Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12281af5-fdcc-3e9c-8dd0-08c6ad675336.roa
File:                     12281af5-fdcc-3e9c-8dd0-08c6ad675336.roa (raw, json)
Hash identifier:          q/R7g78W9DQqhCggdTDaN5DrritMY888LNsNMA1/n3I=
Subject key identifier:   1D:FF:40:A5:93:B5:FD:9A:35:D8:4D:8A:85:48:4A:5C:35:70:2F:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845CD995245914FB5B65A67DE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12281af5-fdcc-3e9c-8dd0-08c6ad675336.roa
Signing time:             Wed 08 May 2024 09:15:43 +0000
ROA not before:           Wed 08 May 2024 09:15:43 +0000
ROA not after:            Tue 06 Aug 2024 09:15:43 +0000
asID:                     9498
IP address blocks:        23.61.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cd:99:52:45:91:4f:b5:b6:5a:67:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  8 09:15:43 2024 GMT
            Not After : Aug  6 09:15:43 2024 GMT
        Subject: CN=520d000b-c271-414d-bb44-5f66aa805fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:80:bb:cf:17:a1:ac:5d:0d:e8:3f:a7:b4:
                    18:49:bc:6d:a0:7b:76:7b:b7:d2:1b:68:9b:ae:e3:
                    73:7b:09:73:17:e9:78:45:8f:49:6d:0b:f2:8a:0d:
                    67:d4:07:09:cc:17:6d:96:6b:0f:ea:4f:47:b3:90:
                    2e:71:1a:c7:4a:47:09:f9:0a:8a:32:ce:55:44:27:
                    8e:d5:15:74:f7:b7:1d:9a:62:da:2b:76:32:dc:35:
                    01:19:b0:d8:2b:8f:33:a5:65:f9:0b:a8:5c:6c:99:
                    82:8c:70:53:6c:87:96:16:13:9f:71:e1:2e:c5:f1:
                    95:dd:8d:d1:81:86:7a:22:ad:62:2e:c2:e0:82:cb:
                    26:92:9a:94:16:b7:a5:e9:88:f9:43:55:78:91:d1:
                    73:47:ce:34:6d:72:79:29:6f:56:ee:cc:c3:ea:1b:
                    5c:09:10:25:37:78:a0:78:22:07:65:c7:89:1a:f9:
                    3c:4e:11:a7:90:4b:c5:70:e5:12:86:fd:33:ed:26:
                    c6:09:06:e1:11:4f:23:5b:f4:02:6c:f7:20:d9:52:
                    c4:da:31:11:71:4b:c1:8e:48:8c:93:ee:f2:a1:32:
                    6b:2a:28:23:b4:ee:39:3d:11:b9:45:f2:d8:1b:c9:
                    14:bd:2b:91:10:1b:1b:d3:6f:92:04:40:64:30:50:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FF:40:A5:93:B5:FD:9A:35:D8:4D:8A:85:48:4A:5C:35:70:2F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12281af5-fdcc-3e9c-8dd0-08c6ad675336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:11:25:88:59:5a:3b:4a:20:e8:e5:46:a5:1a:24:19:9e:d4:
         1d:51:be:2f:51:18:5d:eb:e3:77:f3:47:14:db:1a:01:a6:fe:
         b8:e3:00:11:0d:32:65:8d:19:55:7f:89:11:b4:ed:4f:6e:7e:
         75:46:6c:d8:94:eb:31:c3:8d:53:b4:85:cc:5f:a2:a0:ff:c5:
         63:e1:49:82:8a:fa:69:16:c5:91:d6:5f:47:40:4f:60:6e:e9:
         d3:d9:7f:95:9f:88:d9:e1:ff:76:38:e6:ca:91:7f:80:ad:a7:
         81:88:49:76:22:51:f2:9c:80:3f:4b:2c:b4:0d:27:d6:d2:97:
         21:39:b2:61:e1:ca:8e:c3:cf:5d:63:b6:c1:96:b7:ad:00:e7:
         8a:d0:6c:19:51:01:b5:48:60:f0:8b:9d:cc:06:bc:10:33:4f:
         09:60:9e:8e:2b:08:d8:28:63:0e:de:b6:95:b1:60:d6:d6:f9:
         41:df:3b:c5:38:93:c7:e8:10:86:e8:85:5b:91:04:9d:c7:36:
         3f:30:5d:78:8b:36:c8:0b:c9:35:02:ec:92:2c:29:d6:60:f4:
         ee:97:b9:f2:40:6a:bb:09:e5:58:f1:a4:d4:d3:44:f8:59:2c:
         ea:d9:7a:62:e0:ec:ff:33:e3:30:ca:ba:1c:37:d6:0c:35:74:
         47:ed:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:15:14 2024 by rpki-client on console-fra.rpki-client.org