Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa
File:                     1cee1fb9-f452-30a3-996d-1de632277883.roa (raw, json)
Hash identifier:          5I/BnKcRaH433YK1+Gn/KczO8WTF49c91CHOdHg0c20=
Subject key identifier:   DD:16:45:AE:5F:08:F6:32:3A:CF:E5:7B:00:F7:71:15:C5:17:DB:5D
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285844F7300B1B4DB1676CB4942860
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     396416
IP address blocks:        23.137.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:0b:1b:4d:b1:67:6c:b4:94:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=00f30d65-96b2-4099-9960-462af219ba3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:ed:05:e8:ad:3c:97:ab:06:b0:be:2f:68:
                    a4:83:e3:bd:a1:e8:d5:15:45:2a:e1:78:ac:a6:55:
                    b2:38:b6:cb:a3:e2:6c:23:70:2c:1c:f6:0c:05:8f:
                    2b:a2:3b:af:d6:3e:2f:07:8d:c3:ff:c8:3f:1f:00:
                    43:87:4d:7a:89:4e:66:6e:ce:0d:4c:ae:c8:11:37:
                    86:88:a8:f7:6c:84:d5:49:26:e3:db:57:99:89:2e:
                    d5:87:75:41:68:67:04:4a:04:a3:b2:f8:d5:19:bf:
                    7f:30:77:a5:c3:20:fd:ee:25:70:ae:72:9b:7a:28:
                    9a:1f:24:00:fb:f4:1d:c5:03:db:92:35:d3:af:58:
                    11:a6:6f:e0:9d:8f:c0:6a:83:aa:4c:72:d9:d7:cc:
                    a8:ee:9d:10:47:de:66:74:eb:b6:c5:01:f8:1e:3f:
                    e9:74:2f:5d:e8:c3:a8:5d:93:e7:5b:74:90:b2:96:
                    5d:27:65:83:bd:5b:06:b4:ae:78:e7:cf:31:79:b0:
                    b1:6a:44:29:d5:45:f8:2c:c5:87:62:c3:1f:cf:92:
                    9f:d1:ba:0a:51:91:6f:32:d7:06:dd:29:d0:08:62:
                    27:a3:d6:e6:11:82:e9:61:79:6b:7c:fc:53:39:62:
                    c5:e0:08:23:68:d2:3a:77:5b:74:f4:73:a4:21:d2:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:16:45:AE:5F:08:F6:32:3A:CF:E5:7B:00:F7:71:15:C5:17:DB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ba:82:e7:1d:e1:dc:4e:14:b0:98:a5:3c:ba:9e:4b:08:72:
         66:60:cd:e4:65:71:18:54:3d:7f:42:92:63:75:aa:0f:2c:06:
         76:0e:cc:e6:fa:47:25:2e:2b:f8:37:07:81:98:c0:f3:08:36:
         49:b4:26:86:af:06:cb:aa:95:da:e8:0a:dd:43:a1:e8:53:9d:
         de:49:87:cf:b6:65:0b:98:56:34:5f:92:af:07:d8:bd:12:4b:
         50:e2:d8:1b:93:af:f6:46:fb:9f:59:79:3b:a2:a1:fe:66:f9:
         44:26:fd:52:b0:d6:68:7e:55:97:58:85:ea:96:f9:c2:2a:9b:
         25:0c:54:54:fa:a4:d0:58:dc:8f:6c:e5:cf:3f:e0:95:6e:35:
         5f:27:58:57:12:87:8c:9d:4d:f8:3c:51:dd:3f:7d:92:3a:6e:
         3c:0e:6b:c3:18:7a:9c:45:57:c9:cc:97:d2:e5:27:f9:43:ea:
         38:b2:af:c3:28:4d:0c:0d:72:2e:ae:33:a6:8d:d6:69:11:ed:
         21:b7:4d:5e:4c:5d:b4:05:d6:d2:f3:93:40:7c:00:7b:6d:4d:
         30:0f:f0:ca:98:1c:91:35:88:4c:29:8c:84:b5:54:c6:83:8f:
         3e:8b:a7:fd:18:71:41:72:8c:f2:9f:c3:2c:98:26:1d:c9:7f:
         44:bd:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:32:57 2024 by rpki-client on console-fra.rpki-client.org