Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/8ce9ca07-31f0-394b-a18d-14bc822f4e82.roa
File:                     8ce9ca07-31f0-394b-a18d-14bc822f4e82.roa (raw, json)
Hash identifier:          d1KVqODRV8b4en5MLq+ovEyS4FPC8rQn8Hl+UG66oCc=
Subject key identifier:   AF:D8:6B:C2:10:04:07:83:C5:6C:24:C4:6B:C5:00:6D:8C:6D:66:0D
Certificate issuer:       /CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6
Certificate serial:       010D0C9F43285845E193CD5C32E308BF32665080
Authority key identifier: 22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/8ce9ca07-31f0-394b-a18d-14bc822f4e82.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     19568
IP address blocks:        23.170.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:cd:5c:32:e3:08:bf:32:66:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=776008e5-8e38-47e7-bf0f-12b75f31a7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e0:56:b8:ee:d8:0c:30:a7:44:b3:56:2c:f9:
                    55:99:84:ec:22:2d:d6:65:cb:40:e0:7a:27:e6:ea:
                    a5:ac:73:44:48:1d:fa:73:35:c1:bf:d7:6a:24:9a:
                    a6:3d:24:62:da:2d:b9:60:b8:7b:20:7f:0e:a1:bc:
                    83:ca:ad:91:eb:59:f7:8e:49:5c:e7:75:e1:94:ab:
                    86:18:5b:a8:08:3f:0a:df:d8:eb:2a:ba:42:88:b5:
                    18:67:6f:a0:99:8e:40:33:21:78:10:6e:14:09:6e:
                    08:ef:b6:47:34:20:97:a8:19:d4:6b:78:e1:4a:da:
                    c3:53:63:6e:d5:e7:95:b8:5f:d9:d3:03:ef:b8:c4:
                    bb:96:8d:0a:0a:ed:93:be:cf:3b:a2:8d:eb:f8:02:
                    33:80:fa:5f:28:9b:5d:0b:35:74:ae:1a:50:84:39:
                    db:3b:a7:bd:52:40:4a:20:7e:4c:51:f0:5f:f6:a1:
                    47:95:d3:2d:3f:5c:35:1a:09:3e:18:4e:e8:93:08:
                    5b:db:ab:b2:5a:57:1e:c9:f3:b2:b9:68:14:74:2a:
                    36:2c:72:55:ff:42:4a:d7:1b:91:42:73:a3:39:b4:
                    bd:62:b3:aa:ec:ca:77:5f:3a:65:77:67:5c:61:0c:
                    a0:90:dd:f2:78:35:65:5c:c1:fc:a7:5f:80:ca:8f:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D8:6B:C2:10:04:07:83:C5:6C:24:C4:6B:C5:00:6D:8C:6D:66:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/8ce9ca07-31f0-394b-a18d-14bc822f4e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.crl

            X509v3 Authority Key Identifier:
                keyid:22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f1:f8:9b:dd:fc:33:68:ef:2a:88:a8:7a:c0:43:13:a5:3e:
         a3:f4:6d:34:0d:af:00:a7:66:50:b5:ae:97:60:58:15:1f:3f:
         49:44:13:bd:b8:00:9f:1e:b3:4a:8e:7a:f6:2a:1d:d7:7d:0f:
         d0:d8:de:d6:0e:f0:33:1f:d8:33:b4:eb:1b:a9:c8:32:6e:dc:
         0c:43:12:8d:db:01:b6:e9:0b:65:32:04:e5:d9:f2:23:24:e0:
         65:af:93:a1:d2:80:d1:ef:2d:15:e1:f8:8a:0e:64:5a:0b:44:
         22:e6:35:da:70:6a:5c:e6:0b:bf:f1:db:f0:63:c1:4b:0d:66:
         1f:a8:1e:e3:e2:4a:fa:af:87:ea:ef:2a:c9:15:09:87:c1:8c:
         88:1b:24:5f:60:8e:b2:64:08:47:93:b5:df:1f:74:16:99:b1:
         f9:2a:ad:e2:d4:19:5a:b5:10:c0:df:3a:54:12:24:4d:64:2b:
         5a:80:db:65:14:6b:e2:3b:3a:d8:cf:b9:3e:d9:8e:6b:51:42:
         92:7d:32:77:1f:79:78:03:97:83:71:cf:76:d4:64:85:8e:b7:
         f1:be:54:79:38:51:56:16:b7:d9:27:b3:ae:b2:c5:83:cd:cd:
         73:bc:29:65:63:8b:4b:df:23:26:d5:ec:51:6f:2d:88:85:40:
         05:73:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:10:11 2024 by rpki-client on console-ams.rpki-client.org