Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa
File:                     1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa (raw, json)
Hash identifier:          6InOUEM+hhhliUNEEOI6PR2/pPFW0U+kUsX8nrJK4Rs=
Subject key identifier:   E7:83:42:E1:68:EF:5C:0D:F5:17:20:C0:5B:0B:16:47:D2:9B:CE:F5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2FE45C9D7E2FCF95F4A20
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     19157
IP address blocks:        23.86.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:fe:45:c9:d7:e2:fc:f9:5f:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=039db1f3-f936-4419-861b-11091469f88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:14:dc:fd:46:07:fd:38:ca:08:c9:c1:8f:
                    7b:ec:f2:67:6d:90:d3:51:8f:1a:c1:53:ee:73:a2:
                    ff:8f:7d:cd:e9:ee:20:52:2e:21:05:e3:d1:30:1e:
                    07:ad:3d:78:14:1a:79:7a:69:de:96:05:00:78:c7:
                    81:d1:64:15:8b:45:b6:42:7e:e8:e1:4b:63:ba:af:
                    25:d6:52:c0:ae:0f:b8:de:39:13:20:ee:8d:58:18:
                    a3:d6:31:45:58:b4:67:ee:6f:dc:35:f4:0e:44:68:
                    c2:65:c2:a8:fa:da:68:8a:fa:22:8b:e7:29:3d:94:
                    07:6d:5c:89:42:de:53:e2:55:0f:c4:68:5f:2f:63:
                    91:e7:37:df:e6:24:ae:97:ac:e9:3f:6b:a1:92:f2:
                    e2:e4:80:6f:fb:bb:ea:fa:05:23:30:e3:d4:9e:65:
                    12:69:81:2b:1f:1d:a8:cd:b6:ec:2c:81:44:8d:6c:
                    22:ff:23:b0:37:89:c7:1a:43:fc:bc:4e:de:53:53:
                    a9:04:47:1b:a6:28:34:c9:2d:4a:d7:60:8f:8b:ba:
                    98:73:01:c0:ae:09:ac:f3:c9:bb:0f:3f:54:ac:0f:
                    f1:42:f7:b3:7b:50:12:2c:69:dd:7d:f1:7e:89:e4:
                    4c:14:57:7d:84:90:56:c6:dc:0e:e5:fd:78:99:cc:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:83:42:E1:68:EF:5C:0D:F5:17:20:C0:5B:0B:16:47:D2:9B:CE:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:a2:bf:7b:81:06:ce:87:f7:ae:64:d9:11:5e:a1:c0:21:
         9c:62:8e:a6:62:e6:6a:91:dc:ca:ba:14:f7:4f:80:8d:e9:4b:
         c5:42:17:db:f1:26:bb:f0:ab:bd:92:2f:b8:53:ef:2a:ea:10:
         7f:9b:ea:0c:f1:c0:0f:6b:86:17:c9:df:90:60:4b:c0:79:bd:
         12:52:ca:9f:9e:97:04:fd:d2:89:0e:64:eb:70:38:4c:8b:3a:
         52:00:67:f9:0c:91:09:6b:88:aa:c4:85:96:c5:6f:ed:88:4a:
         36:51:12:84:1f:2f:ad:bc:12:ec:23:1f:e1:01:26:51:90:3d:
         f3:ff:65:a6:7f:34:fe:2e:dd:6a:62:56:fe:3e:8d:3a:cf:3c:
         4c:b6:76:96:88:8d:7a:2e:a1:43:a6:5e:51:d7:92:9f:8b:72:
         59:74:65:23:a0:a6:5d:e5:92:21:91:2e:72:86:9d:b6:a0:20:
         41:63:34:ed:76:60:9a:4d:d2:13:02:69:c7:e5:97:53:0e:bb:
         a7:f2:da:f5:38:4a:d9:54:b9:65:5e:6f:ae:0b:35:fc:7a:de:
         3e:ca:ed:3e:62:1f:53:43:47:ef:a5:7a:1d:41:f6:bb:ee:4f:
         9e:6e:f2:d2:3c:3a:74:58:a2:64:7c:f3:7a:40:f9:4a:93:1a:
         87:ca:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:05:49 2024 by rpki-client on console-ams.rpki-client.org