Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/e0662cb3-9b18-3aa1-9744-fbf30a45354f.roa
File:                     e0662cb3-9b18-3aa1-9744-fbf30a45354f.roa (raw, json)
Hash identifier:          JUgPJ5BFm+p91PNmwM3AhlPWaYfG8eg1Mt9maJQqoFI=
Subject key identifier:   B8:6D:AF:CB:4B:6C:43:9B:B3:E0:9A:CC:BC:D8:74:34:E3:A2:C9:D8
Certificate issuer:       /CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
Certificate serial:       010D0C9F4328584561284D21C2CF9100D9ADA700
Authority key identifier: 8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/e0662cb3-9b18-3aa1-9744-fbf30a45354f.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     1030
IP address blocks:        23.167.56.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:4d:21:c2:cf:91:00:d9:ad:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=dc91e752-cf24-4898-be56-c566003dab62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:6c:69:8d:8d:c1:21:fa:fc:6d:a9:6c:bd:
                    38:32:66:b3:e6:f2:fe:1c:01:9d:7c:37:dc:35:8e:
                    c1:44:0f:9b:54:62:da:df:ec:4d:c9:59:e8:88:4e:
                    6e:0f:7f:e0:9f:fa:43:5c:a4:80:68:19:41:71:ba:
                    8e:fc:5c:d6:a3:51:d7:85:95:17:20:52:e4:ae:5a:
                    cd:c5:57:94:f6:07:13:fc:fc:ed:1a:ff:4b:a4:ae:
                    65:8f:78:f7:e4:a8:a7:52:61:e0:c5:9c:20:fa:20:
                    a1:82:4e:df:cd:5f:c5:d8:54:48:08:69:ce:3a:7f:
                    94:eb:73:95:6c:a9:57:2a:da:72:4a:7a:f2:ff:43:
                    59:2c:8b:49:2c:54:65:2b:ac:04:96:6c:56:3d:eb:
                    8f:00:44:a0:ac:b9:ed:35:4e:e9:e9:75:ee:ee:58:
                    10:eb:e0:82:05:dd:30:c2:ff:d5:98:9e:76:6c:d9:
                    4a:e4:8c:b8:53:08:9d:11:1f:97:bb:62:b9:ef:e1:
                    4d:24:c2:32:68:07:fe:9c:0b:6e:d1:ec:02:ba:30:
                    ca:11:49:08:82:6a:42:35:95:98:13:ef:18:0b:4f:
                    62:9d:0d:5d:33:31:ef:27:d0:75:bd:95:38:f9:8a:
                    bd:8a:9b:71:0c:d3:2c:18:b8:2f:98:fc:d2:e6:e7:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6D:AF:CB:4B:6C:43:9B:B3:E0:9A:CC:BC:D8:74:34:E3:A2:C9:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/e0662cb3-9b18-3aa1-9744-fbf30a45354f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl

            X509v3 Authority Key Identifier:
                keyid:8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4b:c5:e2:6f:25:b9:ab:d8:e0:b6:a9:8f:dd:3a:78:f3:1b:
         0f:df:72:4b:67:9a:c4:e4:8f:02:fa:f7:fc:c9:2d:8b:39:70:
         89:eb:5f:26:35:87:f6:3b:d7:d2:19:fa:f0:cf:91:0e:25:94:
         55:9e:bb:e0:8c:55:ba:35:ed:b8:ff:f4:34:46:69:c8:ff:ce:
         f6:f4:b2:b5:62:37:ab:2e:db:b8:37:5b:6d:49:51:fe:fd:98:
         1c:a0:19:66:cf:3e:c2:fa:8b:16:bb:8b:3c:67:a0:b2:db:c0:
         ff:38:c1:3c:da:66:00:d9:db:5e:e2:98:c6:ac:28:5d:c7:3d:
         99:cd:4e:d5:b7:12:28:52:4c:e6:92:96:26:56:ac:7e:65:1e:
         8b:41:33:d9:99:9c:45:0d:a0:15:8c:32:68:72:3c:68:7c:b9:
         1d:35:8f:e6:f0:59:ad:82:90:39:27:b9:a0:ce:08:57:dc:d0:
         ff:97:33:40:2d:2b:f9:57:d0:3f:49:a3:7f:91:92:3c:9a:ac:
         db:26:30:fe:c0:da:de:40:77:a1:01:8a:57:8a:cf:69:ee:02:
         5f:7e:d6:a5:cc:39:53:67:7d:b4:db:6f:da:4d:8b:f8:68:85:
         26:33:bc:3b:fb:df:95:f0:b8:b8:4c:4d:0f:13:5b:fc:4a:f1:
         fa:0d:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 11:37:41 2024 by rpki-client on console-fra.rpki-client.org