Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa
File:                     032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa (raw, json)
Hash identifier:          alvCJyd/uD1LlHwA+MatIib1tMdvjTjS/sKgRKcCBmo=
Subject key identifier:   99:F1:CF:7C:37:6A:A1:16:8C:0C:88:44:72:22:20:88:A2:6F:C1:08
Certificate issuer:       /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
Certificate serial:       010D0C9F43285845CB90E37C3DFA62C62DEE1FC0
Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa
Signing time:             Tue 07 May 2024 15:47:06 +0000
ROA not before:           Tue 07 May 2024 15:47:06 +0000
ROA not after:            Mon 05 Aug 2024 15:47:06 +0000
asID:                     22597
IP address blocks:        23.159.120.0/24 maxlen: 24
                          2607:5fc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:90:e3:7c:3d:fa:62:c6:2d:ee:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
        Validity
            Not Before: May  7 15:47:06 2024 GMT
            Not After : Aug  5 15:47:06 2024 GMT
        Subject: CN=19d8ba05-74fc-4663-849a-d025a2c0498d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:c7:b8:21:d5:19:b1:e0:fe:7e:44:3b:bc:
                    af:90:f8:df:2c:96:d4:d3:bd:5f:dd:4c:d2:22:b3:
                    6c:6b:35:a9:71:4b:d5:e7:0c:ea:6e:00:f2:f2:21:
                    02:58:f8:11:ae:bf:16:ae:f7:f7:bb:fb:4e:d6:95:
                    2a:3a:94:b2:c6:12:7b:60:c7:33:dd:20:cd:e8:f6:
                    a1:68:34:a7:4f:19:34:5a:56:54:10:b7:aa:cb:53:
                    f0:13:d8:32:fe:95:35:0c:35:13:a2:31:c4:95:da:
                    39:19:64:af:e5:74:c4:b4:63:02:98:53:f3:02:af:
                    59:a9:08:5d:05:87:5c:e5:54:cf:bd:6e:6f:f1:e8:
                    92:5b:2c:55:75:9d:b2:06:ab:1e:d3:76:f5:4c:9b:
                    be:ca:fb:7b:5b:ca:25:10:ee:70:2a:5a:b0:97:e6:
                    ff:ee:5f:e4:e4:cc:18:d1:1c:ce:0f:5d:a8:77:08:
                    f1:4d:4e:48:72:18:c5:bd:80:34:6c:d7:b0:e0:88:
                    86:e6:13:cc:84:f2:2b:a0:b1:8b:bb:e0:94:6e:3b:
                    a5:28:ee:2b:f6:b0:f8:57:8c:8c:10:a9:29:cc:e8:
                    3f:57:c4:82:d4:98:5d:18:a9:b0:35:d3:99:b5:61:
                    5f:cb:3d:01:28:35:94:a6:cf:58:9c:17:92:ae:df:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F1:CF:7C:37:6A:A1:16:8C:0C:88:44:72:22:20:88:A2:6F:C1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl

            X509v3 Authority Key Identifier:
                keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.120.0/24
                IPv6:
                  2607:5fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a9:fd:fa:f0:0c:7f:fb:f0:14:ba:73:35:f8:54:84:8a:7a:
         1c:b7:4f:63:6b:fd:39:c1:c3:39:60:6a:2f:58:90:c0:26:b8:
         e2:37:71:3a:f2:5c:57:dd:82:94:2c:fc:e1:70:86:6c:8f:30:
         a8:44:df:ad:30:7a:70:bf:42:40:f8:e3:a7:90:9e:4a:9f:77:
         60:f6:c7:4d:ee:17:b6:3f:8b:4d:3a:c2:99:cb:26:ac:26:42:
         4b:3a:62:d6:04:ab:52:e2:07:17:ab:42:12:2f:f1:2f:a0:1a:
         f9:82:82:b9:66:1a:36:78:48:38:36:68:1a:93:54:bc:4f:76:
         2e:e6:89:fe:de:aa:28:c3:37:d8:ea:64:9e:68:0d:ab:6e:84:
         6d:41:41:46:25:2c:6b:80:16:4b:36:46:a6:66:19:05:48:45:
         2a:ff:c3:c8:73:81:bc:6e:4e:ec:6d:25:c2:ba:cc:27:0a:22:
         39:46:1b:6e:e9:b2:66:5e:00:2a:31:ac:26:81:42:89:96:26:
         fe:d9:46:6d:52:9e:d7:c9:34:e5:53:ea:5a:81:82:1d:65:fb:
         b9:50:a1:65:8e:d4:40:b2:af:57:53:cc:1c:4e:29:d2:90:3c:
         d7:a9:96:00:78:c5:16:43:e7:1f:4b:a3:3f:3d:e3:54:66:6b:
         d3:ba:11:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:24 2024 by rpki-client on console-ams.rpki-client.org