Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/90ee013e-00a8-37fa-b84f-a76b8a952c88.roa
File:                     90ee013e-00a8-37fa-b84f-a76b8a952c88.roa (raw, json)
Hash identifier:          VqN5G31ucKOmddkvNA+QuGKTUKgQ7aEM0NHeca6IsYI=
Subject key identifier:   82:75:DE:BF:CC:FC:8F:5F:CF:8F:73:E8:DD:52:21:5E:3F:E5:BD:5C
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F432858457FDDE58EE4DD678BE5AF3D80
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/90ee013e-00a8-37fa-b84f-a76b8a952c88.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     30456
IP address blocks:        23.145.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:e5:8e:e4:dd:67:8b:e5:af:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=946913e4-e73a-40ac-a94e-2d39feeea2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:c1:19:ab:79:d6:17:da:22:e8:4b:5e:7b:
                    57:f2:f1:7d:fe:a3:38:cf:19:d3:ae:89:e4:21:91:
                    cf:6d:03:cc:9d:69:fb:01:bd:47:6d:79:d3:5e:b7:
                    01:a0:84:bc:3b:b4:2b:de:99:2e:86:2a:c6:ec:7a:
                    a3:57:a7:5c:f8:f1:27:96:42:2c:97:b6:92:0d:cb:
                    d4:a5:68:c1:83:c8:ab:c6:d9:a0:78:4f:30:ac:c7:
                    e0:b7:98:b7:90:7f:d0:22:21:93:67:67:4a:7d:15:
                    91:f6:7c:8f:2e:89:bd:17:24:fb:04:6f:f2:62:52:
                    fb:b5:a2:fd:17:72:7e:df:64:00:fe:cb:4f:85:b0:
                    1c:22:12:1b:28:fa:c6:09:64:90:7b:9f:b6:6b:f9:
                    e4:2e:fc:ee:c9:0b:54:90:e0:2c:01:cd:54:01:5f:
                    a9:e5:23:f8:96:89:89:8f:40:fd:a1:c6:6f:3d:16:
                    07:33:93:82:9a:f5:6d:d4:2a:3f:5c:0b:bc:d1:e2:
                    cd:53:0e:59:2b:6d:2d:e7:8f:58:da:f8:02:ac:70:
                    36:25:b9:9f:b9:4b:5b:13:c1:e8:cd:57:48:25:c0:
                    0c:5f:74:4c:1a:00:38:3d:ec:89:f0:36:e1:f5:44:
                    f6:2e:c4:7d:bc:2b:72:9f:27:a2:28:c8:d1:9b:25:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:75:DE:BF:CC:FC:8F:5F:CF:8F:73:E8:DD:52:21:5E:3F:E5:BD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/90ee013e-00a8-37fa-b84f-a76b8a952c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:19:b9:02:a3:d9:6b:ab:5d:dd:19:66:8f:e4:95:d7:75:
         ff:9a:a1:ab:de:f1:14:02:80:1a:d7:d7:9d:7d:f8:a1:70:01:
         ec:2c:27:1e:03:36:88:63:79:d3:70:d8:10:29:42:13:d2:88:
         f7:2f:98:1b:24:60:d8:71:1b:c3:71:ff:e5:6a:d5:0f:6b:50:
         83:15:a9:44:12:cb:fa:0a:db:da:31:59:5f:4f:04:ec:74:c3:
         aa:4e:2b:69:40:91:a8:24:33:54:e4:dd:20:20:0f:d0:45:90:
         75:b5:e7:ad:c4:a5:fb:49:63:1e:33:f1:a9:a0:22:1c:f6:4e:
         42:63:cd:7d:90:21:69:b7:80:53:e9:a6:ed:2d:96:c8:b3:c0:
         69:68:08:35:30:30:fc:46:25:3f:ea:81:d9:04:d4:a2:b8:94:
         b2:cb:88:87:cb:95:0d:36:0e:9a:87:59:83:32:f9:60:d8:f3:
         14:f7:ba:72:2d:fc:8c:f9:f1:15:7b:45:65:61:e2:e4:5c:18:
         17:e5:86:8e:04:12:7e:b7:09:9f:fd:5f:77:82:e1:45:a6:43:
         71:9b:4f:3e:59:e7:70:3c:2f:77:3e:34:55:55:ca:c3:2c:91:
         3e:de:b6:c8:4d:7a:05:c1:cc:a9:d0:11:14:c8:d4:b3:69:2c:
         75:82:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:19:21 2024 by rpki-client on console-ams.rpki-client.org