Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa
File:                     59909e65-5a05-323c-879f-bcfb3a64d534.roa (raw, json)
Hash identifier:          mOabcmEWEAkhQ+T/7FLSpwB9twcgdSrLHPStCnUHyTo=
Subject key identifier:   2D:33:14:E5:D4:CB:B9:A1:13:67:FB:5C:81:90:7C:00:53:C2:D4:FC
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F432858457082FB9853D15B6248D88810
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     397131
IP address blocks:        23.170.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:fb:98:53:d1:5b:62:48:d8:88:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=62c57527-66f7-47f1-a572-fbdeaec4ea0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:d1:14:04:e2:eb:33:88:26:29:dc:62:52:
                    a1:f7:d2:8f:60:cc:30:f3:48:90:6f:80:ef:6c:4e:
                    51:0a:c2:02:90:22:9c:74:55:a6:55:d9:39:cb:4e:
                    e7:c7:d6:4b:ca:ff:14:a6:e3:66:75:f9:f6:40:51:
                    1c:fe:87:50:ae:13:73:9d:5e:9c:fa:16:bc:5a:d1:
                    88:fb:94:31:94:ff:ec:e4:93:29:7d:43:50:6a:98:
                    22:36:54:e5:31:48:45:d7:e3:37:f5:84:44:c9:1e:
                    a2:24:21:22:27:3e:2a:0f:59:b5:b9:9e:3e:28:e4:
                    48:d4:4c:c0:fd:8d:fc:ac:26:5c:c4:38:0b:97:02:
                    ba:7e:03:d7:61:29:ef:60:c7:a3:4d:bf:bc:78:90:
                    4f:da:83:b7:5d:d9:4e:33:cb:be:a0:5f:01:d1:8e:
                    26:17:ce:38:5f:9d:67:9d:c3:23:51:8a:4e:fd:b0:
                    1a:ae:da:6f:33:1c:4b:aa:df:45:01:65:bf:0c:71:
                    c6:f2:b5:f2:4b:bd:0c:cc:a3:67:fa:b8:08:6c:0f:
                    ff:e3:8c:ee:5c:76:67:83:a5:82:2d:15:76:91:98:
                    fc:b7:97:fa:f8:49:db:b3:d4:30:d1:68:0c:bf:14:
                    5b:bd:05:79:f9:4b:e2:5b:51:72:af:95:91:b5:82:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:33:14:E5:D4:CB:B9:A1:13:67:FB:5C:81:90:7C:00:53:C2:D4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:7e:05:4e:89:6b:ba:11:7c:b2:27:40:53:58:0d:eb:c4:
         28:67:4e:55:34:71:4a:69:a4:7f:c7:cb:cd:26:2d:64:95:7a:
         da:c9:5d:d0:2a:19:be:d8:1e:9e:a5:0d:ba:82:07:b0:03:25:
         32:bb:50:98:d4:ef:4d:49:4c:11:13:0a:52:06:b3:f7:61:29:
         e3:25:61:d4:e7:4f:31:a5:f3:de:c4:e6:71:8c:9d:f5:07:60:
         b3:7b:bb:53:7f:ae:a1:97:ef:46:c6:6e:0e:98:88:c5:ad:62:
         f6:2a:72:13:88:f1:73:ce:4b:70:19:4e:d1:02:da:82:31:a7:
         e4:73:7b:40:c1:6f:6d:80:99:93:99:ce:7c:c4:fa:b1:ec:84:
         35:d7:73:f5:81:ae:3a:9e:2e:8a:69:d3:8c:58:30:03:28:17:
         4b:a8:73:9a:a9:4b:e7:bb:23:ad:30:cc:f7:c5:69:8d:b7:a0:
         13:8a:8d:b1:2f:d9:0a:9a:62:01:20:62:86:18:b9:d4:5c:be:
         22:8e:ae:53:c4:22:5c:a3:3f:0e:1a:f3:79:85:c0:8b:6c:48:
         18:a4:96:3b:eb:91:3c:e9:4c:22:36:11:b0:fa:4a:38:e3:d5:
         60:5c:89:b8:1a:57:0e:89:b0:17:f3:07:f0:1e:20:68:bf:7f:
         f5:65:4b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:46:05 2024 by rpki-client on console-ams.rpki-client.org