Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/474f5232-805a-347c-9e93-85de85835ebf.roa
File:                     474f5232-805a-347c-9e93-85de85835ebf.roa (raw, json)
Hash identifier:          zP4aC981lbumrbWcvMdTJodmlEhWbMieEVtzt9EfO+Y=
Subject key identifier:   51:F6:08:22:E3:15:FF:52:30:C6:1F:0E:C1:A4:51:CC:E5:B9:4D:95
Certificate issuer:       /CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
Certificate serial:       010D0C9F43285845EF894085A43B3F797446EF80
Authority key identifier: 58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/474f5232-805a-347c-9e93-85de85835ebf.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     54657
IP address blocks:        23.156.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:40:85:a4:3b:3f:79:74:46:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=f5d5bcca-e967-413f-bfc8-9376d6bca625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:ab:d3:16:30:21:70:c1:aa:9d:7e:c2:46:
                    65:05:6a:7d:68:9c:99:77:6a:39:2f:e6:c6:5e:f7:
                    cd:88:d7:00:74:90:22:c3:77:5f:b6:40:15:9a:4d:
                    75:0a:50:21:bb:31:11:4a:c4:46:5b:18:83:5e:bd:
                    94:fb:80:ec:c4:51:06:28:35:5d:f8:fc:be:29:ee:
                    08:66:1e:49:3b:f6:b1:95:25:df:dd:1a:2d:af:04:
                    f7:ad:f0:3d:72:1a:c8:e1:f5:1d:c1:85:eb:19:87:
                    95:59:4c:39:a6:cd:9e:d5:ef:59:37:8d:be:be:a5:
                    45:f2:e8:03:09:93:11:03:53:97:c5:7d:a2:c6:53:
                    e4:2c:7a:40:ff:8c:04:d4:77:0e:32:18:1e:51:b4:
                    3a:e1:46:01:0f:df:83:e0:78:46:4a:3f:cf:e3:9e:
                    a4:37:00:5f:93:78:92:2b:6f:5d:af:32:78:e7:75:
                    47:7a:7e:00:7a:70:88:d3:80:3f:fe:54:9e:1f:e6:
                    5e:8f:c7:c1:95:af:46:ef:93:70:fb:53:fd:c9:8b:
                    ac:47:d1:41:3e:fb:cc:ad:00:18:d7:74:81:7f:9b:
                    81:24:60:a0:f3:29:66:21:e9:97:c3:60:10:41:32:
                    25:5f:db:3a:e6:82:64:b4:35:55:1c:87:40:68:2f:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:08:22:E3:15:FF:52:30:C6:1F:0E:C1:A4:51:CC:E5:B9:4D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/474f5232-805a-347c-9e93-85de85835ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl

            X509v3 Authority Key Identifier:
                keyid:58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:dc:4d:24:c2:13:3a:1c:60:81:0a:40:41:88:6c:77:79:
         44:34:47:31:74:cf:1c:86:02:81:38:88:6e:df:f8:b6:26:69:
         e9:e4:1a:4c:de:ee:4a:65:cf:1a:99:dd:49:c2:16:e7:cb:82:
         e9:34:34:8e:71:e1:e1:3c:7f:fd:59:73:40:e5:a7:89:2b:2d:
         32:57:0d:31:5b:36:2b:a4:f1:a7:05:72:58:6d:ce:20:2e:62:
         03:27:0c:56:a1:59:7e:1c:19:93:d5:ac:db:86:0e:a5:48:93:
         60:68:34:ee:8a:f6:ff:65:97:5f:3b:9a:fa:ce:4a:51:dc:2c:
         f3:a7:a5:0f:f9:99:98:97:74:bf:e6:1f:f0:1b:73:f2:69:ba:
         2f:46:20:05:61:88:87:08:b1:25:6e:d3:44:91:3e:23:87:a7:
         42:8a:a9:df:6a:69:3f:27:9b:32:83:a4:41:e9:40:ef:64:b6:
         15:4e:5e:18:da:cc:49:79:4c:34:be:93:c7:31:bd:9d:9d:4c:
         5e:78:7a:bc:49:01:3f:c8:24:d0:49:bb:48:ad:8b:63:06:7c:
         df:da:91:e0:67:b8:79:95:1e:80:2d:9d:76:ae:52:d0:24:49:
         ee:1b:a7:d4:d7:93:03:d0:fa:89:cb:8a:1d:33:dd:d3:d7:8d:
         99:ed:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:34 2024 by rpki-client on console-fra.rpki-client.org