Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa
File:                     a4f9f1e8-30bc-3b04-a50f-256889a98473.roa (raw, json)
Hash identifier:          w9qNndkXTuKaYeYcc8Id0RSWrta54homONwgL1ZgSbU=
Subject key identifier:   2D:A0:51:E7:F1:97:82:F4:51:CE:FB:8B:21:09:D9:DE:3C:19:17:E0
Certificate issuer:       /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
Certificate serial:       010D0C9F43285845DEC9131FC5B9F52C3851B100
Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     32826
IP address blocks:        23.159.24.0/24 maxlen: 24
                          2602:fa53::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:13:1f:c5:b9:f5:2c:38:51:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=f5db574f-8688-4aa4-81b3-3f29f40b244a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:3c:f2:5f:72:a4:a5:af:05:6b:09:61:0c:
                    1d:99:b3:cc:25:d7:ad:7b:da:61:35:b7:07:8e:e5:
                    d2:a3:65:f8:34:aa:a1:19:37:24:a9:e6:15:e5:52:
                    e4:69:57:c4:95:bc:e1:f4:b4:06:a7:1f:aa:86:79:
                    b1:7c:cd:e8:be:9f:0d:04:5f:09:4b:d8:1e:95:e0:
                    3d:a6:9e:86:de:78:2c:06:2f:18:a9:53:17:f5:88:
                    71:27:3e:99:f6:27:00:d6:bc:17:97:18:54:2d:95:
                    b7:ec:5d:c0:98:08:d8:96:ca:f9:42:98:31:35:c4:
                    1e:c6:d0:a3:e4:ac:4a:82:2b:01:69:50:7e:46:e8:
                    d9:86:a6:4c:41:e7:02:7b:28:98:0c:89:0e:1f:89:
                    98:79:c9:c4:9e:05:d2:9f:04:9d:ba:9d:7a:7d:59:
                    de:ee:61:9c:8c:be:73:94:9a:b3:c9:4c:4a:a2:6e:
                    d2:2e:ae:9e:a7:7e:bf:d6:d4:82:1c:28:7c:62:53:
                    44:fe:cf:96:c4:fb:1e:eb:71:c1:98:0d:f7:eb:a4:
                    35:0f:ef:06:d4:25:d9:a1:71:8c:58:79:c1:06:26:
                    be:5d:5a:be:9f:f4:9f:37:2b:13:5f:1b:f4:5f:74:
                    f2:81:3b:c2:8b:fb:38:05:0f:f5:31:78:af:1e:ea:
                    83:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A0:51:E7:F1:97:82:F4:51:CE:FB:8B:21:09:D9:DE:3C:19:17:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl

            X509v3 Authority Key Identifier:
                keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.24.0/24
                IPv6:
                  2602:fa53::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:71:52:cf:09:85:9c:c3:5b:43:af:de:f3:02:55:5b:c2:3c:
         29:8e:7e:c4:77:8a:00:0d:72:5c:de:a8:27:83:69:b6:06:56:
         87:48:e8:4b:94:64:3f:0c:43:33:3c:ae:4a:22:ca:8c:59:e9:
         3e:3c:d9:bf:a2:d1:73:6b:11:78:1d:3f:62:4a:e6:c0:ef:a5:
         92:c9:86:71:b9:ed:a1:cd:4e:9c:7e:39:0c:f5:22:0a:94:bb:
         47:a7:7d:a8:16:07:d3:83:3c:6e:03:93:dd:74:4f:49:9d:55:
         29:4f:b2:89:69:bc:87:d9:be:1b:a4:ce:14:de:ec:09:46:68:
         0b:be:19:47:9f:67:36:f1:2a:00:b1:a2:92:e7:91:9b:d2:47:
         e4:ba:48:b9:04:c1:f5:09:a1:78:2f:4f:a8:a1:58:2b:d2:c1:
         37:53:b4:ac:8d:f8:a8:4a:84:69:5d:4e:80:a1:b5:3b:ad:53:
         9e:32:77:85:53:af:58:5e:2c:18:23:8b:9f:86:89:9a:c8:3c:
         75:e3:1a:4e:52:a5:c7:c6:99:16:5c:51:5c:da:ff:b5:d4:14:
         7b:c0:e9:f0:f2:e3:b7:d8:94:5b:2e:f7:49:a6:8c:17:97:90:
         a4:01:68:ab:71:39:0a:85:db:e9:6d:43:25:e7:01:6b:cb:15:
         df:82:00:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:55:39 2024 by rpki-client on console-fra.rpki-client.org