Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa
File:                     c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa (raw, json)
Hash identifier:          wjD3qgQgdaAI9NYVmLXh+vzp/fOhRpCYCwtg71ZniLM=
Subject key identifier:   62:81:84:E7:53:A2:7E:6B:45:06:8C:20:8A:24:10:99:6B:BF:E9:EF
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F4328584522759403945D861667B51700
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        23.161.104.0/24 maxlen: 24
                          2620:be:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:94:03:94:5d:86:16:67:b5:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=e2bc2bf0-1c44-4603-a987-424d8242c49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:99:8c:78:f9:86:7a:5e:a7:c5:d6:32:bb:2e:
                    54:9a:54:2c:43:e6:54:e3:70:19:79:91:87:7f:5e:
                    75:c6:63:8e:fc:21:ee:55:b2:03:c1:aa:bd:65:1b:
                    c8:f2:5c:e3:03:e0:67:8b:50:a8:f4:ca:12:8b:06:
                    9c:1e:1a:ca:7c:67:11:6b:35:7b:40:76:6e:2b:33:
                    37:f1:e2:df:13:e8:1f:e6:81:01:52:cb:16:f8:06:
                    05:8b:dc:03:1a:20:74:2d:29:8e:28:58:05:a5:4d:
                    10:46:ca:4b:60:86:1b:b4:1c:d3:a6:d7:3e:61:4c:
                    5e:55:69:5d:65:38:b9:3d:e8:86:e4:6f:fe:8c:3d:
                    df:75:91:aa:ef:58:b9:14:f7:3e:48:16:9c:75:f1:
                    ab:89:e4:fb:a8:a0:80:bb:93:d5:0f:bd:a5:7f:ba:
                    8f:c3:4c:53:30:52:25:8c:0b:c3:6d:5e:e5:3d:d6:
                    a0:cd:e8:b8:93:e0:32:f0:ea:61:77:64:3f:73:85:
                    1f:63:b3:28:74:b8:87:7b:4c:b8:f2:f6:0a:9d:92:
                    37:14:e2:41:bf:36:9e:8a:ba:36:88:8b:91:20:23:
                    4d:75:5a:8b:2d:bc:68:93:01:85:18:d5:21:bf:2a:
                    9c:4a:c3:4b:6e:ab:b7:d2:19:0f:29:c2:0b:a1:50:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:81:84:E7:53:A2:7E:6B:45:06:8C:20:8A:24:10:99:6B:BF:E9:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.104.0/24
                IPv6:
                  2620:be:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:89:ab:99:af:04:45:b5:60:09:75:f5:13:33:97:1d:e8:7d:
         0f:44:47:5f:30:7d:f7:1d:5c:64:f2:f6:d4:15:8f:d5:99:c9:
         0a:00:37:ad:6f:08:12:96:8e:d8:c6:cf:ab:ec:c5:43:2f:f4:
         11:df:5e:f7:bf:8b:f7:e6:20:5e:66:67:36:4f:11:f0:0b:6e:
         06:89:c7:79:ae:5e:57:03:ad:3e:3b:ae:dd:8a:b0:43:90:85:
         36:82:f2:7c:1b:1f:7a:4f:56:8d:c5:9a:c6:94:11:40:be:6f:
         14:bc:76:34:59:bc:56:25:ff:5e:a3:72:81:7c:fb:b7:c8:1a:
         11:93:49:37:0b:3c:ad:cb:78:48:77:70:28:98:25:0a:b2:a2:
         c4:e7:70:68:13:87:ef:f9:9a:89:17:f3:4d:a4:8c:ad:8d:7b:
         75:98:9d:8f:39:c8:a8:5a:9e:05:f7:3c:fa:d2:2e:b7:67:27:
         bb:fd:9e:71:90:c9:d2:05:33:50:07:f0:2f:eb:dc:07:ec:30:
         0d:11:79:d8:7e:af:8e:d0:28:60:fe:5b:43:eb:24:5e:b7:1f:
         66:bd:91:42:70:2c:2d:b7:0c:77:21:d4:1f:89:29:ed:28:0d:
         08:44:10:9f:9e:8d:d2:51:93:ae:85:07:0d:d6:3c:20:5d:db:
         c6:f6:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:03 2024 by rpki-client on console-fra.rpki-client.org