Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
File:                     f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa (raw, json)
Hash identifier:          dmMVvJrINOphT441F027s/+9Z1VyZuaO5Kt56Uius7E=
Subject key identifier:   58:28:96:47:7A:BD:4E:C5:9E:AD:A5:4A:4C:FD:BC:80:7F:A0:94:F2
Certificate issuer:       /CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Certificate serial:       010D0C9F43285845131ADACF7B360D30B8372380
Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     209242
IP address blocks:        23.145.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:da:cf:7b:36:0d:30:b8:37:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=4cace26a-749d-4a15-a3b3-bd183d303116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:17:cb:b4:b6:23:6a:51:22:92:64:6d:b0:bb:
                    a8:1a:83:4f:e0:d9:bc:a3:25:d6:9e:a8:a6:66:c0:
                    cb:ae:74:4a:77:4f:a4:21:e4:d9:3a:a5:8d:9e:0f:
                    1a:ef:70:31:b1:cb:22:97:92:d8:77:72:0e:5f:c0:
                    be:9e:8b:02:4d:ac:4b:00:d7:c8:c6:f3:6a:b7:7d:
                    04:fb:04:a9:58:f0:38:c3:d4:fd:5e:58:f9:8b:40:
                    48:dd:50:bc:b1:9b:ad:22:01:d3:64:d8:b3:59:5d:
                    ed:71:73:1c:97:88:05:e7:a0:5d:06:9e:dc:27:a9:
                    35:9f:89:d4:3b:a8:b0:b8:6e:6a:97:5d:c7:31:29:
                    9b:5f:e1:6f:df:03:54:78:b1:f9:ca:28:69:3d:72:
                    6f:a8:7f:1c:4b:16:42:d3:c8:e9:84:54:64:79:44:
                    45:4d:12:bc:ee:d2:ce:d7:8d:f6:61:1c:12:e3:f9:
                    91:44:63:e5:d1:df:d7:b4:b5:c8:25:e8:cc:19:c7:
                    0b:44:71:20:b2:f7:6b:94:9e:d5:b9:e4:09:3c:14:
                    46:af:9e:4c:59:64:70:7d:c0:85:73:46:85:a6:67:
                    d9:af:ea:4c:f9:30:37:2b:cb:e8:27:9b:90:1f:93:
                    de:62:21:ea:a3:e3:21:bd:5b:b7:09:93:5f:16:e5:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:28:96:47:7A:BD:4E:C5:9E:AD:A5:4A:4C:FD:BC:80:7F:A0:94:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl

            X509v3 Authority Key Identifier:
                keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:9c:d0:7c:99:0f:3a:5e:c7:7f:a7:21:45:37:13:73:68:
         9d:e3:57:9d:fd:37:91:14:8e:19:c7:bc:f2:cf:8f:f9:51:87:
         06:b7:9f:58:6b:33:1d:58:ed:b1:0a:7e:96:ef:49:62:29:71:
         38:9d:55:d2:8d:a7:94:39:4b:a0:f5:db:26:2d:be:06:e7:e9:
         ee:c1:af:4c:50:24:4a:ca:42:a7:a0:34:67:3c:76:7d:bf:bf:
         65:a5:31:ec:e9:1e:c5:41:0c:6e:3e:c2:00:25:40:cf:11:7f:
         42:31:6c:d8:f4:7a:20:9f:4b:6c:2b:3c:0c:c3:4d:36:ec:07:
         55:0d:fc:d8:ac:d3:b7:c5:4f:dd:d1:9b:b8:f2:40:ce:4a:aa:
         f4:b6:43:cc:c8:ac:79:c5:a1:ea:89:c0:fb:dd:a0:8a:90:df:
         09:cf:3d:fe:0a:d9:18:2e:31:6b:24:5b:8d:e4:ce:11:fd:4c:
         33:cb:e5:91:8b:a2:66:c8:a9:42:ad:56:ce:c3:11:9a:43:07:
         a3:95:b2:5e:b2:c1:0e:20:87:4f:03:c3:a7:e7:66:fa:ed:07:
         de:2c:c1:75:2f:1a:dd:89:b8:b6:11:27:c7:3e:4b:86:53:bf:
         78:00:f2:ce:c8:46:1a:56:dc:7a:98:ae:51:61:49:00:58:bd:
         d3:e1:d5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:27:58 2024 by rpki-client on console-fra.rpki-client.org