Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/713c7e65-670a-35fc-b84e-9ea011c805ed.roa
File:                     713c7e65-670a-35fc-b84e-9ea011c805ed.roa (raw, json)
Hash identifier:          RXb9XD0hTnENgtPLOxL59Q+HY4BYtcvDH8BmDDRtKVc=
Subject key identifier:   B4:30:5F:52:81:9C:57:5E:8A:CB:59:5D:02:AA:C3:30:37:A4:5B:4F
Certificate issuer:       /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial:       010D0C9F43285844C38A6F9E871616DFD2D42880
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/713c7e65-670a-35fc-b84e-9ea011c805ed.roa
Signing time:             Sat 03 Feb 2024 02:00:26 +0000
ROA not before:           Sat 03 Feb 2024 02:00:26 +0000
ROA not after:            Fri 03 May 2024 01:00:26 +0000
asID:                     41378
IP address blocks:        23.247.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c3:8a:6f:9e:87:16:16:df:d2:d4:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
        Validity
            Not Before: Feb  3 02:00:26 2024 GMT
            Not After : May  3 01:00:26 2024 GMT
        Subject: CN=85096452-ead8-4e10-bf29-277d2e2e9157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:1c:29:c1:85:c4:ba:8b:52:ee:2b:2d:af:
                    51:90:0d:f5:6c:09:d8:20:1b:5c:c6:97:de:e1:1e:
                    a1:62:af:81:cf:dd:38:1a:9d:8a:fa:cf:37:90:74:
                    53:9b:1e:e7:39:61:e1:dd:80:28:8d:af:47:77:7b:
                    21:1c:7e:7b:7e:2c:8c:a8:94:c8:66:e7:d8:ab:ab:
                    e0:55:99:71:5e:05:5a:38:d0:31:e4:82:31:07:25:
                    8e:c4:68:72:ec:d7:e0:a7:21:e6:a8:c4:52:69:bd:
                    32:5b:fb:b7:35:b7:ae:c1:19:64:04:81:a9:c4:a4:
                    41:1c:6a:88:36:ce:fd:47:e2:95:b3:83:41:da:fb:
                    07:be:ba:75:e9:16:f4:c8:2f:de:60:da:22:af:de:
                    eb:58:0a:65:a9:d5:6b:0f:a6:6f:29:81:cb:52:7e:
                    76:9c:d7:21:fa:de:87:08:27:bb:54:57:48:25:92:
                    ab:3f:61:96:f1:d9:aa:89:7b:4a:43:8a:13:94:d5:
                    88:8c:07:c4:c0:9e:86:73:7c:73:63:3d:6f:99:39:
                    f4:89:79:77:dd:24:7c:cc:8e:02:de:54:cc:97:b5:
                    9a:03:02:15:54:cd:f4:bf:df:f6:c7:d8:62:31:a3:
                    0e:b6:8c:0d:36:da:d8:03:6c:97:7f:5f:a3:b4:91:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:30:5F:52:81:9C:57:5E:8A:CB:59:5D:02:AA:C3:30:37:A4:5B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/713c7e65-670a-35fc-b84e-9ea011c805ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl

            X509v3 Authority Key Identifier:
                keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:13:7c:e1:54:10:fe:16:ac:6b:f9:01:50:6a:b9:3d:8a:34:
         10:be:83:d5:d6:64:99:dd:d0:37:0b:35:e4:22:c5:c5:66:cc:
         18:d0:eb:27:b4:53:27:83:1c:2f:90:02:3e:e2:49:1b:18:17:
         71:3b:dc:7f:15:cb:71:cd:39:7e:1d:19:02:52:76:1f:86:5e:
         98:7c:ec:5d:4a:5c:95:e5:50:bd:e8:e3:ab:10:93:59:79:a5:
         22:c5:5d:a4:22:8d:94:72:ca:49:ab:ae:c5:d5:9f:07:45:41:
         9d:6e:d3:91:d9:d0:99:78:5d:c5:ce:7f:41:c6:88:c5:72:4e:
         b2:ed:c2:02:40:a2:20:d9:27:79:95:b8:d0:5c:e0:d7:02:6c:
         37:0f:ca:5c:45:3d:6a:1a:54:7f:c6:42:23:fc:38:f9:b1:7a:
         8a:bc:24:c0:38:c1:a7:0e:b5:e3:23:ae:8e:a4:19:26:70:19:
         51:15:6d:c5:f1:58:5d:00:c7:4d:54:ae:af:6b:07:8f:28:6a:
         43:4b:d8:a3:7a:33:13:40:ee:5e:c7:2a:eb:f6:50:d4:41:54:
         e4:4d:ed:05:6c:43:b7:3a:13:50:a4:4f:1a:fe:d3:a6:9f:60:
         27:ea:82:97:e8:84:f5:e3:9d:55:ee:5a:be:ba:30:af:e8:03:
         6a:93:54:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 10:59:38 2024 by rpki-client on console-ams.rpki-client.org