Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e73ddb9c-3a32-32f0-a46b-c45154dcd057.roa
File:                     e73ddb9c-3a32-32f0-a46b-c45154dcd057.roa (raw, json)
Hash identifier:          7qLgGiE4e4W5meREvZMZmZNLy9yxr4A3BSG63U1BADI=
Subject key identifier:   11:2A:1D:C9:FE:9E:F0:EF:FC:53:CD:62:2E:CA:A6:DA:20:BA:21:6C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453CDD583FD510B284A8E12300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e73ddb9c-3a32-32f0-a46b-c45154dcd057.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        23.17.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:58:3f:d5:10:b2:84:a8:e1:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=8030578d-9b5f-4a0a-807e-f2c4ed61b4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:57:ba:fd:a9:86:13:7b:c0:ab:92:99:66:
                    f3:22:0e:6a:9c:06:eb:6b:c9:63:44:f2:1c:ae:96:
                    44:03:51:79:60:fc:7f:ce:37:f9:ee:67:06:1c:bd:
                    7a:b8:0c:0e:85:f0:f3:c4:de:62:7b:46:7b:a7:e9:
                    49:a8:c4:fb:1c:7a:a3:ab:e5:01:fa:1e:ff:16:22:
                    52:62:6b:ee:5b:38:74:fc:c8:dc:65:a0:e9:1a:ae:
                    e7:56:f0:9c:1b:fe:02:f0:70:21:d6:dd:de:6e:de:
                    85:fe:b7:0c:b1:b8:bf:49:ec:b7:a5:cd:64:e7:a5:
                    c3:71:04:9b:d6:ba:64:c1:d0:59:60:f3:e5:f1:1d:
                    88:3f:69:f4:43:4d:9c:16:a3:d2:9d:25:a9:ff:8f:
                    66:f5:5d:13:6b:ea:be:6c:32:65:19:25:83:1b:50:
                    81:49:a5:6e:0e:35:1a:f7:33:0a:2f:e4:95:25:6f:
                    98:da:b7:1e:fc:78:40:ed:53:ae:b9:49:c1:96:31:
                    b5:cf:af:68:39:f6:f0:5b:68:5e:46:65:47:bb:09:
                    30:b1:1f:b2:73:f1:f9:bc:3f:c7:ed:2f:50:ab:fb:
                    29:4e:5f:50:9c:19:82:f9:c0:ab:d9:c3:e8:1b:df:
                    63:9b:68:96:96:11:0c:2e:19:90:38:ad:17:b7:58:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2A:1D:C9:FE:9E:F0:EF:FC:53:CD:62:2E:CA:A6:DA:20:BA:21:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e73ddb9c-3a32-32f0-a46b-c45154dcd057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e2:67:bd:f0:03:8b:98:e3:aa:70:37:f1:16:7e:7c:eb:22:
         19:66:c5:3f:a4:db:c2:30:49:4e:26:b9:d7:3b:7e:f2:fd:8e:
         65:f8:41:49:0d:39:6d:a6:3f:87:47:0b:fe:0c:e5:85:07:07:
         a6:cb:c4:c1:e0:d4:0d:35:45:b7:f2:3e:94:6c:46:04:6f:5e:
         61:f2:c6:c0:ad:c6:c9:72:2f:b4:07:e9:7a:ea:ec:97:4d:b8:
         7b:ea:2b:a2:75:c4:29:eb:72:2c:88:25:78:fc:2c:e0:11:00:
         7a:b8:1f:ad:46:64:2d:c7:9f:ca:0a:6b:ef:7e:b9:2a:d9:a0:
         ab:26:98:99:e5:77:ca:fe:e1:f9:e8:56:bc:ad:36:e8:66:b7:
         90:c6:a7:43:04:c9:c6:0c:67:48:58:df:77:4e:02:56:81:af:
         88:8d:bd:55:7a:05:90:1e:4a:ec:4a:8e:6b:fe:73:11:04:8e:
         e0:d8:27:56:91:01:3a:bb:a6:2f:0e:6d:17:2f:40:0c:4b:f0:
         92:30:b6:bd:f4:9a:ab:95:23:a3:a7:90:d2:56:97:0a:95:d1:
         c8:6e:9b:1d:fc:3d:98:49:06:a0:11:e0:99:79:cd:0c:36:79:
         e1:50:77:42:53:7f:c4:45:8e:95:78:d2:ca:b1:a7:c4:be:f5:
         96:5d:73:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:11:01 2024 by rpki-client on console-ams.rpki-client.org