Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa
File:                     1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa (raw, json)
Hash identifier:          lYIqIFY522nzknah4/3sOo+gCY3nH2IneL4hU6uqitM=
Subject key identifier:   0D:8B:37:AC:45:9E:6C:CC:4C:B5:93:C5:63:D6:9B:82:10:35:C0:CF
Certificate issuer:       /CN=258880f7-56fa-4c7c-a7e7-6d113eda383d
Certificate serial:       010D0C9F4328584546A2B5590CD3FA0FEB80AC80
Authority key identifier: E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     151338
IP address blocks:        23.142.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:b5:59:0c:d3:fa:0f:eb:80:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258880f7-56fa-4c7c-a7e7-6d113eda383d
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=9ce7daaf-49cc-4429-b9b9-6e7d069fbca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a1:2e:03:52:8e:1d:f1:38:1d:6a:b5:52:5d:
                    5a:82:b3:59:07:80:34:77:e4:d8:62:61:7d:f8:03:
                    41:d4:27:58:5d:2c:0f:f3:21:28:27:a2:60:17:87:
                    15:cd:8c:b4:49:67:ec:4b:8d:ec:7e:bd:b3:d8:bb:
                    97:1c:9b:b5:ea:23:9e:e6:0b:d1:18:ba:b7:1f:48:
                    89:56:81:2e:bf:f4:7d:7a:e7:71:72:b3:a8:cc:ee:
                    5f:ac:b4:fd:e1:8b:a8:80:4d:9c:8f:8f:f1:d8:f3:
                    a3:0b:f1:8e:bb:49:b8:38:64:59:60:06:07:9f:f0:
                    b7:3a:55:ca:90:70:02:8f:b3:1b:a1:82:b5:59:a2:
                    12:34:c8:b8:78:59:52:77:f5:d5:05:4e:81:8f:68:
                    1a:6e:65:71:bc:37:73:7c:1c:e3:b0:b9:ca:66:ac:
                    ef:48:e3:df:60:a5:32:15:fd:8a:62:c7:8e:ec:63:
                    dc:e8:c6:9f:e1:63:93:45:e3:c7:4e:e9:9b:19:10:
                    59:5b:ec:43:f9:9e:08:ac:1b:33:07:6a:76:89:a0:
                    81:d9:c1:0a:6c:a6:51:5e:c1:ff:ea:d0:53:db:5a:
                    43:4f:64:91:b6:6b:74:14:1e:83:2f:19:2c:62:c1:
                    9a:c3:5e:81:29:cd:47:6f:06:26:2f:1f:56:2f:08:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8B:37:AC:45:9E:6C:CC:4C:B5:93:C5:63:D6:9B:82:10:35:C0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/1f91f8f6-9f47-3789-8964-a821f5a7d49f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.crl

            X509v3 Authority Key Identifier:
                keyid:E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:e7:a8:50:67:b2:ce:f7:d9:9e:ca:70:dd:a3:99:ff:31:f9:
         f3:c5:ae:0b:fb:04:55:12:f3:2c:aa:bd:3f:44:ea:98:a5:d2:
         2f:59:0a:b4:ed:6c:0e:65:30:d7:c5:21:9b:d5:36:c5:ea:10:
         9c:60:9d:63:ea:20:e6:1e:e5:ef:85:f8:59:26:a5:f4:ba:08:
         63:a2:f1:fc:08:fb:cf:e3:fb:a5:46:71:7f:84:c6:aa:1a:5b:
         f2:4b:9b:58:be:a2:a7:f1:bd:72:86:be:f3:36:08:3d:75:1b:
         59:6c:57:00:af:0e:2f:16:ed:76:3c:19:87:97:5d:7d:b8:29:
         c7:fd:b4:5a:89:5d:f5:f6:d1:69:c4:7a:ad:ad:79:cb:fc:93:
         a7:2e:2f:be:8d:5f:a8:cf:21:a7:e5:5a:5c:d3:cc:9c:9d:0d:
         90:19:e7:65:54:35:8a:8d:f6:bb:5c:45:eb:79:63:49:99:fb:
         f9:06:81:5c:31:34:9a:2c:6d:79:6e:92:4f:91:55:18:f0:01:
         ee:ae:d8:29:75:8c:ed:f6:25:32:f6:7a:fe:0b:6c:79:43:63:
         7f:2f:4a:40:e4:51:7c:38:df:7b:ae:aa:ec:4c:37:d1:86:17:
         3e:5c:1f:a7:cf:29:7a:61:44:8e:62:16:21:4e:86:ae:fe:da:
         e5:2d:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:10 2024 by rpki-client on console-ams.rpki-client.org