Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e1dd81d-af2a-3b5d-8676-b6f9b81fc80e.roa
File:                     4e1dd81d-af2a-3b5d-8676-b6f9b81fc80e.roa (raw, json)
Hash identifier:          J1+BlknSfdbFrxFuhemydhnYDk2z1aegCx0Cm4horV0=
Subject key identifier:   B5:C8:C4:70:0D:DD:33:6A:AC:0C:11:48:03:DC:7D:E1:09:A9:9B:82
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DBB970007384789A79973DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e1dd81d-af2a-3b5d-8676-b6f9b81fc80e.roa
Signing time:             Mon 13 May 2024 10:41:44 +0000
ROA not before:           Mon 13 May 2024 10:41:44 +0000
ROA not after:            Sun 11 Aug 2024 10:41:44 +0000
asID:                     16625
IP address blocks:        23.38.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:b9:70:00:73:84:78:9a:79:97:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 10:41:44 2024 GMT
            Not After : Aug 11 10:41:44 2024 GMT
        Subject: CN=e7946317-843a-4432-b79e-07110c156ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:eb:ca:65:f1:b0:ee:96:b0:7f:f9:f7:c8:
                    18:14:09:97:aa:2c:2e:5d:f3:81:21:04:bc:6d:93:
                    ae:65:df:d2:20:02:35:f6:d6:4b:e0:56:ac:d7:27:
                    a2:cd:21:d2:9a:2f:20:c3:44:93:1c:90:dd:2a:50:
                    1b:09:fd:cb:0b:e3:93:79:0e:74:7c:aa:98:e1:04:
                    c3:bb:21:5f:bb:ad:45:84:2b:fd:36:d8:72:30:13:
                    ac:2d:d7:cb:45:a5:11:7f:99:81:00:1b:f8:6c:05:
                    1c:eb:68:88:b3:9b:47:82:0e:d5:b0:de:ef:02:4f:
                    ee:29:1c:da:ad:dc:02:3c:be:38:43:31:f1:4c:06:
                    66:3f:0d:2b:09:14:63:32:67:a2:ae:a7:14:99:21:
                    90:83:dc:11:3d:1b:77:b6:99:21:5b:62:c9:a0:49:
                    5f:89:52:76:c9:a4:d3:74:97:90:08:26:00:56:85:
                    41:56:d7:4a:06:99:84:a8:23:b0:c1:53:a0:fc:a4:
                    7b:21:df:3a:32:00:4b:be:af:b5:7d:44:c9:75:89:
                    15:7b:13:51:ef:25:da:8c:08:7a:5a:5f:a3:17:98:
                    0e:35:e7:78:55:b6:d2:0c:1d:c9:6d:ad:76:b2:6d:
                    f5:7f:26:32:0e:bf:47:93:45:9c:26:21:f4:47:7b:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:C4:70:0D:DD:33:6A:AC:0C:11:48:03:DC:7D:E1:09:A9:9B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e1dd81d-af2a-3b5d-8676-b6f9b81fc80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:28:e3:50:e1:75:40:4d:62:32:02:60:3d:8c:36:e0:b6:e0:
         65:0c:9e:7d:f6:c4:e9:8a:65:4b:db:78:18:42:4e:03:6b:71:
         62:ea:f2:51:b5:4a:a0:b1:5b:36:79:ab:e0:66:7b:4e:44:e5:
         e9:fd:18:8c:4c:01:91:c0:c2:43:a2:97:2a:51:1a:35:69:ce:
         68:65:ad:0e:d7:ad:35:99:b9:bb:1b:c2:cc:05:11:fc:76:58:
         42:b7:75:c9:39:37:90:a7:e3:dd:21:90:c9:60:51:2c:ff:c8:
         67:34:b7:be:24:45:84:c5:a6:05:40:c2:f4:a9:cb:af:83:37:
         79:e1:da:e5:03:be:29:62:0d:67:65:80:a2:df:14:73:0e:ca:
         d0:0a:70:c4:76:68:4e:73:30:c3:08:b0:76:42:b3:c0:59:64:
         95:e4:1f:97:86:11:1a:e7:c2:0a:7a:ba:b3:7f:8e:15:c4:eb:
         23:a0:2b:bd:36:4e:57:13:1f:5a:be:1b:61:6a:7b:17:f9:bc:
         dc:c5:45:1e:2c:0d:03:88:58:06:20:d8:a7:73:44:2f:23:c7:
         0a:69:f6:35:df:dc:bf:bb:db:a5:1c:e1:be:76:14:7d:7e:ba:
         83:51:be:88:73:2b:42:e2:93:07:32:a1:f7:1a:97:8a:3e:c3:
         ea:90:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:15:25 2024 by rpki-client on console-fra.rpki-client.org