Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cdaea958-113c-3933-89d1-eadb786eec06.roa
File:                     cdaea958-113c-3933-89d1-eadb786eec06.roa (raw, json)
Hash identifier:          oXqqh8vJzwHBOiLDUPLBh69XvmxqTTFBEwkF2Qn7FMU=
Subject key identifier:   FC:0D:10:AF:88:F7:6C:A7:C1:E5:F1:5E:82:22:35:B2:67:24:E5:15
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584598FE09FF404CA8B016E372C0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cdaea958-113c-3933-89d1-eadb786eec06.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     266820
IP address blocks:        23.227.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:09:ff:40:4c:a8:b0:16:e3:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=7e25a212-8e7c-4792-a210-addde335de42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:89:87:71:10:86:9e:2f:35:47:e3:80:b9:
                    bd:9d:b9:6e:e9:81:1a:f1:d6:aa:7f:a2:bd:d1:d8:
                    02:03:cd:5c:28:8a:a8:28:0b:4e:aa:0c:a6:7e:d1:
                    6d:2b:a9:97:f7:22:d6:3d:87:94:70:36:fa:75:ba:
                    e3:38:e9:47:80:07:e0:41:6a:a4:fb:be:71:58:34:
                    44:4b:23:42:6c:46:54:20:34:75:58:ee:0d:d3:fc:
                    29:f6:77:21:41:f9:fd:7b:b6:bd:85:80:cd:38:46:
                    b7:55:0c:a4:3e:7d:f0:af:a1:59:e0:f2:ca:a8:66:
                    43:c9:4a:0a:42:e9:4d:51:80:ae:2b:69:e3:6f:cd:
                    88:1e:a1:e4:3c:73:b9:06:bf:7d:e3:6c:33:6b:8e:
                    32:17:da:a3:6f:c2:b5:44:03:e2:a5:88:78:a3:bc:
                    dc:c5:38:72:9b:d7:4e:6b:6f:d2:82:1e:30:9e:7f:
                    06:eb:d1:eb:90:56:9a:38:5a:d2:f1:f8:05:89:d6:
                    93:9d:a5:ad:6a:b5:a1:a7:1c:04:7c:a5:7d:24:98:
                    9c:15:dd:ab:ac:4f:ee:c6:66:96:ff:b6:9b:c0:0f:
                    9d:03:b5:0c:f7:b2:c2:44:06:1b:86:0b:34:0c:b2:
                    3e:1b:c0:9e:bd:bb:81:ab:e7:7b:89:1c:38:19:f4:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0D:10:AF:88:F7:6C:A7:C1:E5:F1:5E:82:22:35:B2:67:24:E5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cdaea958-113c-3933-89d1-eadb786eec06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:3c:49:08:36:33:a5:f2:27:4d:06:3d:eb:12:4f:f1:37:55:
         2f:ae:df:f3:66:4b:f1:7e:4e:df:4f:01:cb:11:75:78:85:18:
         cd:07:66:da:14:16:fc:5f:2b:5e:86:ba:61:87:8d:3b:8e:37:
         d5:64:d2:36:f5:2e:a4:ec:4a:7e:fc:61:5c:3c:cb:f1:ba:a9:
         80:54:64:79:7d:10:44:e8:28:f9:28:b8:7f:d0:17:55:b1:91:
         6a:8f:aa:4d:17:59:b3:d1:26:59:3c:a5:34:eb:79:19:1b:55:
         e2:a2:d9:40:1c:09:e7:5a:b7:90:9e:7b:38:5d:e4:27:09:bb:
         5b:f5:54:1b:c1:71:61:a9:78:c3:c9:ab:6e:9a:67:42:15:60:
         e5:20:75:1f:47:dd:6b:56:27:25:c9:44:7a:d3:19:07:40:b4:
         da:32:a3:16:3b:4e:7c:b9:b1:d8:71:87:58:ff:41:6e:a3:e2:
         e0:2d:dc:0f:9e:8b:ea:56:82:1e:d9:77:ce:28:37:8a:61:57:
         59:82:42:4e:c5:55:fd:a9:a9:51:44:07:1a:60:8e:0a:d5:e0:
         87:a1:51:bf:08:5c:19:5f:77:e1:d1:9d:b7:ad:9a:3c:ed:d2:
         be:a9:3a:b2:a2:cd:8c:43:33:d5:6c:37:59:83:d2:d1:be:9b:
         e5:26:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:50:47 2024 by rpki-client on console-ams.rpki-client.org