Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/550a1223-9439-35a9-b0ac-ce7b4a7ce2f8.roa
File:                     550a1223-9439-35a9-b0ac-ce7b4a7ce2f8.roa (raw, json)
Hash identifier:          F7g83eZzLlb2U+NXnp1H4qwcfNLOMXz1232/k34iTgM=
Subject key identifier:   69:10:6A:ED:B5:E4:1E:88:A0:F2:A5:0E:F9:D8:B4:0D:94:9B:61:62
Certificate issuer:       /CN=e20d7b51-a205-4e55-9426-e473f80b2544
Certificate serial:       010D0C9F432858457D132D80D624C0EB9D3AF000
Authority key identifier: 98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/550a1223-9439-35a9-b0ac-ce7b4a7ce2f8.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     397736
IP address blocks:        23.174.16.0/24 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:2d:80:d6:24:c0:eb:9d:3a:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20d7b51-a205-4e55-9426-e473f80b2544
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=170fb85e-e466-4ee1-b063-2a176ac7819a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:ba:53:d8:79:cc:c7:d6:3f:3a:9b:75:5d:
                    bb:8e:13:fc:7a:ce:7e:63:1d:75:35:8a:4e:bd:d4:
                    06:20:5d:4a:41:50:96:6c:ac:78:5e:f7:e3:fc:53:
                    32:70:98:59:82:94:85:91:95:4c:df:f4:dc:93:ab:
                    21:ec:18:96:89:b7:d1:af:66:ee:5b:a3:88:22:24:
                    30:bd:91:65:ae:36:2f:0f:89:c9:e0:ec:63:f8:48:
                    59:77:de:0e:6c:d3:fa:13:31:67:16:b8:9a:7f:21:
                    71:dc:df:76:f9:8c:c8:77:a2:02:d4:6a:cd:d8:b7:
                    6a:88:4d:b9:7f:4f:f7:99:7c:56:6c:bf:4a:b4:3c:
                    d8:10:bc:24:13:37:02:9f:da:3b:a4:a8:b6:a8:8d:
                    31:7a:6d:6d:73:e9:fa:46:91:fb:74:d8:69:d7:ed:
                    3a:a0:85:9e:b5:14:5c:bc:15:3b:2c:f8:1b:25:a2:
                    b9:8c:0e:7d:e4:08:87:a1:8e:1f:b8:63:15:dd:55:
                    8a:59:5b:a6:8d:9a:df:ba:54:c0:d6:ee:59:ba:74:
                    85:4e:93:31:23:dd:e0:0f:5f:c1:c5:f0:db:f5:18:
                    66:5b:a4:dc:b2:84:0a:1e:4b:8c:f9:6e:a3:70:c9:
                    0d:a1:e0:bf:f5:cf:c8:97:8e:d6:02:0f:d4:c3:fc:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:10:6A:ED:B5:E4:1E:88:A0:F2:A5:0E:F9:D8:B4:0D:94:9B:61:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/550a1223-9439-35a9-b0ac-ce7b4a7ce2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.crl

            X509v3 Authority Key Identifier:
                keyid:98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:41:ff:9d:9a:e5:f6:d1:af:08:f9:d3:4e:00:a1:8c:c0:44:
         90:57:97:89:a4:08:dc:f2:07:2b:2e:23:87:a5:50:ad:b8:7b:
         b5:f5:fa:cc:62:6b:71:36:70:31:7b:03:b3:7d:81:c6:f2:ab:
         1f:ab:cc:18:9a:d9:e8:81:b6:f0:71:26:d8:ed:3a:e1:5c:89:
         99:94:6d:57:74:73:38:1c:4c:f9:a8:7e:d2:80:a2:e8:6b:51:
         df:ea:d9:34:00:26:16:5f:28:03:a1:39:17:5f:ba:e9:3b:b2:
         fd:14:ca:82:53:8f:2a:da:38:ea:e7:f7:b3:17:03:fc:43:17:
         64:c1:58:4e:db:df:24:e1:9c:67:2c:e4:99:ef:56:93:fd:7b:
         23:b8:36:c9:0a:ea:fe:cb:ce:f3:0e:07:31:62:3b:2e:75:7a:
         c6:a9:5d:9d:34:84:7f:01:96:a5:d7:73:4d:05:d1:96:04:95:
         4d:73:d3:5d:55:26:e6:a2:79:4a:27:76:0d:bd:c8:59:20:1f:
         db:cb:c6:04:68:53:9d:b1:e5:72:c8:cd:df:06:17:c8:d0:79:
         6a:68:34:2d:40:0f:7b:86:8d:01:83:10:c3:d6:9f:00:1c:69:
         c5:fb:71:84:bc:e4:9d:0a:7e:7c:b6:83:db:03:f6:a9:68:24:
         ff:a8:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:06:44 2024 by rpki-client on console-fra.rpki-client.org