Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239720e0-e11d-30ca-af45-e60757f8a209.roa
File:                     239720e0-e11d-30ca-af45-e60757f8a209.roa (raw, json)
Hash identifier:          XddO8s+76dRNa9IPpDWDApnxNZv/yzUOsW4cPJPtSt4=
Subject key identifier:   6A:B3:66:85:8E:DB:CC:72:03:57:5C:75:7B:C3:83:F0:04:17:81:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A698FFA0086F38F25F79F2B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239720e0-e11d-30ca-af45-e60757f8a209.roa
Signing time:             Wed 24 Apr 2024 09:58:32 +0000
ROA not before:           Wed 24 Apr 2024 09:58:32 +0000
ROA not after:            Tue 23 Jul 2024 09:58:32 +0000
asID:                     16625
IP address blocks:        23.3.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:98:ff:a0:08:6f:38:f2:5f:79:f2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 24 09:58:32 2024 GMT
            Not After : Jul 23 09:58:32 2024 GMT
        Subject: CN=ce756e84-6822-4d3c-be62-841da8209431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:ba:44:2e:1a:87:3b:67:96:57:8b:18:68:
                    90:11:d5:08:39:43:3c:9c:53:d7:86:f5:22:a1:04:
                    8b:9d:c1:ec:50:ec:66:43:78:3b:8c:0a:67:25:29:
                    19:ae:aa:f8:81:87:c8:d0:54:3b:06:2f:54:2d:43:
                    6c:17:80:45:86:96:51:88:55:74:9c:74:e3:b9:40:
                    d8:d4:04:cd:27:b9:f9:18:68:2c:7f:24:83:a1:cc:
                    7b:27:24:76:16:21:58:c5:14:cf:25:16:cc:11:a6:
                    50:a4:2c:9d:ee:3b:7d:0e:fb:9b:71:b3:da:bc:e6:
                    9c:d8:c3:ce:0c:b9:c2:45:77:cf:1e:fa:93:e4:ad:
                    8c:20:9e:77:b8:ed:d8:6e:ae:d6:55:84:45:81:87:
                    1f:bc:6a:26:d5:a3:0b:8f:77:ca:dc:13:4f:59:c4:
                    3e:12:5f:31:8b:bd:38:f5:41:7e:b2:f6:7c:25:f3:
                    b0:f4:a1:5f:13:c3:95:7b:56:5d:a6:9e:ac:0a:5d:
                    24:9a:a4:b8:03:02:34:8d:08:fc:55:55:6c:81:fd:
                    aa:92:a1:f3:cd:e3:3b:8a:91:74:fb:e5:57:db:ce:
                    b4:43:12:20:5a:49:8b:0e:1c:16:e0:bb:a9:ed:12:
                    5d:86:b2:63:67:3e:30:0f:21:b1:a0:60:52:0e:80:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B3:66:85:8E:DB:CC:72:03:57:5C:75:7B:C3:83:F0:04:17:81:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239720e0-e11d-30ca-af45-e60757f8a209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.3.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:39:ca:08:04:cc:a5:7a:c7:1b:d5:6b:80:8c:c0:a6:42:e6:
         b3:c3:f0:60:b8:4b:fb:f3:12:20:a5:44:aa:52:ef:29:44:6d:
         a6:7e:a6:da:90:a7:1e:75:fc:9e:fc:37:0b:f7:80:60:f3:d9:
         8a:e0:e7:a6:ec:aa:57:12:11:86:58:43:40:24:59:7f:f2:04:
         cd:11:28:6e:e9:cc:48:7a:1e:9d:0f:c4:07:6a:98:d1:4d:b9:
         36:aa:27:3d:a9:5e:cd:7f:13:a0:32:ab:58:3b:5c:73:44:83:
         a3:83:db:11:98:c7:f2:24:1b:0b:11:b7:af:88:e5:2c:48:f7:
         40:6c:0d:4a:3d:8c:9f:22:39:79:28:94:31:6f:b3:4c:fe:78:
         fe:1f:7d:11:0e:04:6f:ec:68:0d:b1:04:8d:20:91:f9:e3:0c:
         0a:c2:91:74:68:7a:6e:63:1d:68:28:a6:16:1b:f3:d4:e3:80:
         c9:83:1f:f5:de:eb:71:54:89:f5:2a:58:f0:ce:53:8b:1c:20:
         d3:fb:94:8e:54:55:12:4e:91:e0:e1:c4:15:0d:aa:f1:fa:18:
         ef:c8:f3:d5:22:b9:be:ce:16:82:4a:9e:c6:33:e2:97:08:80:
         3f:42:f7:c9:f3:98:ff:c7:31:59:a4:24:6f:e8:af:ca:a9:4b:
         59:5c:7a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:18 2024 by rpki-client on console-ams.rpki-client.org