Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/0e992d84-8f36-3940-a1cb-8c415616510a.roa
File:                     0e992d84-8f36-3940-a1cb-8c415616510a.roa (raw, json)
Hash identifier:          98ifW4R5hlnwy7bTy7JEOGHLs9t9XEp/SyKJcewhXxY=
Subject key identifier:   3D:78:DD:2B:C2:ED:BF:FE:4E:22:75:18:BA:E6:5F:4C:0B:86:86:3A
Certificate issuer:       /CN=9faf7a12-0176-44f9-9938-7bbccac3d238
Certificate serial:       010D0C9F43285845CF6E42A00448E00622D7D680
Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/0e992d84-8f36-3940-a1cb-8c415616510a.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     30399
IP address blocks:        23.152.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:42:a0:04:48:e0:06:22:d7:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=21d99e99-11a9-4c44-b45c-39022e37bde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:69:68:02:94:7b:4c:92:87:a3:8e:ac:a4:2c:
                    76:ca:a3:28:93:3f:20:f3:85:94:94:4b:04:d2:48:
                    98:d5:f6:cc:76:b9:16:4a:45:04:2c:67:44:cb:4e:
                    80:e2:75:17:6c:f8:1c:fb:4a:d9:96:1e:44:48:7d:
                    2c:f3:bb:20:08:b3:01:e7:1c:34:bc:73:22:91:4b:
                    42:a4:4a:0d:6e:9d:2f:fd:cb:a7:c6:62:20:10:98:
                    a5:fe:47:46:5c:78:dc:54:8d:f0:96:ad:8e:3f:0a:
                    bf:9f:0b:26:b8:a3:53:4e:c2:9d:23:f3:af:b4:2d:
                    31:36:93:7c:d2:9a:da:4a:a9:9c:07:ba:b3:f6:21:
                    e8:fc:66:64:91:d9:60:8c:4f:29:dc:71:65:9f:a5:
                    f0:f0:da:6f:37:c2:8b:57:d4:a6:bb:1a:d0:25:ca:
                    43:67:d6:ee:84:b9:32:0c:24:61:dd:2e:a0:7c:cb:
                    3c:fc:df:7a:75:19:ff:e2:03:8a:26:74:6b:dd:bc:
                    1c:7a:a4:16:ba:f5:3d:64:a9:ef:24:b5:cb:73:02:
                    f5:cc:8e:ea:18:7c:5a:86:ff:c0:e5:94:73:d1:0b:
                    90:9b:be:8e:7d:3f:cf:68:af:18:cb:aa:42:8b:c5:
                    0c:83:e4:4f:6a:6c:0b:93:f8:e8:07:ce:f4:d0:a4:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:78:DD:2B:C2:ED:BF:FE:4E:22:75:18:BA:E6:5F:4C:0B:86:86:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/0e992d84-8f36-3940-a1cb-8c415616510a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl

            X509v3 Authority Key Identifier:
                keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:cb:f4:5a:5d:07:a0:4a:9c:bb:10:d0:78:af:59:56:33:
         f7:a9:62:84:76:17:3a:6a:ad:91:96:41:7d:06:6b:95:99:9e:
         15:61:7e:99:91:bc:25:0e:39:e7:cc:da:54:b1:49:ac:e5:f0:
         49:cf:92:bd:a0:cc:9e:fa:3f:f0:87:1e:21:5b:c5:e3:55:8b:
         be:ee:82:f3:d0:3a:22:1e:86:ac:90:37:5e:16:da:23:37:90:
         ff:ba:10:2b:05:39:9e:f2:b5:70:34:33:d9:33:ff:19:23:ed:
         45:48:6b:06:bb:dd:51:cb:24:8c:0f:e7:9b:97:c2:18:b8:fb:
         0a:23:5e:b1:f1:1a:3e:35:16:26:57:bd:74:a3:76:2f:46:c5:
         a3:3d:a7:65:f0:43:1a:50:84:28:29:bf:66:5c:ca:6b:db:36:
         ee:c7:37:cf:3a:6b:be:98:c9:86:a6:78:6c:e1:c2:e3:79:c2:
         e1:cc:40:6d:59:3e:ad:eb:21:e8:fd:8d:ae:a7:54:1e:1d:af:
         51:64:73:ff:ee:92:19:7d:1b:97:84:48:f7:c5:c2:7d:c0:61:
         f0:48:58:94:46:aa:62:03:c5:f9:cd:a1:b2:c4:07:b0:07:ed:
         a6:68:b4:41:d5:a3:e4:54:7d:ee:b9:7d:d7:be:9c:d0:83:68:
         d9:50:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:42 2024 by rpki-client on console-ams.rpki-client.org