Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa
File:                     287a2a23-ee50-3199-aa52-e050b1ad449e.roa (raw, json)
Hash identifier:          Pd/2ACb+RChPJqmNn8rC+1LnFksKpwvh9+bvxPYbO+g=
Subject key identifier:   36:74:51:50:66:01:39:F6:FD:A5:9E:19:72:0C:8D:51:0F:75:51:B3
Certificate issuer:       /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4
Certificate serial:       010D0C9F4328584589A3205E5F7ECEF3F96394C0
Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     31775
IP address blocks:        23.175.80.0/24 maxlen: 24
                          204.80.232.0/24 maxlen: 24
                          209.94.32.0/20 maxlen: 24
                          23.226.80.0/20 maxlen: 24
                          2606:29c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:20:5e:5f:7e:ce:f3:f9:63:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=ff8fc643-8bbd-4103-9704-aac486646b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:68:b8:83:2a:2d:38:82:88:f8:ae:c0:2b:01:
                    5c:44:5a:24:72:86:8e:9e:75:55:a8:0b:9d:ec:1b:
                    95:74:02:e0:5a:b4:7a:5e:f7:b9:d6:dd:e0:1a:f2:
                    d5:b4:78:2b:91:e3:b3:48:88:c0:13:4d:3f:9f:76:
                    67:7a:90:ab:90:09:9f:6f:6a:25:02:4a:95:32:ca:
                    a5:7d:ad:8b:8f:59:c1:f7:e2:dd:bf:06:5e:7c:63:
                    a4:6b:48:66:99:13:5b:76:85:87:12:d6:94:49:a5:
                    0c:f8:9f:ae:56:01:b0:69:8c:e6:54:58:ff:27:a1:
                    20:7c:bf:41:33:63:01:05:00:ec:31:06:d2:5e:c7:
                    41:72:88:54:44:d2:fa:ba:ec:18:53:92:2f:69:2f:
                    61:c8:24:84:3d:e6:dd:4f:91:29:af:84:ec:96:9b:
                    0c:49:fb:4f:48:b1:10:ff:84:ad:6b:63:fc:05:eb:
                    43:aa:dc:3e:50:25:3d:b5:b2:cd:6f:49:62:09:7b:
                    1e:83:1c:aa:f8:88:f4:86:c9:9b:ba:31:2b:83:61:
                    3b:b7:0a:f6:cb:fa:95:5d:93:e1:72:f2:a5:ae:72:
                    b5:96:e8:99:93:51:03:29:60:25:d6:f7:71:4e:49:
                    e8:c7:03:fc:e6:08:97:0a:14:e2:86:01:59:6b:32:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:74:51:50:66:01:39:F6:FD:A5:9E:19:72:0C:8D:51:0F:75:51:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl

            X509v3 Authority Key Identifier:
                keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.80.0/24
                  23.226.80.0/20
                  204.80.232.0/24
                  209.94.32.0/20
                IPv6:
                  2606:29c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:be:7e:03:87:cd:96:64:2a:82:17:8e:99:99:07:8a:0c:6b:
         68:a2:82:49:79:4a:44:ea:4c:1f:c1:7d:27:11:10:67:0f:8d:
         e4:d3:18:2f:b5:15:4c:b0:3f:e2:1f:be:b5:a2:cb:50:e4:39:
         fe:24:35:9c:2b:36:4b:e0:aa:ac:b9:94:b0:b7:a6:11:32:65:
         0c:df:20:04:91:83:d6:dc:4e:da:0f:c1:9e:1a:08:0d:c2:3d:
         ef:f8:8f:69:08:18:0d:72:82:67:ea:49:8a:2e:b9:e7:ba:7a:
         df:7a:48:c7:58:c2:22:07:e3:e7:36:3d:fd:92:04:6c:09:57:
         7c:3e:62:a6:38:e9:9c:0d:c0:2c:3f:1d:f2:f7:12:44:8d:65:
         df:6c:69:75:ee:f0:70:60:ed:85:ab:0c:b9:69:04:6f:3e:90:
         05:77:43:23:cb:71:97:7e:f1:87:a0:62:18:ec:f6:4f:ea:54:
         42:5c:40:07:0e:f5:26:0a:fa:70:78:20:d4:1e:7f:b4:35:a5:
         e8:9d:ac:23:5e:4f:fa:bd:15:1d:8f:2c:b9:e5:98:59:b5:a8:
         bf:6b:5e:c8:8c:ee:ec:b9:6d:0b:49:c5:8d:cd:84:3b:c4:e5:
         8a:c9:59:8c:2c:d6:d8:29:c2:80:f0:d0:4b:cc:c3:cb:6e:ec:
         d1:90:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:32 2024 by rpki-client on console-ams.rpki-client.org