Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b6cce81-ed62-36bf-bcbc-c8d9860b234f.roa
File:                     3b6cce81-ed62-36bf-bcbc-c8d9860b234f.roa (raw, json)
Hash identifier:          loJZiO8eqEeC5s3KtGlXil7onacXkKo29IWtKVaKjMI=
Subject key identifier:   00:59:40:04:32:68:C4:DD:F7:A1:C5:2C:62:B0:97:44:26:92:1D:53
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845D0CACDADDFF5A08F967A8B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b6cce81-ed62-36bf-bcbc-c8d9860b234f.roa
Signing time:             Thu 09 May 2024 12:42:50 +0000
ROA not before:           Thu 09 May 2024 12:42:50 +0000
ROA not after:            Wed 07 Aug 2024 12:42:50 +0000
asID:                     16625
IP address blocks:        23.35.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:ca:cd:ad:df:f5:a0:8f:96:7a:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  9 12:42:50 2024 GMT
            Not After : Aug  7 12:42:50 2024 GMT
        Subject: CN=21d3a965-efe5-4992-9475-b9a02c3ab804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d6:05:99:34:ef:ce:1f:e5:0e:43:e0:fe:d7:
                    2d:4c:97:dc:ff:c5:90:0d:43:7f:ed:72:9d:f9:f4:
                    d5:e6:f8:e9:e0:8c:cb:93:75:01:c0:b1:eb:18:7c:
                    f3:30:11:be:5b:e3:87:44:7e:98:6f:14:9a:67:bc:
                    7e:53:1c:fd:e1:2f:13:60:d7:b4:ef:6f:32:66:71:
                    df:37:02:33:74:b5:fd:8d:2d:2b:2d:8a:12:f1:aa:
                    2b:18:19:03:d1:11:27:4d:6a:6e:25:84:9e:a9:04:
                    a2:e6:c0:4a:46:2f:68:6b:9e:59:e7:4a:03:2b:f2:
                    85:3c:2a:ac:6a:63:26:2a:80:39:42:99:9b:12:1d:
                    10:df:61:06:97:fc:0b:5b:c4:18:ce:ee:6e:b5:44:
                    f3:1f:0d:e5:10:d3:02:66:d7:6b:5b:34:15:5a:d7:
                    bb:52:70:7d:3e:6b:a7:ac:90:76:81:83:71:f6:40:
                    7a:1d:51:6f:b2:e9:b0:a3:0d:86:b3:06:72:d0:de:
                    aa:be:51:07:9a:28:72:87:d6:db:7e:50:bd:bf:5d:
                    f3:c8:20:06:46:0e:62:64:be:2b:b7:d8:ef:b2:ea:
                    a8:bd:49:b5:8e:46:99:3a:89:74:67:be:47:69:b0:
                    c1:8b:26:0c:93:df:2c:4d:e0:0a:6a:26:7b:40:e3:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:59:40:04:32:68:C4:DD:F7:A1:C5:2C:62:B0:97:44:26:92:1D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b6cce81-ed62-36bf-bcbc-c8d9860b234f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.35.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c8:3c:d8:f0:fa:31:c6:61:6a:15:7c:98:0d:7d:a1:7c:f2:
         76:ea:ff:d2:18:c0:29:37:49:3d:56:10:d9:8b:1e:3d:d8:86:
         e0:c4:6e:ca:4a:e7:00:b3:2c:79:d9:34:bb:1d:71:d8:1b:68:
         31:28:57:f9:98:5e:f2:69:53:85:ff:31:96:1a:8b:99:ae:fc:
         ac:b9:0c:cb:fb:dd:1a:54:a1:be:5f:e4:68:88:5a:64:31:de:
         46:cd:86:69:3b:0e:18:70:f5:7a:77:e2:91:cb:b5:79:da:51:
         d6:e5:cf:8a:47:63:1a:de:bc:c4:47:b5:9b:c9:86:9a:81:91:
         da:df:6e:84:71:d6:05:55:f3:b3:e1:b4:12:14:fe:ba:8c:07:
         c5:70:0d:24:71:5d:43:d3:06:57:c7:67:41:d4:b7:3e:b5:24:
         4f:89:92:b2:e6:4b:f8:03:e8:d8:35:01:b9:0c:4e:a7:73:41:
         ed:21:8c:50:2a:c6:10:f4:38:16:a6:a5:0f:0e:0a:93:b2:a4:
         14:a4:ca:d1:89:71:72:ef:ed:1e:b2:0b:01:33:45:70:af:23:
         a9:8b:3d:34:a1:09:f1:46:50:52:f2:a7:39:4d:ac:dd:a0:da:
         6d:cd:18:0c:af:90:52:31:d3:3b:ac:78:27:5c:ba:3c:0e:f8:
         f0:c4:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 02:54:25 2024 by rpki-client on console-ams.rpki-client.org