Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1203ff35-cf10-3bb4-9155-fbd9a78becde.roa
File:                     1203ff35-cf10-3bb4-9155-fbd9a78becde.roa (raw, json)
Hash identifier:          3Y74Y0sJ/oZeJ4a9sYhdfimnZJLu3A+Dn/RqJFyIJnQ=
Subject key identifier:   83:B6:B0:67:38:47:A0:8B:EF:7A:C2:2B:F2:FF:54:25:1E:3C:E6:DE
Certificate issuer:       /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial:       010D0C9F43285845BD48E8863AECF3BA91EA3298
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1203ff35-cf10-3bb4-9155-fbd9a78becde.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        23.150.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:e8:86:3a:ec:f3:ba:91:ea:32:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=2bbb00a8-a712-4efb-ac5d-99755ad9274f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:74:0c:1c:94:31:2e:49:51:20:64:44:4d:
                    28:57:01:de:c2:5d:9f:ea:cf:72:b5:90:45:8b:c6:
                    6e:ed:08:01:12:e4:23:c8:00:54:1b:03:c6:a6:e5:
                    a9:1b:df:04:20:7b:5e:3b:d6:24:29:9a:02:96:10:
                    e7:df:6e:d5:93:ef:34:3d:ec:22:d7:57:d0:55:8a:
                    07:40:90:f8:55:99:97:6a:b9:41:7d:b1:82:3d:3f:
                    2b:0e:56:5a:c4:33:3d:87:d2:1b:8c:02:83:6c:91:
                    d1:1b:c4:7c:a0:f4:16:61:09:a0:3e:bc:4d:8a:01:
                    64:ca:3c:98:ca:f9:a7:1c:39:96:39:fb:b3:b3:6c:
                    37:b5:c8:52:bc:6e:cb:7f:8f:2b:f9:b1:41:e2:9e:
                    5f:ea:9f:e3:d5:e0:f5:f3:37:ef:56:2a:68:e7:da:
                    9f:34:94:8c:4c:6a:4d:92:38:78:5d:d6:35:3d:e5:
                    f7:1a:30:d6:aa:7e:36:c6:dd:28:08:b9:f3:9a:16:
                    5e:43:0c:52:45:35:b4:ce:69:92:f4:66:5e:f8:31:
                    65:f9:8b:3d:49:ed:98:80:59:c7:1b:cf:dd:b7:8e:
                    09:d9:40:eb:fd:8f:a2:1f:62:1b:8b:14:e6:a3:3e:
                    7d:e9:1b:50:6b:0e:bd:76:4b:d2:b4:b1:34:e4:c4:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B6:B0:67:38:47:A0:8B:EF:7A:C2:2B:F2:FF:54:25:1E:3C:E6:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1203ff35-cf10-3bb4-9155-fbd9a78becde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:23:85:24:c7:cb:32:bb:93:75:a5:2d:20:74:88:f2:9c:3c:
         bf:d0:51:39:89:be:e6:f3:e7:03:9e:6d:02:f1:da:66:fc:1c:
         88:74:3e:09:e5:4c:4c:a6:01:22:74:e1:18:d0:7a:08:6a:7b:
         ac:a6:10:87:11:ab:df:3c:dd:d7:02:14:cb:97:0a:eb:e0:80:
         ec:29:fe:7d:43:6b:c9:f6:20:37:aa:56:45:15:3f:69:3d:aa:
         73:62:24:73:e2:bd:d5:0d:69:89:96:2e:1e:f5:76:f4:0c:77:
         8c:c7:1a:b2:81:70:38:43:a0:a6:70:18:ca:14:a9:04:f6:21:
         bb:a2:95:f7:3a:fb:ee:df:52:8b:9a:21:e6:99:f5:e5:8e:96:
         f3:7f:45:6a:65:74:b1:a4:f8:03:bc:73:51:1f:fe:05:21:b9:
         df:23:f9:8b:95:53:b1:16:6f:69:c9:28:f8:c4:04:e0:a3:34:
         6f:92:5a:f9:f3:ad:f1:5e:2a:ef:98:36:6a:57:2c:d4:f3:77:
         4a:48:fe:40:5d:ae:4c:1d:c6:f4:80:6e:1a:f3:f1:ec:1e:f1:
         7c:36:21:45:74:11:e6:97:e3:7f:29:c5:8b:a9:e2:00:fa:66:
         62:84:77:bf:21:59:04:2b:69:e3:29:61:57:8b:1f:9d:bf:43:
         6d:c5:72:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:53:56 2024 by rpki-client on console-fra.rpki-client.org