Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2d240bf8-a342-3e66-989f-2f936fc0bf89.roa
File:                     2d240bf8-a342-3e66-989f-2f936fc0bf89.roa (raw, json)
Hash identifier:          j5b77ilA/pBAs2AeFqMBpYVqLgr9oDzboR575CZPQlM=
Subject key identifier:   F7:90:80:36:39:D0:BE:1C:6A:4C:12:18:FB:79:B7:BE:13:14:86:4F
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F43285845F55A40C5491C6FA207EB4B80
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2d240bf8-a342-3e66-989f-2f936fc0bf89.roa
Signing time:             Wed 22 May 2024 15:00:58 +0000
ROA not before:           Wed 22 May 2024 15:00:58 +0000
ROA not after:            Tue 20 Aug 2024 15:00:58 +0000
asID:                     174
IP address blocks:        23.160.201.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:5a:40:c5:49:1c:6f:a2:07:eb:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: May 22 15:00:58 2024 GMT
            Not After : Aug 20 15:00:58 2024 GMT
        Subject: CN=531c8641-99c4-49be-b1d2-4da264aaee3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:91:9e:b6:40:8f:90:b6:8e:57:6b:cb:90:
                    63:87:c6:8c:33:3c:f0:33:d3:a5:ae:12:84:95:ed:
                    fa:f4:40:28:4d:d4:8f:3b:a4:14:51:c0:1a:b0:ac:
                    b0:99:a9:e7:b2:15:a6:c8:a1:dd:80:d0:83:20:1d:
                    49:2e:5b:f4:26:27:48:29:01:ea:c7:b7:2e:40:6a:
                    95:c7:e0:c4:b4:6b:eb:29:60:23:a2:bc:7a:98:d9:
                    4e:9f:61:d1:cb:14:3f:36:06:dc:a1:96:77:17:c0:
                    23:8b:d8:1a:b0:75:a1:5d:1f:44:20:c0:28:4d:9f:
                    44:6b:ba:62:c2:00:6e:56:8a:4a:b7:e1:3e:4b:e9:
                    14:62:3b:a5:31:87:23:65:4c:ca:16:04:42:c5:a8:
                    5f:99:61:1a:9f:1e:8c:62:11:ef:85:f9:46:78:33:
                    23:06:72:cb:a9:30:17:a9:01:5b:de:ac:f6:e7:cc:
                    3f:34:87:3b:c2:08:80:4e:75:74:c4:37:98:82:74:
                    52:a1:0c:c6:b3:a3:d3:d5:ba:23:38:d3:d5:e2:5e:
                    96:77:f8:38:bb:b8:55:9f:b6:f4:92:1e:3e:93:df:
                    8e:dd:43:95:e2:c8:95:9a:60:fc:ae:6f:b8:89:54:
                    27:e0:b3:1f:06:0d:f6:d0:92:4b:74:0f:54:d0:2d:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:90:80:36:39:D0:BE:1C:6A:4C:12:18:FB:79:B7:BE:13:14:86:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2d240bf8-a342-3e66-989f-2f936fc0bf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c5:fe:e2:2d:74:34:e5:ef:6e:56:83:e6:ed:9b:cb:f2:21:
         34:87:8d:5e:7a:3b:9c:20:c4:1f:54:58:cd:72:2c:54:da:df:
         48:9e:b0:b1:26:18:b5:89:9e:b4:74:17:28:1d:24:73:89:1f:
         46:1b:9c:e6:1d:8f:d5:cc:1d:d0:20:f3:4b:e3:68:44:bb:58:
         ed:fc:40:a0:1d:6d:26:4c:38:89:3d:7f:ec:43:0f:d9:25:59:
         d3:02:f8:d9:ef:fc:d6:79:57:91:df:2d:b5:e9:3f:91:4b:9a:
         dc:2a:b2:1f:42:11:c7:7a:89:4a:df:47:ad:cc:52:23:70:d7:
         4c:fd:43:cd:84:5e:20:73:c4:d5:8d:87:33:00:35:1a:7f:4d:
         19:34:59:78:d2:ad:08:29:07:9e:f5:1a:19:68:9e:fd:24:5a:
         6e:b9:06:8c:6a:eb:49:23:cd:b6:1c:3d:47:00:f2:fb:61:42:
         9c:04:fc:89:2f:d8:3a:8f:66:ae:14:bf:0e:b8:9a:8c:5c:d2:
         d8:89:21:c9:ea:0c:e1:7e:37:4e:c6:22:de:f8:26:d2:0e:32:
         9e:d7:f5:c0:96:f7:50:ff:c4:bc:07:f4:94:09:9e:89:0c:aa:
         a7:f7:a1:54:55:5c:2f:9d:eb:4f:54:e6:fb:6f:9b:44:8f:44:
         9c:fb:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:22:53 2024 by rpki-client on console-fra.rpki-client.org