Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/6e3e97d0-eea0-3541-b2e3-e61df6230705.roa
File:                     6e3e97d0-eea0-3541-b2e3-e61df6230705.roa (raw, json)
Hash identifier:          iXsHOk1IfmaTfosFlUTLXuH7/w94oITusG/13duqUrE=
Subject key identifier:   D7:6C:05:4E:4C:A8:7A:C1:47:EE:82:0B:AE:DE:EB:60:D0:B7:A7:6F
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F432858457FDDCC0F72FA21DA8417BA80
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/6e3e97d0-eea0-3541-b2e3-e61df6230705.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     5650
IP address blocks:        23.239.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:cc:0f:72:fa:21:da:84:17:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=b17d22b7-3012-4151-88a9-64bdd6d645d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:24:13:1e:66:7c:fd:8b:1a:6f:89:a7:e4:
                    11:ee:ec:e8:be:40:6a:8e:81:9a:d8:11:78:03:11:
                    27:ac:fe:b9:2c:18:3c:6c:8a:e9:7e:14:87:a3:1d:
                    00:90:c2:fb:ab:1f:34:93:66:2b:6e:45:6b:29:9e:
                    3a:7b:f3:71:51:46:13:a6:64:96:55:85:4a:bd:2b:
                    56:34:62:f3:dd:8a:7a:5a:b4:22:04:a2:52:96:f3:
                    c7:a7:47:16:35:27:0a:0e:bb:88:34:1d:a1:c2:31:
                    73:c3:9b:8e:ac:06:6f:49:9a:ce:b3:5b:06:b3:fe:
                    35:89:36:36:4a:3e:d2:4e:da:d9:e2:7b:32:9b:96:
                    d4:9f:9b:5e:98:70:6d:25:40:73:af:f3:a9:ac:ed:
                    44:76:db:84:9f:7c:a4:d0:d1:5a:33:36:fd:fc:b3:
                    a6:6e:bb:eb:37:bb:6e:de:3b:01:f1:d1:6f:b2:85:
                    8b:a6:54:07:1e:2b:66:db:da:62:6c:5a:0b:d9:ca:
                    82:6d:c9:21:2c:42:7b:fc:f2:50:f1:35:49:05:ec:
                    cf:dd:34:11:82:18:0e:7c:7e:0e:08:c5:b3:47:a1:
                    0a:2e:4f:44:e0:99:00:ed:1b:c6:49:94:d7:c6:30:
                    e6:fb:87:e9:29:02:73:e8:75:f1:9e:70:05:03:c8:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6C:05:4E:4C:A8:7A:C1:47:EE:82:0B:AE:DE:EB:60:D0:B7:A7:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/6e3e97d0-eea0-3541-b2e3-e61df6230705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9e:9c:89:0a:c2:f2:f8:6a:34:04:87:20:19:01:db:0a:95:
         22:07:32:77:5a:db:9f:14:56:aa:01:4d:a7:2d:7a:9f:f8:7b:
         54:4b:62:62:ce:6f:d6:1b:db:83:a8:dc:ab:55:bb:95:83:64:
         7a:a4:ff:6c:7d:83:4d:09:8a:28:e6:d7:75:c0:95:e8:25:8e:
         fd:fb:f9:61:04:bb:e1:a3:00:fe:e5:3f:32:7a:5f:43:a0:7f:
         70:32:d0:b1:ae:75:30:15:59:4d:c0:83:43:f1:54:fd:f0:2d:
         eb:5d:fc:9a:4e:c5:f2:af:49:7d:f4:61:cd:c4:d6:0f:5b:c4:
         41:2e:77:17:e8:c4:eb:0d:35:71:98:02:3b:57:fc:3d:9d:10:
         d5:a9:9c:6f:4b:ac:7e:67:ee:c6:61:df:2e:7d:3b:66:6f:4c:
         8d:af:a9:66:21:b7:c6:56:f9:14:75:2d:05:f7:de:a4:3d:7e:
         0b:22:7a:29:d9:66:2c:79:98:56:96:b2:5f:1b:1f:bc:6f:9c:
         8b:f7:19:de:b0:e0:79:c9:b1:57:9b:28:15:60:c0:a2:fc:dc:
         fc:ea:0d:47:17:a0:a3:77:5b:d3:ba:33:57:9f:cc:53:12:81:
         e0:1b:93:47:83:cc:40:77:b7:78:64:b8:48:a6:2f:90:94:b2:
         02:56:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:26:55 2024 by rpki-client on console-fra.rpki-client.org