Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa
File:                     fb010d6b-7d25-3356-9204-7877f12fc870.roa (raw, json)
Hash identifier:          41Sns88PDNbeQnoQzCTwjEgj0OTYrMY+zwee5xneSVs=
Subject key identifier:   44:4F:47:54:32:ED:99:97:51:75:C1:2F:5D:0E:91:29:A7:71:15:0B
Certificate issuer:       /CN=2e0f6e77-78a4-4730-aa9b-3b5e019fed27
Certificate serial:       010D0C9F43285845B7B37BE89B1A6ED99F028040
Authority key identifier: 43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     893
IP address blocks:        23.137.88.0/24 maxlen: 24
                          2602:fb61::/40 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7b:e8:9b:1a:6e:d9:9f:02:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0f6e77-78a4-4730-aa9b-3b5e019fed27
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=7e01cba8-6c06-449b-b85d-768a0dcfcd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:23:6d:4e:7a:04:a1:b7:9d:10:75:ed:db:
                    a7:72:ac:fe:a8:7a:66:df:99:2f:35:2b:1e:a7:c9:
                    e7:bf:84:35:9d:b6:b2:4a:30:de:33:84:53:dc:ff:
                    6e:f1:00:2e:d6:10:e1:74:78:ff:30:a4:39:d7:ff:
                    ed:b9:0a:ae:16:69:a0:5b:ba:e0:ad:b3:cc:0e:1d:
                    3f:ec:33:99:61:99:f0:2f:77:97:93:d1:27:30:8f:
                    3d:7b:f6:08:57:37:a5:51:09:8b:8d:61:4e:74:87:
                    8a:34:fe:1b:f5:03:af:d7:28:04:a5:43:25:7e:b5:
                    3a:3e:96:8f:ae:a6:de:80:63:4c:b3:6a:61:13:ce:
                    26:13:10:39:0c:17:25:3c:ec:ab:4e:d3:31:bc:29:
                    e2:35:13:56:de:7a:2e:76:28:10:06:de:c2:f6:ee:
                    7f:5a:01:0d:59:e3:92:f3:ef:71:da:ef:09:3d:8a:
                    cf:6b:d6:6b:a6:f1:22:8b:e6:e7:82:0e:20:12:78:
                    09:14:06:c9:2e:af:33:bd:b9:39:9c:59:13:2a:dd:
                    a2:27:ec:f1:ab:88:bf:0f:77:73:c8:43:1c:dc:fe:
                    b3:2b:13:27:94:33:8c:cf:87:74:7b:f3:b1:b1:73:
                    61:39:0b:f4:a4:04:1c:53:9f:2f:04:6a:c2:02:da:
                    a2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4F:47:54:32:ED:99:97:51:75:C1:2F:5D:0E:91:29:A7:71:15:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/fb010d6b-7d25-3356-9204-7877f12fc870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.crl

            X509v3 Authority Key Identifier:
                keyid:43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.88.0/24
                IPv6:
                  2602:fb61::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:22:d4:66:cc:a9:f3:9a:ff:22:74:0f:f7:e8:92:09:c2:82:
         a9:cf:3a:d2:01:08:29:1f:ad:60:a5:24:0b:e5:3c:d8:31:b9:
         c3:70:94:00:8f:d4:80:bb:8f:bd:6a:2e:e1:35:d1:d6:8e:48:
         9a:b7:ee:42:dd:d0:c9:d5:d5:af:3e:85:ad:fc:d4:d6:cf:a9:
         03:8c:e0:9b:67:ae:b4:0a:b6:bc:e1:fe:c4:fa:aa:f1:de:d1:
         7c:ad:d0:59:a2:28:a1:55:4f:74:1a:30:01:31:5e:4d:fa:76:
         7c:3e:60:41:2c:d0:1d:87:dc:3e:06:17:75:6e:a3:dd:3a:22:
         ce:7c:8a:fa:32:bb:b5:34:77:ea:0c:ed:c6:5c:95:d3:9a:6f:
         a5:1b:33:f0:31:2f:80:1f:11:08:f7:a3:5d:fc:84:78:ee:c5:
         64:e7:b1:ce:1f:66:e1:c6:d2:09:49:1a:3f:79:5f:f4:f6:35:
         4d:a2:af:5f:c8:7d:15:ad:27:2e:ea:d9:ee:0c:77:76:5e:31:
         26:08:40:4d:e3:a5:24:fe:5e:23:4f:60:ce:1b:55:f9:17:1f:
         65:ba:99:04:ce:5f:ae:cd:d3:57:aa:91:97:fa:c0:bf:2a:53:
         27:d6:3f:c6:c0:f0:5c:29:85:13:aa:ae:df:c8:24:98:86:68:
         84:91:f4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:19 2024 by rpki-client on console-ams.rpki-client.org