Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3725a7c9-364c-355e-99d4-b18d680847eb.roa
File:                     3725a7c9-364c-355e-99d4-b18d680847eb.roa (raw, json)
Hash identifier:          dhaUg0SUPgi57rq3fA3xiGHN6BZVhB66oXEpHPU8aqw=
Subject key identifier:   B5:FF:03:26:57:D6:BA:47:BA:7A:FA:68:EB:CC:33:78:0F:38:01:A4
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285845777DD3D213903571A19B5FC0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3725a7c9-364c-355e-99d4-b18d680847eb.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     60781
IP address blocks:        23.19.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d3:d2:13:90:35:71:a1:9b:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=e56fcac3-3c4d-4982-b5b7-bbe412a7df88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:89:b0:8a:39:72:17:5f:3e:87:73:4a:18:
                    a5:f8:c9:51:a3:e2:12:fd:4c:69:55:ad:d5:75:76:
                    0c:10:da:38:b4:96:98:c3:83:24:0f:97:11:54:5d:
                    51:86:b9:62:d9:e0:39:52:13:83:b7:11:d9:d5:e6:
                    82:18:d7:29:93:63:d2:1e:19:ba:23:66:2c:f3:d4:
                    17:32:fb:63:19:81:82:eb:a4:07:e9:79:ba:dd:09:
                    9f:0d:71:9a:08:5c:ee:fe:95:c6:e3:e3:b3:ce:ec:
                    b6:03:c1:f3:31:4d:fc:5d:66:dd:0f:81:34:f4:3f:
                    1e:4b:6b:e1:c2:85:3b:52:f7:a9:ee:e5:03:27:12:
                    53:ec:a0:3e:b3:67:56:7f:77:ca:6f:f0:65:0f:6a:
                    37:0d:66:bb:2c:00:99:3d:a8:f7:e1:da:4e:f2:01:
                    88:7c:3a:d2:15:f4:d8:00:aa:df:43:f7:d5:78:eb:
                    7a:38:51:9c:4c:5b:d3:0a:0a:4f:c1:7b:77:01:9b:
                    cc:c3:48:50:00:d6:1b:ec:aa:64:aa:76:7e:a9:22:
                    92:2e:11:56:24:a4:c8:86:ba:22:c4:6a:90:a3:75:
                    6f:79:76:4d:44:d6:83:7a:1d:7c:c3:bf:9f:31:fd:
                    64:93:55:e1:81:8b:93:90:e7:78:c0:23:6d:4c:05:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FF:03:26:57:D6:BA:47:BA:7A:FA:68:EB:CC:33:78:0F:38:01:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3725a7c9-364c-355e-99d4-b18d680847eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ef:8b:56:73:71:c5:9f:45:e1:c4:22:a0:07:46:27:83:6d:
         49:a7:82:5c:8b:c7:e6:4a:88:d8:65:55:c3:61:6a:7f:08:81:
         9c:2c:2f:23:78:6c:1a:07:fb:70:d7:7e:54:12:3f:6a:a6:d1:
         bb:58:bf:bc:2b:ca:1d:21:a5:4b:e3:7c:0f:e2:77:ce:08:6a:
         db:92:d2:67:bc:c6:45:a4:3b:71:bf:84:3a:7f:62:27:f9:77:
         b9:cb:d9:62:36:ce:45:fa:b1:63:73:50:5d:4e:65:2e:52:75:
         f4:e7:00:8d:1a:66:ad:5e:a6:07:87:11:ab:6a:78:1c:a6:e4:
         34:d1:ed:d4:c5:56:25:03:7d:66:2f:4c:ed:23:d4:98:8c:a2:
         32:1d:f3:c6:75:d1:59:2e:bc:af:d0:46:9f:18:a1:4a:81:40:
         5e:59:ed:f1:4b:f0:59:97:1a:f6:26:e9:a7:9d:66:45:f4:39:
         6d:e4:59:4a:8a:ed:02:65:88:cc:52:39:fb:17:3b:94:8e:9a:
         4b:2f:ba:3f:3a:d1:78:79:cd:69:bb:f5:e1:73:ea:ce:c8:3b:
         8e:e5:75:ae:13:d3:8d:fe:0f:0e:4b:e3:66:58:94:83:27:d8:
         2d:08:b4:27:60:cb:a7:a1:51:83:e6:3f:22:61:aa:b9:8d:4e:
         1a:7a:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:58:20 2024 by rpki-client on console-ams.rpki-client.org