Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8a6abe29-11e1-3e4e-8bfc-693196ec7ab4.roa
File:                     8a6abe29-11e1-3e4e-8bfc-693196ec7ab4.roa (raw, json)
Hash identifier:          3Iw0RlBxtlLYDVLc1KflGNKBNZAvq20txdVe28wcW+4=
Subject key identifier:   50:0A:91:59:20:75:8A:29:90:50:CF:EC:05:0A:F0:7F:A5:A7:2F:D8
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584597CC794F64136A462CBF9F80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8a6abe29-11e1-3e4e-8bfc-693196ec7ab4.roa
Signing time:             Fri 19 Apr 2024 02:45:07 +0000
ROA not before:           Fri 19 Apr 2024 02:45:07 +0000
ROA not after:            Thu 18 Jul 2024 02:45:07 +0000
asID:                     4229
IP address blocks:        23.91.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:cc:79:4f:64:13:6a:46:2c:bf:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 19 02:45:07 2024 GMT
            Not After : Jul 18 02:45:07 2024 GMT
        Subject: CN=e8ea09df-02d1-4e76-a9ee-edec4d450296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:ab:87:76:0f:21:30:ae:10:1e:47:3f:f6:
                    81:b0:91:21:71:21:17:cf:3b:08:fe:91:fd:2a:e2:
                    c4:b1:3e:f2:d5:ec:83:69:13:be:4b:36:8a:e7:00:
                    08:fb:f7:78:02:38:c7:6a:c1:e8:02:01:ca:00:37:
                    22:d8:76:53:10:bf:4f:dd:ba:9e:0f:07:4d:1e:4b:
                    d5:3d:32:68:8d:2b:46:51:26:7a:3a:31:90:74:91:
                    1e:b4:a3:00:e1:e4:9f:b2:7d:af:f6:e7:4f:26:6b:
                    1b:c3:21:82:81:b2:d9:67:b1:30:32:12:9b:d5:17:
                    9e:82:cc:33:6c:a5:36:4a:11:c2:98:67:3a:79:fe:
                    21:d1:e7:5b:5b:da:41:a3:f7:fe:4e:0a:6b:cf:b0:
                    9f:73:32:a2:1a:84:5d:ac:a9:7a:56:fc:1f:02:f7:
                    4b:11:8b:29:26:24:ac:fc:7e:dd:db:b0:fa:5a:61:
                    b7:ff:78:a6:f9:29:5d:36:86:24:4c:a3:1d:f9:3c:
                    9e:92:a0:56:c9:e1:0c:41:7f:fa:e5:bc:e5:70:42:
                    55:17:f8:8f:f7:53:16:01:58:f9:1f:3c:26:c7:97:
                    da:e0:51:57:87:ff:6c:e9:5f:14:f7:fa:bb:d4:1c:
                    54:d5:d8:d8:c3:65:13:56:78:e4:d1:c5:db:08:56:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0A:91:59:20:75:8A:29:90:50:CF:EC:05:0A:F0:7F:A5:A7:2F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/8a6abe29-11e1-3e4e-8bfc-693196ec7ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:54:dc:39:7f:b5:aa:fb:57:7f:65:b7:66:b4:55:dc:80:
         d7:7f:cd:39:36:f2:92:11:55:50:f3:3e:12:9a:2f:16:6a:26:
         f9:0d:2f:0f:f1:da:7c:19:ea:b7:d8:bf:60:ff:a9:78:65:b5:
         91:e2:77:6a:be:34:41:98:ae:a8:88:3a:0f:42:01:e9:41:fb:
         59:22:8c:ea:1c:a3:3f:73:29:37:1b:f1:6c:9b:6f:83:49:60:
         2e:50:cb:69:4c:e2:0c:f8:bb:c0:f0:68:48:f5:46:cb:1a:8c:
         6d:de:e0:18:14:92:eb:48:4a:f3:d6:d6:44:74:b9:26:9c:01:
         61:ca:96:d1:14:f0:60:00:a1:c2:81:6c:b2:e7:a6:b1:0b:9d:
         cc:7a:ce:96:fb:2b:e0:8e:95:2e:b2:89:18:dc:57:2e:b9:15:
         ee:13:2f:34:83:3b:ca:51:ed:c7:ab:35:6a:2d:fa:c0:a7:a4:
         7e:40:e3:3c:6f:27:70:69:18:50:92:6c:ea:92:6b:5f:35:26:
         27:61:9e:ff:6b:d9:f5:2f:7d:5e:f7:bb:76:fa:fe:93:8b:b8:
         83:d1:74:cb:41:36:13:42:e1:45:53:03:46:9a:24:f4:c6:66:
         d5:06:f6:55:5f:7e:eb:43:e9:b1:0c:55:76:bc:91:31:52:da:
         c2:02:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:57:39 2024 by rpki-client on console-fra.rpki-client.org