Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c5e41cd-0183-3549-8865-c2aa89307a96.roa
File:                     3c5e41cd-0183-3549-8865-c2aa89307a96.roa (raw, json)
Hash identifier:          fE1u6jGdjHUl9ibqEzBawRcbaX+imi02KR6aZ6nRTHY=
Subject key identifier:   02:97:07:3D:87:0B:96:44:6D:5D:93:9E:C9:B0:1D:48:CF:53:72:DC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584589A32155078AEA87B016CB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c5e41cd-0183-3549-8865-c2aa89307a96.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     12222
IP address blocks:        23.79.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:21:55:07:8a:ea:87:b0:16:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=6040a717-0153-4faf-9125-8bef89810550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:b6:2d:96:1e:a5:2e:69:c6:2c:89:60:d5:
                    bf:52:7d:ab:67:04:7d:3d:78:41:9b:df:c8:59:ca:
                    4f:f9:cf:70:72:ae:21:f0:31:26:d9:84:8b:0c:58:
                    f3:88:73:e3:0e:83:fe:a3:2e:6f:9b:54:3c:3a:d0:
                    d5:d3:c2:fb:28:2a:e1:c7:0b:dc:c4:f7:6d:e7:2b:
                    12:45:2f:d0:43:a3:f0:f1:af:4a:5b:d5:f2:d3:13:
                    31:ab:45:1e:9b:1a:24:d2:ae:2e:15:42:d6:6d:e6:
                    5c:79:82:50:39:38:b2:29:33:c9:3b:c3:f7:86:0e:
                    47:1b:d1:65:bf:6e:99:7a:d2:b4:74:09:37:5f:fc:
                    2d:09:fb:24:5c:e8:23:8d:62:33:c9:ce:71:5d:dc:
                    3b:31:bc:20:0e:d4:8d:86:8a:0a:46:8e:89:21:d5:
                    0c:79:11:1a:e3:ba:00:7d:ab:a8:a4:73:15:7b:cc:
                    c2:97:7b:d4:4a:eb:3c:20:b4:50:00:0b:da:f4:8f:
                    49:91:46:6e:f9:b6:11:4f:da:ae:88:6e:ea:97:29:
                    c1:65:9e:52:2c:53:f1:3d:dd:56:11:53:1d:a0:c5:
                    36:e3:04:90:e5:5b:25:bf:d9:53:b5:b5:14:d0:4b:
                    a9:ca:74:50:a0:1b:f6:5a:dc:3e:70:67:28:c0:b6:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:07:3D:87:0B:96:44:6D:5D:93:9E:C9:B0:1D:48:CF:53:72:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c5e41cd-0183-3549-8865-c2aa89307a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.79.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:76:63:5d:fd:e8:f2:3a:d7:de:ea:0c:ec:64:8f:cf:d7:e8:
         02:42:d7:b6:4c:7b:c3:67:1c:1b:c0:a7:d1:67:b8:85:7b:0b:
         e5:63:e6:18:ae:70:e2:39:2c:52:2c:3b:d7:50:d6:91:56:12:
         93:48:25:0d:31:13:2a:e2:de:ee:0a:d1:e1:4d:6f:a6:37:af:
         4f:8a:e5:ad:0d:bd:ad:da:17:5f:66:05:c8:6b:34:4a:b9:f0:
         bc:9b:01:02:6f:ee:38:55:02:ad:5f:1a:fd:3f:63:05:af:ac:
         31:a7:84:c5:32:06:ae:79:a5:d7:76:bc:bd:8f:f5:67:ef:f1:
         d0:35:77:ec:5d:b5:fb:28:a8:d4:8a:0c:96:7a:7a:5d:3a:55:
         81:da:f2:80:39:5f:4f:f2:46:dc:f4:e1:5d:4a:13:15:3d:95:
         2f:95:82:ac:aa:af:44:1a:a0:b6:1a:0d:0f:48:bb:68:53:87:
         35:55:df:58:f6:a2:78:85:0e:ec:00:77:7f:81:86:fb:36:08:
         c7:20:33:41:93:0a:49:9a:92:04:19:49:c9:04:64:50:40:4d:
         66:dc:0e:7c:c2:e2:7d:f2:4b:2a:70:9a:99:39:67:67:b0:a1:
         31:94:ea:13:fe:f2:dd:65:4b:de:dc:76:eb:f7:72:74:dd:e2:
         c3:60:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:50 2024 by rpki-client on console-fra.rpki-client.org