Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/43d9c709-1869-3602-ba60-82f81826def9.roa
File:                     43d9c709-1869-3602-ba60-82f81826def9.roa (raw, json)
Hash identifier:          iW29lQDdEVLqm3vNQIol9szxWLA2VAb4Q1P5znsJjco=
Subject key identifier:   DC:02:39:A4:9E:FE:64:51:B3:19:F6:3D:74:68:4B:FB:DB:B2:C1:7B
Certificate issuer:       /CN=2d64a9b2-da39-490b-a76e-0928cd57270b
Certificate serial:       010D0C9F43285845EF8924A561CA0948271A5820
Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/43d9c709-1869-3602-ba60-82f81826def9.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     54041
IP address blocks:        23.142.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:24:a5:61:ca:09:48:27:1a:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=7a2a8618-4f13-4739-a74c-051e43c424e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:a5:c8:f8:5d:3c:fc:77:a0:49:e4:92:4d:
                    c9:f8:ee:77:2d:97:a1:5c:bc:76:af:5d:d5:bb:10:
                    12:39:47:9a:d7:62:77:4d:15:e1:1e:40:9f:7b:16:
                    b5:dd:70:84:e8:b7:3b:e6:a6:77:72:e7:16:b2:27:
                    97:a1:f5:09:24:56:41:0f:e2:b1:71:21:6b:73:c7:
                    f7:ac:37:af:66:78:bb:a0:b0:4f:18:18:b9:42:d8:
                    62:bb:1d:ba:0a:f5:9e:e5:45:7e:3f:9a:31:2f:db:
                    f4:74:ce:a3:ee:a5:86:41:07:93:25:1c:97:b0:17:
                    c7:0e:b6:3d:45:e6:8e:04:e9:01:ec:b1:36:47:89:
                    db:b0:7c:66:43:a4:d8:ff:3c:9c:b9:89:40:f9:72:
                    dc:64:72:70:da:77:df:d7:09:8c:0c:72:5e:9f:04:
                    24:3b:e7:2e:d6:51:57:e1:eb:da:6f:f5:40:e1:52:
                    f7:ed:60:b2:3a:63:17:cb:4c:93:a8:57:fb:54:6d:
                    c5:3a:11:49:ac:7e:1a:f8:42:c2:90:a7:bd:c9:8a:
                    da:b9:7b:30:90:d6:64:44:75:4b:9c:30:24:ec:7e:
                    9e:e6:4e:87:4a:d0:44:53:40:2b:f0:f4:13:6e:04:
                    8e:4b:98:a6:18:0a:00:51:26:e9:6c:d9:9f:ba:4a:
                    16:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:02:39:A4:9E:FE:64:51:B3:19:F6:3D:74:68:4B:FB:DB:B2:C1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/43d9c709-1869-3602-ba60-82f81826def9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl

            X509v3 Authority Key Identifier:
                keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:b9:7a:08:fe:96:eb:12:6f:7b:c3:e7:e6:39:9f:20:6c:
         7b:6e:27:9d:3d:46:d5:f8:14:7e:18:ed:be:7e:60:3e:87:f2:
         b3:7c:a5:e5:f0:62:0c:79:aa:c1:ab:a6:c4:35:5d:9f:c9:13:
         10:d5:ad:3a:6c:ee:c2:b2:8c:a3:54:22:da:77:92:be:62:6e:
         bf:5a:ad:2e:2d:3b:0f:7e:af:55:a3:ec:1f:38:94:83:44:f9:
         bd:ea:42:4c:a2:c6:34:cf:06:54:bc:67:d9:bf:db:40:aa:92:
         09:0e:f7:e6:3d:bb:8d:96:90:c5:39:9f:fb:35:6b:92:3c:d8:
         94:c5:09:ef:87:70:b2:0f:86:a6:56:7b:b7:0c:04:ec:d5:b8:
         f0:98:7b:61:c8:18:4a:c0:9e:d3:11:80:09:1c:3b:73:db:66:
         da:a4:e4:60:fa:fc:88:37:f1:9e:ad:7c:a4:9e:20:f3:0a:e1:
         e5:07:f2:a5:d4:19:10:60:d9:aa:c5:44:d7:8a:1f:ae:a7:84:
         ac:0a:6a:08:4f:b4:b2:e7:c9:1e:7d:5f:ba:fd:b3:f8:6b:75:
         5d:6d:b7:8f:09:d5:53:45:e2:a1:b8:a8:f5:c6:d7:66:86:78:
         68:1e:0b:c9:2c:c3:6f:68:13:3c:08:1e:73:35:6b:aa:f5:2f:
         53:34:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:50:29 2024 by rpki-client on console-fra.rpki-client.org