Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/d57e7f91-6249-391c-9109-024819383866.roa
File:                     d57e7f91-6249-391c-9109-024819383866.roa (raw, json)
Hash identifier:          oFdBcPKvLe79vrZtCvNnDuHn2XJIc0AUJvObMwLorCw=
Subject key identifier:   12:62:1B:82:F3:22:26:6A:68:36:0B:56:57:62:0C:39:AF:A5:44:C2
Certificate issuer:       /CN=5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba
Certificate serial:       010D0C9F43285845CF6E3E985D142B8D570D1720
Authority key identifier: E7:25:80:10:AC:E9:3C:2E:71:67:98:DD:74:69:33:AC:C5:77:87:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/d57e7f91-6249-391c-9109-024819383866.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     211954
IP address blocks:        23.155.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:3e:98:5d:14:2b:8d:57:0d:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=cf649a76-4f05-4b8c-baa8-a6ae7316e503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:48:fe:46:e2:83:ea:03:90:a1:97:fe:3b:
                    46:59:ca:bd:9f:4c:15:f6:74:7f:e4:14:64:0d:7e:
                    10:21:6e:4e:8c:d2:a4:ed:d5:76:c1:2f:2c:7f:6c:
                    e1:a8:fa:07:04:55:37:c3:0b:e0:85:3e:3e:0f:b3:
                    6e:e8:4b:e6:23:80:f9:e3:9c:9f:f4:9a:45:6f:69:
                    49:4b:c6:18:5c:ef:e9:d3:8e:9f:1d:bb:d0:f7:be:
                    c2:ca:e5:af:c1:5b:2e:67:24:2e:47:3b:13:f0:61:
                    9c:8a:e1:c2:d4:29:bc:b9:f2:16:44:09:cb:14:53:
                    7c:5c:9b:7b:28:2f:f7:96:e4:91:8e:d5:73:4e:c2:
                    1e:6b:60:99:40:c6:f9:4f:72:dd:4f:e8:2d:c3:47:
                    af:5b:f2:b7:ec:a2:08:f3:94:75:4c:43:97:c4:34:
                    23:2c:34:66:57:c1:7a:09:44:83:eb:39:78:26:a6:
                    16:1c:25:21:68:0f:c4:f2:93:ff:5e:df:a0:fd:c6:
                    d0:d4:26:1b:76:9b:54:78:1c:56:eb:2c:e1:28:2b:
                    1d:2c:4a:f0:b7:ff:9e:e2:8b:1e:5f:66:57:83:54:
                    d7:84:71:c1:53:f8:9e:60:f8:56:a0:2a:ad:ad:97:
                    da:a5:56:a2:99:db:13:3a:f5:04:b6:3a:0a:a1:6a:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:62:1B:82:F3:22:26:6A:68:36:0B:56:57:62:0C:39:AF:A5:44:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/d57e7f91-6249-391c-9109-024819383866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.crl

            X509v3 Authority Key Identifier:
                keyid:E7:25:80:10:AC:E9:3C:2E:71:67:98:DD:74:69:33:AC:C5:77:87:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:30:cb:2d:44:2d:69:c0:f3:2a:6a:57:3a:a4:c6:dc:fa:cf:
         8e:ea:85:29:9a:e7:27:8f:8f:bc:f0:93:6c:09:9d:13:49:fa:
         97:13:ea:22:5d:8c:65:cf:f8:60:a7:ba:61:3a:65:47:af:f6:
         72:c8:cc:49:a4:ba:79:39:29:35:2f:c4:5a:a6:90:a8:de:11:
         d1:78:49:8d:26:ea:ab:bb:07:52:31:f5:65:9c:17:8b:db:5c:
         3c:31:06:9b:60:c6:f0:4b:9b:f3:a0:77:46:6a:39:8c:0a:7b:
         b3:58:77:a3:32:40:ab:06:d9:81:ee:0a:db:78:73:fc:9d:d6:
         68:0d:ca:5f:d4:e0:5b:d2:a1:84:04:10:2e:4b:02:94:f6:b9:
         2a:1e:c4:4c:d6:91:b3:c0:80:38:4e:69:f0:31:04:bf:ba:f3:
         cb:b6:a7:fb:da:90:5c:18:f7:79:f9:c3:2a:1d:b5:77:06:80:
         1c:e4:45:2b:25:6e:d5:a8:c1:b5:0d:ed:fe:16:9a:61:94:1f:
         6f:0d:c6:7d:8d:f4:61:75:ce:76:d2:35:2e:2b:0b:47:72:2c:
         39:8a:02:af:59:c5:b4:f1:11:1c:84:cf:cf:3b:1f:ca:d2:ec:
         1f:97:73:41:c1:0f:c2:e1:d2:01:44:18:43:91:e6:d0:7e:d7:
         3f:3f:e8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:21:11 2024 by rpki-client on console-ams.rpki-client.org