Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/f11696bc-8562-3b8d-928b-62239f218f6e.roa
File:                     f11696bc-8562-3b8d-928b-62239f218f6e.roa (raw, json)
Hash identifier:          y6f++NLThlFm9f55A1e/vDXYQ5FbaokM1WYyldOU9WQ=
Subject key identifier:   2B:D7:16:EE:0B:DA:A5:2E:C7:D5:02:71:C0:41:82:AC:1E:54:D8:F4
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F43285845D28137C4A5C1A1C7AA695240
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/f11696bc-8562-3b8d-928b-62239f218f6e.roa
Signing time:             Fri 10 May 2024 03:26:11 +0000
ROA not before:           Fri 10 May 2024 03:26:11 +0000
ROA not after:            Thu 08 Aug 2024 03:26:11 +0000
asID:                     18914
IP address blocks:        23.147.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d2:81:37:c4:a5:c1:a1:c7:aa:69:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: May 10 03:26:11 2024 GMT
            Not After : Aug  8 03:26:11 2024 GMT
        Subject: CN=63cde247-0805-4157-a89b-196d0c3d48ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e2:a1:bd:22:e0:3b:62:9e:7a:1a:c9:dd:20:
                    a4:21:15:0a:7e:c1:95:17:23:00:80:d0:71:70:ff:
                    2a:5f:df:03:8f:7b:1c:99:d3:84:8d:10:82:7e:a9:
                    e5:89:5b:2b:13:00:2b:ad:cd:36:7f:64:a3:8b:ac:
                    16:d4:75:0e:b5:a5:a0:55:a4:21:3b:af:69:7d:0a:
                    e7:a9:84:2c:bb:99:03:4c:3a:11:0b:08:b0:47:74:
                    6a:8d:00:ed:d4:8d:8f:bd:d6:33:4e:8b:ea:11:46:
                    75:f1:95:ed:c1:40:68:22:78:f2:01:5b:b5:24:41:
                    69:6e:08:d0:93:af:5c:90:c8:94:8a:19:f1:bd:97:
                    9e:f2:cd:9c:5f:22:5a:6f:f1:4f:e2:f4:c2:c1:66:
                    5d:2a:f6:b6:76:bf:d6:63:60:70:ce:27:41:30:4c:
                    4e:31:c8:58:c7:32:6b:e0:75:09:0c:04:dd:b6:31:
                    7b:3c:64:b6:e2:72:30:ce:f6:cc:d6:91:d7:43:a3:
                    0c:6c:90:34:c9:50:78:c5:e0:13:c8:19:f8:48:f5:
                    57:2d:e3:48:8c:03:96:ef:e0:dd:17:1b:0b:20:a3:
                    c3:af:a5:a6:6d:6a:b0:9c:a7:ba:a3:93:5e:c3:85:
                    08:e8:74:26:7a:aa:6d:d0:aa:3e:8c:34:0c:10:04:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D7:16:EE:0B:DA:A5:2E:C7:D5:02:71:C0:41:82:AC:1E:54:D8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/f11696bc-8562-3b8d-928b-62239f218f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:50:e3:77:b5:b8:49:9b:94:c8:91:08:a0:7e:40:43:6c:5b:
         8c:2e:5b:3d:c4:e4:10:12:47:39:8e:cc:d0:6d:cb:5b:37:fe:
         f9:30:f3:23:09:df:ac:ef:57:6a:ac:a5:9e:2f:99:54:51:a9:
         08:64:65:c6:3a:94:52:de:8f:ef:64:e8:c8:b8:20:98:2e:b8:
         35:3b:98:a4:22:d5:60:f0:33:2f:fe:e9:be:0f:26:6f:4d:7f:
         c2:65:ca:98:5c:0e:ca:8c:a9:60:18:59:e8:a3:56:ad:b1:a1:
         27:51:bf:27:56:af:54:85:70:8e:b3:42:4b:ce:50:d1:85:0a:
         8e:40:21:36:9b:40:f5:14:fd:66:43:4d:af:33:5c:24:34:02:
         af:2b:74:72:72:79:13:84:29:b7:78:f3:2c:d4:a6:8b:c0:82:
         71:d2:cc:07:3c:d4:80:29:df:df:fc:e0:d3:12:0b:dd:e5:ee:
         93:4f:64:31:c1:30:78:fc:63:ca:e0:1c:ec:9e:d4:83:cd:ca:
         da:55:d8:75:5a:bb:ae:c2:b5:6e:5e:07:98:fc:a6:f7:4f:27:
         63:b3:52:f3:82:4f:62:e2:f5:d2:e2:db:b1:0a:76:83:a8:0a:
         73:e5:3e:94:c9:6a:64:b8:d4:34:94:41:7b:a9:83:a5:a8:77:
         87:77:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 08:49:37 2024 by rpki-client on console-ams.rpki-client.org