Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8bb698f4-8882-306b-a37a-1a0a111d5801.roa
File:                     8bb698f4-8882-306b-a37a-1a0a111d5801.roa (raw, json)
Hash identifier:          A5j+D2rCAWRdgbus+UUNdfw+wn5SCmLLaGMgRe3vgeQ=
Subject key identifier:   1E:9C:0F:F6:A8:B8:87:9F:86:E3:89:27:19:85:86:75:8D:E0:EB:99
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2DEF7645017CDBF945D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8bb698f4-8882-306b-a37a-1a0a111d5801.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     19157
IP address blocks:        23.86.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:de:f7:64:50:17:cd:bf:94:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=62e4cf4a-316b-44fa-b875-db76103545e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:3a:30:a2:c9:4f:fd:0a:77:a7:d0:d9:88:
                    e2:ce:c1:da:44:f0:28:69:82:c6:f1:85:26:03:38:
                    a4:d9:10:80:eb:7e:7d:99:ae:9b:ba:e4:a3:d6:2a:
                    30:21:a0:8c:80:13:0e:29:2a:d9:cb:20:ad:52:e7:
                    04:30:fd:f3:d5:e3:a3:4a:2d:be:f9:9c:eb:6c:09:
                    b6:e9:5d:3f:c5:6d:3f:f1:97:ea:2c:b2:bc:87:5c:
                    12:1f:da:c2:30:01:f1:bb:b4:65:95:ba:a5:17:53:
                    c3:dc:2c:d8:d7:27:d2:a1:12:3a:62:c3:ed:23:c1:
                    6d:8f:24:e7:d9:1a:fd:d0:95:bc:71:10:27:40:ed:
                    09:9f:da:1c:47:dc:df:09:0c:c8:4d:b8:15:14:89:
                    38:b3:7a:c0:91:e5:88:b7:37:54:bd:e9:97:f2:32:
                    40:9a:d3:92:5c:6e:ab:3d:72:da:e3:1b:9f:f8:5f:
                    60:56:a4:49:1e:e8:16:90:d9:49:d6:bd:a8:d6:52:
                    b3:82:cf:c1:77:fd:f9:63:18:42:84:6e:43:90:a1:
                    80:37:6c:18:94:69:84:9e:a2:82:3d:d9:bd:c7:bb:
                    b2:6f:c0:2c:a5:40:70:30:4a:7d:01:ef:98:47:56:
                    f9:6e:d4:d8:5b:c6:5a:84:92:09:21:27:02:09:94:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:0F:F6:A8:B8:87:9F:86:E3:89:27:19:85:86:75:8D:E0:EB:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8bb698f4-8882-306b-a37a-1a0a111d5801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:32:93:aa:75:dc:ec:d4:1e:44:b0:03:a9:f0:fc:fb:24:
         c9:69:81:3a:dc:21:40:c1:39:2c:96:36:eb:26:de:ae:bd:99:
         6a:54:a7:47:ae:40:02:ef:28:3f:5e:fd:ff:62:a2:30:11:fe:
         8d:38:ef:7a:c3:dc:c3:8a:b3:0f:05:99:59:4b:cd:8c:7e:2a:
         0e:c5:cd:97:41:c0:61:a6:de:7f:1c:1f:cb:7d:82:70:37:06:
         81:1e:1e:80:5d:0e:6f:22:db:cb:8f:e0:4a:a2:37:6d:21:a1:
         ae:65:e9:75:5a:6c:db:1b:7c:e6:84:12:cb:7b:0a:69:02:d6:
         f8:68:50:a4:5e:7d:b5:ee:d8:ff:b0:51:0a:f8:a7:8d:03:8d:
         cd:de:2a:af:02:5a:7c:8c:58:ff:ad:36:d0:11:6d:1a:88:5d:
         4f:34:4b:a3:5a:7e:c3:f5:ad:51:60:d3:0a:69:6e:a5:5d:d1:
         bc:f8:3f:82:ce:ae:19:4c:a7:2a:1d:aa:d8:4a:f8:a9:2d:80:
         f6:b3:55:29:1a:24:94:5c:02:69:d1:38:6c:8b:dc:09:90:b0:
         8b:35:18:63:89:c5:da:1e:ed:37:87:88:47:78:56:43:3b:92:
         f4:68:93:5b:9a:94:02:60:cf:e1:a4:b2:63:41:47:0e:06:a7:
         37:0d:6c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:13:34 2024 by rpki-client on console-ams.rpki-client.org