:91:6c:
         82:48:9a:23:b9:fb:6d:67:5a:d3:7c:c4:a0:74:fa:46:b4:8e:
         24:60:87:8e:cc:7c:c0:c5:64:f0:bb:87:d4:4a:4b:ca:69:70:
         6d:40:1e:bb:58:11:f6:d3:b6:b4:70:2f:6d:f9:12:1d:da:ee:
         4c:27:c2:de:80:66:5d:f2:c8:a3:4d:a0:66:3a:88:ee:b5:56:
         2c:99:7b:5e:94:7e:fa:91:82:d2:19:dc:95:92:b5:3f:91:d9:
         32:c2:48:da:cb:4e:7b:ba:ab:e9:6b:eb:b7:77:eb:92:99:eb:
         66:04:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 00:15:55 2024 by rpki-client on console-ams.rpki-client.org