Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa
File:                     af16373c-3287-341a-a7b4-1cec1a5c9f48.roa (raw, json)
Hash identifier:          /SwA/QTiDj6ckVGdd/6/g6kbpgMKntZmYxuF+tIGJGU=
Subject key identifier:   41:09:93:E0:54:3B:D9:5C:99:3B:5D:D3:28:1F:02:61:22:42:9D:92
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858459368BF5D3ADD10B14350C1C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     19437
IP address blocks:        23.235.224.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:bf:5d:3a:dd:10:b1:43:50:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=ba8b049d-15b8-4d45-ab8b-5c613ff8cbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0b:9d:29:f2:4d:f9:67:56:7e:7f:cd:d9:53:
                    ed:72:17:25:db:c7:b4:58:9e:1a:b4:a5:39:dc:2d:
                    3f:88:3b:d6:6c:f3:87:7d:8d:36:83:57:22:e8:ed:
                    51:8b:87:c2:f4:40:0e:75:ee:06:1a:c6:02:61:a1:
                    6c:5d:f2:49:a4:45:bd:81:72:f5:68:d3:96:d9:71:
                    db:61:3f:bc:f9:1a:7e:81:22:53:6f:03:99:4c:00:
                    25:d9:20:5e:db:b4:be:f9:b3:33:66:f4:9f:92:ab:
                    05:d3:a8:db:a0:07:e9:dd:cb:c4:37:6f:94:30:b4:
                    96:15:48:05:cd:6f:6b:3a:63:fb:a5:1b:bd:92:80:
                    0a:7c:2c:c5:c5:a8:ee:84:40:10:c7:cd:e4:28:cc:
                    fe:f9:2e:fb:e9:a2:52:07:e2:c8:95:0b:24:86:04:
                    c0:34:3c:4d:5c:93:1d:f3:eb:03:17:6a:33:32:b0:
                    24:ff:af:a2:42:4f:33:d7:da:c6:5e:22:66:ad:c5:
                    dd:e5:33:81:3e:22:31:ee:a7:14:28:8c:e6:25:ad:
                    35:0e:5d:cb:5b:7a:d6:cc:7e:3e:e8:15:23:1a:10:
                    b6:58:4f:85:11:49:10:e2:a9:22:14:51:53:5b:0e:
                    92:eb:83:5d:5b:0e:82:fd:b5:f9:2a:ad:f7:04:c1:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:93:E0:54:3B:D9:5C:99:3B:5D:D3:28:1F:02:61:22:42:9D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:1a:95:a2:61:e2:51:a0:b7:53:77:bc:c2:0a:2d:a5:75:2c:
         76:69:ed:7a:ea:f7:1d:de:51:c4:c0:05:27:ad:32:f9:31:f3:
         76:69:42:e6:42:d5:d2:da:8d:10:50:ba:f3:2f:6f:61:b2:8f:
         ee:72:ec:b2:99:3b:1c:71:fe:e4:c5:bf:87:ba:bd:3f:8a:93:
         6d:7c:1a:b9:3e:a9:dc:bc:a5:2a:65:1e:e3:c3:a1:48:b2:19:
         85:47:32:2a:1c:41:90:92:9d:1c:74:2f:d5:d9:5a:04:5c:20:
         f1:41:e6:35:60:7e:bf:be:b7:e1:26:1b:66:f2:39:4a:70:1c:
         03:b1:1b:26:ca:6c:99:b3:4e:c2:ff:0f:06:90:98:37:e6:d6:
         dc:dd:48:18:4a:06:c6:a8:64:a2:79:24:c8:54:34:ea:98:e3:
         67:28:d5:f9:84:60:6b:a8:13:6f:b3:1e:d9:5d:e7:4c:f7:23:
         72:42:a0:9f:f2:8c:fa:fd:d2:ca:0e:c9:db:e9:74:df:82:4d:
         55:86:94:d0:ec:3f:41:57:e4:e6:36:81:36:f0:d0:11:55:1f:
         d9:02:57:75:d1:f3:01:07:fa:1b:66:18:b6:fa:7b:bb:14:97:
         10:a3:a3:0d:12:3d:c9:d0:c2:27:83:cb:5e:9c:34:97:52:b7:
         a3:22:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:34:14 2024 by rpki-client on console-ams.rpki-client.org