Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02ffb879-d980-3254-9199-6955d3845e43.roa
File:                     02ffb879-d980-3254-9199-6955d3845e43.roa (raw, json)
Hash identifier:          vFQh2fv/CSGQny8PL5SmJ0lJugB7d1jIS38GFF0xXxk=
Subject key identifier:   64:0D:41:C5:C9:FB:BD:2A:72:37:69:60:5A:D5:B4:EB:12:09:CA:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845C2DE3A708B6C10EE6F245C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02ffb879-d980-3254-9199-6955d3845e43.roa
Signing time:             Sat 04 May 2024 13:00:35 +0000
ROA not before:           Sat 04 May 2024 13:00:35 +0000
ROA not after:            Fri 02 Aug 2024 13:00:35 +0000
asID:                     32787
IP address blocks:        23.32.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c2:de:3a:70:8b:6c:10:ee:6f:24:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  4 13:00:35 2024 GMT
            Not After : Aug  2 13:00:35 2024 GMT
        Subject: CN=cea9f867-484c-4603-8155-6f8519222a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e2:0d:3b:04:d7:4f:14:26:11:46:5c:74:85:
                    b2:09:7b:b5:29:c7:62:2c:66:6a:20:ad:e8:7a:02:
                    00:7b:fd:67:e6:06:2a:68:64:c1:0d:c6:c5:5a:69:
                    53:96:c2:04:11:4d:1e:49:9b:3f:51:02:7a:39:10:
                    3f:a8:80:dc:21:1a:0f:e9:55:ea:3d:af:53:c9:7f:
                    bc:50:6f:8c:91:07:9a:84:55:44:30:58:3a:ea:53:
                    49:ed:32:bc:4f:50:f7:d4:0a:a5:8a:97:e6:c6:50:
                    30:7c:4b:92:76:36:42:29:53:b1:9c:71:8f:33:e1:
                    a1:a6:53:aa:a7:31:82:38:fb:1b:6c:b0:04:f0:4d:
                    e1:ed:17:f3:91:e1:da:a4:ff:30:1f:68:bd:ca:f9:
                    1f:c2:b6:e5:6c:f8:01:6c:c4:3f:1e:6f:5a:60:9f:
                    18:0b:5d:bb:b1:e5:64:35:e6:2f:ea:12:48:f3:bb:
                    ba:91:d6:e4:b1:b1:aa:9e:81:09:a1:77:5c:8a:f1:
                    9f:da:06:f6:2a:62:e1:fb:28:e4:1b:39:07:55:f5:
                    c9:b6:ff:2d:a0:9c:89:ab:a7:f8:86:a9:54:39:4c:
                    94:32:82:76:dd:6a:d6:c8:61:f2:10:99:57:32:dd:
                    63:eb:35:73:8f:02:e3:98:70:52:56:e1:a1:f5:e9:
                    11:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0D:41:C5:C9:FB:BD:2A:72:37:69:60:5A:D5:B4:EB:12:09:CA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02ffb879-d980-3254-9199-6955d3845e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ba:51:7f:1d:32:ff:69:09:f6:b4:20:dc:ee:ab:ff:fa:8c:
         f9:5c:b2:a9:51:d5:49:1d:50:58:89:2c:64:91:9b:33:8f:40:
         4f:75:cf:0b:46:3d:4c:e9:56:95:4e:84:81:c0:6b:de:35:b4:
         f3:87:f2:bf:b0:57:76:30:f4:82:07:d8:59:be:10:5b:71:2a:
         f3:ec:d4:f0:85:76:20:12:b4:b7:1a:7b:ef:43:40:f6:5f:e0:
         8e:4f:8c:56:ad:83:c9:bc:7c:fc:5e:8b:70:fb:44:3f:43:f8:
         24:58:77:e4:fa:95:88:f9:79:76:e3:7b:1c:cc:06:df:61:60:
         f2:61:29:a3:68:3f:55:71:98:e3:4a:ca:2a:d4:00:36:d0:e6:
         1e:d8:c0:13:36:d4:0a:38:58:60:34:f4:e7:ac:54:b4:e0:54:
         28:94:e4:7b:9e:33:47:1a:a7:46:69:21:b7:92:b3:a3:c3:fe:
         e8:66:fb:cf:f1:2f:1d:d4:5f:32:1e:9f:4b:b9:bc:bc:e7:e5:
         53:b9:53:92:88:27:6e:d5:bb:2a:2d:05:aa:db:84:6b:4e:35:
         00:95:f1:87:32:21:ef:8d:32:e4:8b:80:b5:53:20:5f:3d:51:
         d3:e5:38:02:ba:81:78:27:5a:e0:b8:87:52:1e:57:c9:9f:89:
         06:13:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:53 2024 by rpki-client on console-ams.rpki-client.org