Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3da6c1dc-643d-398f-a3db-de3d34a68e5c.roa
File:                     3da6c1dc-643d-398f-a3db-de3d34a68e5c.roa (raw, json)
Hash identifier:          Efq3GO8O5zav1+ruD4kIxD7SWV+pyZWZ3rj43jrP7NI=
Subject key identifier:   8D:08:AD:E5:37:F3:30:97:B4:1B:AA:B5:5B:DA:8F:00:CE:04:2B:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A436B1FCFDB09AC50685F140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3da6c1dc-643d-398f-a3db-de3d34a68e5c.roa
Signing time:             Tue 23 Apr 2024 13:28:51 +0000
ROA not before:           Tue 23 Apr 2024 13:28:51 +0000
ROA not after:            Mon 22 Jul 2024 13:28:51 +0000
asID:                     7713
IP address blocks:        23.11.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:36:b1:fc:fd:b0:9a:c5:06:85:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 13:28:51 2024 GMT
            Not After : Jul 22 13:28:51 2024 GMT
        Subject: CN=1529557d-5b05-4d66-afd4-098f9c15d997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:fa:30:61:dc:33:22:ec:39:9b:85:2a:54:
                    53:0f:08:01:7d:cc:a1:51:67:b2:bf:f2:37:fe:1e:
                    f6:52:54:c4:57:58:99:a6:c8:1a:dc:e1:03:a2:22:
                    55:f7:c5:e3:ad:82:3f:de:4c:31:40:b3:f5:a9:96:
                    8e:dd:6c:f7:43:dc:7d:80:f5:9e:b5:ae:7a:89:45:
                    43:fe:19:7e:f3:e6:e1:40:2e:8b:c4:d2:da:8d:c6:
                    63:50:cd:ae:5c:3c:58:1f:bd:65:29:83:5b:9c:a3:
                    89:9f:fb:23:19:fa:1d:48:90:f0:66:ae:4d:09:8f:
                    69:3b:14:2c:fd:a7:91:d8:95:a5:64:b4:e4:0f:f4:
                    2f:84:63:7a:36:b8:47:b1:40:ba:c0:48:9e:85:75:
                    f5:bf:f8:f8:70:68:3a:8d:b6:d4:45:77:98:67:51:
                    4c:2c:b2:62:e5:e7:fa:22:f8:93:2c:13:0e:53:32:
                    fe:2a:b4:57:d4:9a:b5:c9:08:75:35:ae:16:50:58:
                    5d:24:2f:30:e2:7f:c9:e9:35:8c:75:f3:ba:70:a0:
                    20:86:ba:bc:45:fd:21:15:53:5a:c0:d0:0c:36:51:
                    13:a6:5f:a9:01:62:59:fd:09:9e:01:75:33:86:2e:
                    40:57:dd:68:7c:71:f0:ca:eb:25:4d:28:fd:15:16:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:AD:E5:37:F3:30:97:B4:1B:AA:B5:5B:DA:8F:00:CE:04:2B:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3da6c1dc-643d-398f-a3db-de3d34a68e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.11.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:37:31:a8:62:c1:fb:aa:d5:6b:75:38:e5:13:20:61:e2:
         09:59:06:48:f9:29:a5:2a:02:81:87:8c:a3:fd:8c:67:80:57:
         9c:e9:65:a3:20:b0:ea:79:73:4e:ff:8d:95:29:09:b4:ba:fa:
         aa:c0:ca:44:11:1b:d9:2f:3b:d0:99:4a:b3:77:fc:ad:32:3a:
         7f:5c:61:94:59:fc:a7:85:7c:cc:a3:a6:56:6e:9f:8b:9c:36:
         2e:0d:e9:89:0f:a7:1e:ca:7d:3f:b0:57:d6:bc:82:5e:6a:9b:
         64:ff:67:3a:56:91:80:ad:7f:96:9d:2a:8f:b4:9b:96:4d:3e:
         d6:8d:8e:d7:58:8c:b2:7c:c1:ee:94:1c:c4:d1:56:c3:8e:70:
         b8:52:cb:84:72:f2:eb:09:43:ed:fa:ca:50:50:3c:f5:4f:c0:
         05:07:b0:38:3b:5d:5d:a0:62:a6:b6:8b:ea:e7:c0:af:68:d4:
         e6:ed:eb:27:e9:4f:7e:e2:9f:4d:db:9a:d0:8f:75:f0:14:ef:
         70:e0:a2:c6:2d:50:cd:e3:ef:85:e8:81:b9:ad:3d:1e:c1:9c:
         f9:29:d9:ce:4b:4a:04:90:a0:6b:78:63:fd:28:f4:7c:b1:50:
         5a:2a:ae:4d:00:f3:1d:bc:d6:ab:59:6a:3d:f9:be:c4:70:33:
         32:f5:ff:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:21 2024 by rpki-client on console-ams.rpki-client.org