Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a620237-2bd5-3332-aeee-41e0feb4772b.roa
File:                     4a620237-2bd5-3332-aeee-41e0feb4772b.roa (raw, json)
Hash identifier:          w2ECuHT7MCB8r9OCSS2H70duhN/t54wHH1FCW5SQt0s=
Subject key identifier:   73:11:9F:5B:D5:6A:72:54:48:EE:12:63:19:C8:D4:40:99:1C:B8:CD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A6B4EFBAE77BF395D73D1B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a620237-2bd5-3332-aeee-41e0feb4772b.roa
Signing time:             Wed 24 Apr 2024 10:54:50 +0000
ROA not before:           Wed 24 Apr 2024 10:54:50 +0000
ROA not after:            Tue 23 Jul 2024 10:54:50 +0000
asID:                     16625
IP address blocks:        23.13.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:b4:ef:ba:e7:7b:f3:95:d7:3d:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 24 10:54:50 2024 GMT
            Not After : Jul 23 10:54:50 2024 GMT
        Subject: CN=d7a1eb12-f0ad-4659-9066-435ba0167e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:d2:15:1c:50:d4:1f:76:44:50:e4:ff:b8:
                    1e:e0:f8:15:08:f3:15:60:0e:55:a0:c5:9a:5d:b9:
                    0e:9a:97:24:e2:f0:8a:df:c5:e7:86:e7:9c:77:79:
                    f1:6d:28:c1:fc:57:4a:4d:5d:c3:d6:53:8c:32:c9:
                    e2:f5:50:24:c8:ef:f7:10:8b:c2:27:70:41:fe:51:
                    0f:d3:e6:05:d1:f8:77:6e:b9:7d:f3:6f:23:53:72:
                    c6:ee:b2:19:0e:77:2a:5b:ab:93:9c:6c:7a:9d:39:
                    f1:3a:f6:6f:14:22:68:af:60:ef:20:55:d1:88:3a:
                    75:44:19:00:38:56:c4:d2:2a:7e:10:8b:36:17:ba:
                    ad:f5:22:41:5d:eb:3b:7e:2a:29:31:e0:ca:70:9a:
                    34:c6:a3:c3:f7:3a:02:bf:b9:f7:a4:79:04:2e:ed:
                    da:4d:61:ed:cf:14:f6:b8:5f:64:cf:37:8c:76:49:
                    69:28:8f:ef:54:b6:51:bc:4c:d4:1d:54:6d:c2:2a:
                    28:73:b3:31:6c:1c:f5:ca:b8:ca:4d:13:99:31:83:
                    bf:fa:4a:69:52:4f:b7:73:bc:0d:3d:bc:b9:9a:b4:
                    75:13:9e:ee:37:9b:62:37:75:28:13:fd:96:46:48:
                    af:ca:02:83:04:dd:7e:54:0c:2b:4e:73:f7:1a:31:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:11:9F:5B:D5:6A:72:54:48:EE:12:63:19:C8:D4:40:99:1C:B8:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a620237-2bd5-3332-aeee-41e0feb4772b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.13.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:37:47:34:b5:e0:8b:0d:0d:15:0c:d7:ae:df:8c:b2:dd:
         6f:2f:98:94:5f:ac:36:fc:6c:45:5e:bc:2d:3f:1c:92:3c:e0:
         61:90:b6:90:5c:fc:09:45:76:41:09:50:62:46:88:f7:47:b7:
         93:9b:b6:04:5a:0a:79:ab:b8:37:d8:5e:cb:36:54:b7:70:10:
         32:da:ff:aa:13:ef:5d:74:d6:2c:a1:cb:e9:e6:78:8d:e1:69:
         9a:57:f8:c3:2c:55:9b:35:5c:6d:b7:c2:16:23:1d:20:a9:b8:
         07:96:77:f5:d9:31:a9:1f:44:0c:16:e4:6a:d0:03:53:22:91:
         01:5f:53:84:6b:e5:36:5a:52:f0:38:85:85:65:77:ac:24:79:
         52:c6:f6:0e:34:4c:60:7d:72:90:94:d3:4a:a4:b9:9d:e7:0c:
         9d:d3:d5:ad:6e:9d:8a:73:63:a2:57:fe:09:fd:eb:89:34:64:
         8d:02:06:a1:7d:dd:ac:d4:07:f2:f1:d4:a9:8a:98:cc:fb:20:
         ff:9c:f4:e3:08:b5:5a:0d:4e:2a:1d:de:63:56:48:3d:07:ba:
         41:b8:b2:6c:7f:bb:2b:f5:80:0a:cc:b4:68:8e:29:4c:f9:e9:
         12:24:db:98:d3:8b:34:72:59:d8:8b:6f:6e:1d:55:60:98:9e:
         18:f3:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:58:02 2024 by rpki-client on console-ams.rpki-client.org