Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
File:                     b7201278-097e-3b32-a4e1-96b53fb35fb0.roa (raw, json)
Hash identifier:          9YM9dYH9Qpxtq+OSyWrd2E1252Z0a05DffBxT09BeBc=
Subject key identifier:   2A:67:D5:06:5D:6F:A6:72:88:3A:6D:45:E8:90:02:78:76:C2:C2:12
Certificate issuer:       /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Certificate serial:       010D0C9F432858454F02C48D7896241C056AC300
Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     36222
IP address blocks:        23.138.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c4:8d:78:96:24:1c:05:6a:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=ad8d9e0a-29c5-462a-bced-d7656664fccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:ef:19:d6:8e:f6:50:15:a1:64:63:37:fb:
                    9a:f2:e8:f9:f8:0e:50:3d:ef:79:7f:5d:e1:42:3a:
                    f8:79:54:19:f5:d6:e7:a2:73:fa:d7:6e:49:7e:30:
                    a6:57:7e:4b:ec:f7:7f:4b:a8:0f:21:26:4d:c0:24:
                    2d:de:d2:fb:9c:09:fc:21:c2:b5:50:74:8d:8b:16:
                    78:c2:eb:1c:ef:87:cb:7d:1e:5e:72:d5:1b:4d:7b:
                    6b:3e:67:3a:15:e4:97:89:8c:85:0f:50:9b:82:56:
                    eb:12:13:f3:9e:80:ff:02:95:ae:0a:91:d4:26:99:
                    35:12:9c:6c:76:de:73:ea:1b:72:0d:99:ac:d8:4b:
                    da:09:b8:f2:12:87:6a:01:ec:73:ff:cc:3d:18:67:
                    01:91:dc:f0:4d:c6:31:90:65:76:a3:05:a1:49:30:
                    67:65:df:26:86:b6:1e:92:5b:85:ab:8f:41:44:d3:
                    a8:b9:0f:29:1a:61:b7:eb:39:1e:12:aa:67:6c:d3:
                    46:26:94:c9:c3:fc:1e:d0:5f:e5:07:34:2d:fb:b9:
                    cf:d7:ce:ac:0c:15:ee:df:75:70:e7:dc:42:4c:c4:
                    4c:ec:bb:fb:13:f4:db:f2:cb:01:11:32:73:2d:5c:
                    38:8a:d6:30:3e:29:83:2e:cc:97:87:00:8e:c4:d1:
                    d8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:67:D5:06:5D:6F:A6:72:88:3A:6D:45:E8:90:02:78:76:C2:C2:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1a:58:6c:7e:f3:67:e4:c3:a2:4d:e6:12:b3:d6:ea:65:a1:
         dd:39:de:9d:c0:03:8c:fe:33:e7:ea:65:ae:34:82:76:90:1b:
         85:93:eb:52:c6:d2:6d:92:ee:5a:5d:44:f0:10:4e:55:06:a5:
         48:63:2f:f6:45:93:c2:b7:fd:41:c5:ce:fe:7e:6b:f6:af:79:
         0d:32:ee:11:0f:ba:37:21:3c:49:bf:83:76:b5:e0:0b:bb:6d:
         e9:1a:bf:93:fc:5a:a7:02:2f:7c:ed:d8:88:96:22:cc:de:40:
         9b:22:48:75:41:1f:2a:a1:65:90:53:d8:95:a6:c6:35:72:82:
         9c:4b:1b:92:dd:0b:f2:5a:9e:10:f5:e3:e7:77:5a:8f:8b:b1:
         d9:3f:d2:9b:6d:30:19:10:69:f2:fd:36:bc:b7:b4:60:8c:fd:
         80:12:f8:ad:1a:91:77:d3:78:41:4e:41:06:0a:ae:ed:25:36:
         19:7d:b2:73:70:d5:7c:4b:b8:08:05:7d:1f:fe:7e:f2:73:97:
         76:c4:30:a7:92:86:d2:d4:c1:d1:35:ef:bc:ab:9f:33:70:eb:
         f7:91:0c:35:9f:23:68:b6:8b:eb:83:2a:be:a7:a5:00:e1:bf:
         4a:79:6a:73:25:bb:69:42:9b:ee:54:50:d1:9a:19:76:2b:4a:
         30:27:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:21:24 2024 by rpki-client on console-ams.rpki-client.org