Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa
File:                     30f2300f-beff-367a-a51c-b65be158cc40.roa (raw, json)
Hash identifier:          JaAcxL88CezLl4j8jLJgbRua80K+rZqQQWc23LNDn84=
Subject key identifier:   C6:1A:9C:36:5D:65:D9:E9:3F:55:08:99:67:1F:C8:D1:2A:6F:4F:79
Certificate issuer:       /CN=83220b5e-8104-4c4e-bbce-305b174b684a
Certificate serial:       010D0C9F43285845456ABE86CF163AE761806980
Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa
Signing time:             Wed 20 Mar 2024 14:31:56 +0000
ROA not before:           Wed 20 Mar 2024 14:31:56 +0000
ROA not after:            Tue 18 Jun 2024 14:31:56 +0000
asID:                     53698
IP address blocks:        23.137.120.0/22 maxlen: 24
                          23.137.124.0/23 maxlen: 24
                          23.152.192.0/24 maxlen: 24
                          23.152.194.0/24 maxlen: 24
                          64.234.224.0/22 maxlen: 24
                          23.152.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:6a:be:86:cf:16:3a:e7:61:80:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a
        Validity
            Not Before: Mar 20 14:31:56 2024 GMT
            Not After : Jun 18 14:31:56 2024 GMT
        Subject: CN=67aa394b-4f8b-470a-b249-09a25327c89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4c:72:ac:e2:f5:8d:a0:57:03:51:88:25:cf:
                    33:e0:0c:9a:ad:ff:c9:fd:ed:f8:cc:3b:26:d3:fa:
                    e2:06:02:3a:5f:6d:32:94:14:b4:65:99:70:8b:91:
                    5a:4d:03:37:37:3f:7b:e6:eb:f3:97:98:61:eb:35:
                    1b:a0:36:f7:fa:34:6a:13:b2:ac:b0:25:dd:bd:ad:
                    ba:59:c6:c1:d5:6a:12:65:40:22:14:50:dc:70:b9:
                    08:4b:82:39:9b:da:3e:a1:cf:fb:10:0f:3f:ed:82:
                    f0:44:a0:d5:02:f3:11:33:86:19:b9:ca:16:fb:23:
                    58:2b:56:57:0c:b8:d5:1b:4f:c8:92:b7:42:19:7c:
                    d4:df:16:3a:2b:f8:97:9c:9d:78:b5:82:3e:45:32:
                    4a:7b:a1:76:67:10:43:df:5b:f1:52:b8:27:58:b4:
                    f5:47:ca:c9:a2:cc:e0:08:36:35:a2:7b:78:41:0b:
                    b3:e8:8b:be:54:a6:0c:11:54:d4:a1:f6:87:cc:33:
                    19:2e:5c:ad:cf:3d:82:64:ef:aa:18:6c:f2:6d:8c:
                    0d:8d:51:45:23:41:d0:c6:39:aa:02:77:65:41:ed:
                    bd:ce:b3:8d:eb:19:a4:83:60:df:92:ce:14:a9:d2:
                    94:f3:21:f4:64:16:5c:68:84:e9:2f:4b:bb:6e:e6:
                    00:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:9C:36:5D:65:D9:E9:3F:55:08:99:67:1F:C8:D1:2A:6F:4F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.120.0-23.137.125.255
                  23.152.192.0-23.152.194.255
                  64.234.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:73:2b:eb:56:e6:4d:5a:30:90:9b:4c:e4:5e:63:34:91:89:
         af:13:3a:da:40:e6:a5:52:e6:dd:85:7e:83:8d:a1:11:88:6d:
         33:d7:07:84:05:0e:7a:ff:0c:23:f7:6f:23:c3:de:74:17:c3:
         c9:27:de:8f:7f:6f:63:2f:91:bd:fb:30:19:43:80:25:24:0c:
         63:65:4d:39:b6:8f:20:77:6c:29:4c:1b:f2:75:c4:7a:f6:2a:
         fa:ff:89:6e:e2:87:be:0a:7f:7c:ee:7a:2b:e3:ba:db:21:f8:
         a2:93:b5:ae:d0:e7:e8:f9:60:ea:7b:c3:6a:d8:3f:35:50:e4:
         53:da:20:59:0b:84:9b:e7:bd:4f:81:9d:5b:6f:77:62:6c:98:
         42:03:8f:e2:72:c1:92:37:c3:b1:cc:38:6b:0d:79:c6:13:2c:
         ef:ce:b2:8d:ca:02:72:6b:82:6a:b1:0d:bf:90:38:dd:12:bb:
         f6:a7:5e:8a:2d:d3:61:d1:db:26:d8:2d:31:75:be:90:24:ad:
         dc:b3:45:01:b8:af:bd:ef:de:18:36:15:8f:36:7f:83:c9:4d:
         32:75:ea:28:ae:a8:5e:30:f5:9e:61:2e:25:8b:b5:42:09:75:
         64:22:e8:d0:27:13:55:d2:03:82:5e:c7:52:e6:7e:12:ab:30:
         c2:4f:74:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:13:02 2024 by rpki-client on console-ams.rpki-client.org