Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa
File:                     897adddb-a309-3fc0-b793-ccbf5388c1bb.roa (raw, json)
Hash identifier:          SJWhVMrl/75fYWxf30hGT4+ZZe/WKRtpXR2ZIsPESnA=
Subject key identifier:   B1:3A:33:24:70:B2:98:D1:DB:9F:F7:6C:7A:BC:8A:77:56:A8:20:19
Certificate issuer:       /CN=643914aa-5306-4352-8a01-3ac381827191
Certificate serial:       010D0C9F43285845254043E380BCBB0858DECF80
Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa
Signing time:             Sat 09 Mar 2024 02:00:25 +0000
ROA not before:           Sat 09 Mar 2024 02:00:25 +0000
ROA not after:            Fri 07 Jun 2024 01:00:25 +0000
asID:                     400442
IP address blocks:        205.236.99.0/24 maxlen: 24
                          23.133.168.0/24 maxlen: 24
                          2602:fbc7::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:25:40:43:e3:80:bc:bb:08:58:de:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643914aa-5306-4352-8a01-3ac381827191
        Validity
            Not Before: Mar  9 02:00:25 2024 GMT
            Not After : Jun  7 01:00:25 2024 GMT
        Subject: CN=a99557bf-bb18-42aa-94fb-8eb0a7352164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:4c:ce:41:67:f5:11:12:bb:78:2f:62:f6:
                    11:67:75:32:1f:08:5b:6e:5d:9e:ac:aa:39:df:6a:
                    6d:a4:a9:de:ff:0a:2e:a3:45:ba:1e:c8:b2:07:3d:
                    f2:42:45:16:42:9f:1c:36:5a:fc:8b:37:b9:51:83:
                    fd:46:46:f8:f1:ab:86:5a:a2:01:fb:ea:5e:3c:55:
                    dd:f0:7f:57:a5:14:e5:88:11:17:02:27:6d:b9:09:
                    84:a5:17:07:08:1b:c8:8a:95:61:e9:f1:84:ef:79:
                    48:6c:cb:eb:59:f7:a3:fb:06:dd:36:ca:7b:ec:ad:
                    18:0d:00:c6:20:42:7c:58:4a:00:c5:94:ed:8c:c5:
                    80:c9:fb:9f:46:9c:37:90:74:39:b2:17:cd:a1:3f:
                    66:70:f3:70:51:3a:31:77:48:6d:97:f3:55:5e:f2:
                    b1:a5:60:f2:d2:14:11:85:30:e6:bf:1c:0f:43:2c:
                    d8:01:af:a6:15:fd:b0:28:be:21:7b:4c:67:09:1e:
                    33:db:70:ab:96:0f:b7:b5:d0:75:e2:b5:9d:99:5d:
                    61:8c:e3:14:3e:48:91:b5:ed:ac:43:79:f2:f7:80:
                    52:42:c3:30:32:b7:59:2f:c4:99:17:a9:a4:36:bd:
                    ea:80:7f:f5:eb:c7:c3:53:33:87:68:24:43:dd:8d:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3A:33:24:70:B2:98:D1:DB:9F:F7:6C:7A:BC:8A:77:56:A8:20:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl

            X509v3 Authority Key Identifier:
                keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.168.0/24
                  205.236.99.0/24
                IPv6:
                  2602:fbc7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:4e:1e:55:9f:1b:4e:b1:4d:77:8b:1f:14:a8:ea:65:f5:
         ca:e1:03:82:ce:f1:27:b0:53:38:f8:49:b7:97:33:68:53:91:
         b2:c7:e0:59:22:a9:23:ae:33:7e:b4:90:e8:fe:6d:bb:1f:c6:
         2b:a0:07:53:36:a0:48:32:40:bf:d8:ac:34:e6:08:f5:73:84:
         9a:1f:f2:86:cf:96:ca:0e:ab:ee:a4:de:f2:2a:5e:c0:a8:bc:
         5f:19:5a:00:bd:70:62:ef:e9:4b:aa:be:2d:ed:f5:bc:c0:ce:
         d3:41:36:cc:47:f3:6f:f7:90:62:e2:13:49:94:57:18:2c:1e:
         56:f1:0e:ef:5f:4b:d3:b7:f7:bf:b9:e5:a5:82:b5:41:a0:29:
         4c:a9:8c:c7:47:8a:5a:0a:45:ff:b4:55:2c:a0:3b:90:b2:09:
         ca:e5:63:a1:7d:6c:50:bf:5e:0c:60:86:fc:f1:4a:8b:8c:77:
         13:31:7b:ae:b2:d8:8e:e5:bd:08:02:46:f1:bf:56:d8:81:26:
         30:d2:02:4b:7e:69:0e:e4:3a:7f:87:68:93:c6:53:25:9e:b4:
         40:15:f7:95:7e:74:6a:00:88:6a:92:9e:30:62:a8:99:45:4b:
         59:54:b2:3e:09:c3:73:b8:65:dc:76:15:62:cd:ec:1b:01:64:
         18:fa:ee:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:20:25 2024 by rpki-client on console-ams.rpki-client.org