Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/5e508305-9fc1-313d-8943-64f35786eeb3.roa
File:                     5e508305-9fc1-313d-8943-64f35786eeb3.roa (raw, json)
Hash identifier:          9Hcow1w0ss8ldnijFPeg0iYzZVePakJYS6jgcB52G5c=
Subject key identifier:   31:15:6C:B7:7D:F1:B3:A9:84:35:8E:B3:DB:28:ED:0C:DC:C0:2F:F8
Certificate issuer:       /CN=41dcdb5d-400c-4bbe-8411-2529aa359a0c
Certificate serial:       010D0C9F4328584538AD47C8E67FFA0977266D80
Authority key identifier: 5F:95:64:AF:62:76:C1:89:E8:38:5D:63:8A:DA:99:9A:40:82:40:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/5e508305-9fc1-313d-8943-64f35786eeb3.roa
Signing time:             Sat 16 Mar 2024 01:00:25 +0000
ROA not before:           Sat 16 Mar 2024 01:00:25 +0000
ROA not after:            Fri 14 Jun 2024 01:00:25 +0000
asID:                     395763
IP address blocks:        23.142.64.0/24 maxlen: 24
                          2602:fbc6::/40 maxlen: 40
                          2620:34:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/41dcdb5d-400c-4bbe-8411-2529aa359a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/41dcdb5d-400c-4bbe-8411-2529aa359a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:ad:47:c8:e6:7f:fa:09:77:26:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dcdb5d-400c-4bbe-8411-2529aa359a0c
        Validity
            Not Before: Mar 16 01:00:25 2024 GMT
            Not After : Jun 14 01:00:25 2024 GMT
        Subject: CN=d7762a6a-d51e-4194-aa24-5629fc0ab23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:c7:6b:db:67:4e:dd:55:a2:5e:11:f3:8f:
                    1d:e5:b9:a8:bb:5f:74:bb:98:af:d3:e2:40:56:0c:
                    83:72:16:07:c3:91:f1:39:f9:79:a4:a8:ef:4f:df:
                    35:6b:eb:cb:b5:82:9c:48:90:53:7e:5e:83:b3:b6:
                    9e:7d:4d:01:7b:1d:74:5b:15:bf:c1:c6:f1:42:3d:
                    6a:ad:ec:3c:a0:36:39:c8:cb:85:7b:78:d7:6f:86:
                    99:48:bb:75:08:ce:d9:17:97:dc:5e:88:25:3a:95:
                    ae:4b:d0:43:04:89:52:05:0f:d2:6b:aa:4a:15:06:
                    36:64:c5:0e:54:7d:32:4d:d1:95:32:42:01:ee:4e:
                    d1:8a:e6:b0:3d:6c:bb:05:cb:a0:5e:3d:da:8c:4b:
                    39:4a:18:ef:07:65:3a:07:11:40:25:a5:cc:e0:62:
                    23:e1:da:08:f6:0d:9f:1f:3c:b9:3d:25:04:3c:4b:
                    fe:3d:fd:a7:5a:01:fe:67:d1:dd:6b:d7:68:70:71:
                    1a:b0:b1:cc:81:fc:d4:67:71:15:f6:e3:d0:11:81:
                    76:26:51:09:d5:ec:67:66:85:de:fe:af:4d:5e:d9:
                    18:ce:6c:87:79:21:65:02:3e:2e:99:24:7e:52:57:
                    e1:72:84:04:dc:59:96:04:87:fc:e4:85:f7:db:b5:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:15:6C:B7:7D:F1:B3:A9:84:35:8E:B3:DB:28:ED:0C:DC:C0:2F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/5e508305-9fc1-313d-8943-64f35786eeb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/41dcdb5d-400c-4bbe-8411-2529aa359a0c.crl

            X509v3 Authority Key Identifier:
                keyid:5F:95:64:AF:62:76:C1:89:E8:38:5D:63:8A:DA:99:9A:40:82:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.64.0/24
                IPv6:
                  2602:fbc6::/40
                  2620:34:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f6:5a:a3:86:46:dc:0f:a3:88:15:c3:82:1b:49:6e:ad:f3:
         2f:c9:b9:a0:3d:a0:cf:50:4b:16:65:25:fb:6a:b0:c4:41:8b:
         9d:8e:76:e0:d9:30:52:31:fb:db:49:a6:f2:85:a8:03:5d:b2:
         ed:7f:7a:8e:c8:aa:c6:22:82:c9:6e:84:7c:da:27:1d:d5:21:
         f7:3a:e3:51:34:e5:27:22:f2:e7:64:08:ff:90:2f:97:41:c0:
         55:d5:c4:08:eb:af:3b:1f:a7:a1:3e:ff:6a:e3:74:3e:db:e6:
         35:75:20:e0:c3:2d:74:1e:b9:00:34:fc:e7:49:b7:a0:82:73:
         c4:4b:21:9b:77:77:20:4e:b8:26:5c:5f:e3:94:8c:26:f0:82:
         7c:f4:a0:63:18:6f:b8:b6:4f:c1:5f:0d:eb:cc:f0:29:99:3e:
         26:dd:cd:24:17:10:cb:51:e7:27:13:c8:25:bd:ea:7b:0f:96:
         cd:86:99:8b:43:0e:68:bc:b7:7f:c0:02:4b:fa:99:4a:cd:76:
         e3:dd:3f:a6:2e:d0:26:a7:f7:5c:b5:0c:0a:23:b9:1b:aa:f6:
         8f:9d:42:74:a8:7a:a6:82:e1:db:ba:3b:3b:83:70:4f:bf:ef:
         af:21:2e:8a:06:c9:cd:d7:7a:b1:f6:57:87:64:0d:21:04:4d:
         8b:91:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:32 2024 by rpki-client on console-fra.rpki-client.org