Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0557a10b-9013-3f1a-9a77-ea01653b32be.roa
File:                     0557a10b-9013-3f1a-9a77-ea01653b32be.roa (raw, json)
Hash identifier:          F20bSLS0t60POUADIelrxOMxlbKtbZdOdd/cct+sXrk=
Subject key identifier:   CB:35:D6:AC:AD:C9:81:45:E8:F2:70:20:5C:B8:28:91:90:96:15:6D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2FECAA3E236A758E05480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0557a10b-9013-3f1a-9a77-ea01653b32be.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     19157
IP address blocks:        23.86.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:fe:ca:a3:e2:36:a7:58:e0:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=f49a8972-cd72-47bb-8152-8d763dd7992d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:de:86:ac:6d:ef:62:6c:f0:24:95:98:f0:
                    d7:d6:45:d8:aa:c5:31:68:e4:28:38:39:5d:66:d6:
                    4b:28:fe:89:13:97:87:f6:7e:6a:48:a3:81:3f:57:
                    20:d8:04:ab:ce:b0:95:68:ab:6d:ab:62:21:3a:73:
                    c6:c9:a4:84:f5:56:77:e9:7a:b0:af:e8:18:b8:e9:
                    c9:39:e5:12:32:4e:a8:7f:73:21:e9:41:92:cb:a9:
                    57:60:a7:d2:ee:f4:3d:1d:7c:ea:ee:3e:d3:b8:6d:
                    c2:ff:fe:42:9d:d4:90:d4:7b:9a:91:1b:4c:17:56:
                    98:0c:38:96:d2:9c:7d:30:f8:2d:a1:44:01:62:12:
                    99:23:27:7a:72:8d:cf:fa:02:56:9f:e5:6e:a7:9e:
                    e5:90:11:a5:0b:b4:23:e1:bc:b0:45:05:62:e1:a7:
                    cf:83:a4:0b:50:1c:70:69:76:85:88:ca:8a:f9:cc:
                    63:bc:74:ff:33:3a:f0:25:33:18:c1:3b:cd:5c:2c:
                    30:30:6d:59:a7:5a:57:18:2d:ff:06:62:5f:53:d7:
                    79:a3:a4:2e:3e:ad:89:bd:b0:49:84:64:af:4c:55:
                    05:eb:e0:1f:a1:14:b5:c6:c7:01:39:a8:c8:57:6c:
                    32:5f:13:25:49:3f:e4:01:3f:2f:61:c9:10:e0:4a:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:35:D6:AC:AD:C9:81:45:E8:F2:70:20:5C:B8:28:91:90:96:15:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0557a10b-9013-3f1a-9a77-ea01653b32be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:f9:58:f9:73:40:ef:f3:1c:ef:7b:c1:08:48:62:0e:67:
         e2:7c:d8:30:31:31:fb:77:2c:44:17:7f:11:05:23:f3:db:8c:
         d1:b0:15:3a:85:32:fe:b0:5e:18:40:8c:22:0b:f2:f8:ef:e9:
         35:b5:37:01:5a:cd:91:32:d6:5a:a6:07:a5:96:3d:bf:75:3e:
         7f:fa:f3:2a:65:2a:a5:65:0a:19:00:62:83:16:b8:14:7b:b3:
         a6:da:bc:bb:fb:2a:5b:03:c8:d5:d6:c1:12:cd:4b:98:00:99:
         b6:b0:f2:12:b8:91:85:aa:9d:9d:aa:4f:34:fd:7f:fc:d9:f0:
         87:a7:7f:06:c2:e1:fe:28:0c:c5:0e:df:61:a6:97:89:4f:ec:
         20:34:45:42:48:30:79:52:d1:16:82:85:3a:f0:25:be:fd:61:
         a1:4d:60:bd:ec:ed:4b:f8:be:ae:01:c9:69:ab:f1:d4:64:6d:
         1e:3b:8e:f4:87:71:72:f5:23:09:b2:05:3c:9f:8e:bb:28:70:
         75:37:1d:cd:2c:db:a4:41:b0:3d:13:2d:60:67:bb:9c:fa:82:
         98:5c:f6:bf:9d:f0:83:68:83:00:35:06:89:14:5b:b8:c3:9e:
         7d:ed:b8:1f:cb:e2:d2:d8:40:09:2a:01:5f:8b:ef:a5:1d:df:
         ad:53:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:52:03 2024 by rpki-client on console-fra.rpki-client.org