Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/668c3a0a-9fa8-3d77-a71c-b71b64a802ed.roa
File:                     668c3a0a-9fa8-3d77-a71c-b71b64a802ed.roa (raw, json)
Hash identifier:          BWhx9Ot8z0F6Hy+pogAqKZBAwnNMtNhRuZKEO6r+Yc8=
Subject key identifier:   77:39:7B:34:83:13:B3:6B:EB:73:08:BE:D5:3C:55:2D:90:6F:AF:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DE955D858974139249991400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/668c3a0a-9fa8-3d77-a71c-b71b64a802ed.roa
Signing time:             Tue 14 May 2024 11:16:29 +0000
ROA not before:           Tue 14 May 2024 11:16:29 +0000
ROA not after:            Mon 12 Aug 2024 11:16:29 +0000
asID:                     20940
IP address blocks:        23.44.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:95:5d:85:89:74:13:92:49:99:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 11:16:29 2024 GMT
            Not After : Aug 12 11:16:29 2024 GMT
        Subject: CN=59e575c5-b79d-46ff-ab95-904ccea2cce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:e7:70:86:11:9a:0e:39:bd:ab:67:b1:78:
                    e3:1b:ef:fe:00:61:00:19:bb:cd:d4:db:08:fc:ee:
                    96:8d:13:4b:85:3a:f8:d8:da:b7:39:36:1c:ea:e2:
                    09:3b:a2:8a:e0:69:37:d8:66:31:b4:bc:5e:92:11:
                    f8:01:14:66:52:50:9c:50:88:57:f4:f1:6f:05:85:
                    d4:78:f0:32:1b:5e:a9:c2:2d:0f:37:25:23:ef:73:
                    dd:8d:a8:2d:3a:d4:66:a9:1e:65:c5:a0:d4:3f:c5:
                    a0:4d:79:fd:8e:67:61:85:0b:09:56:6c:c2:9c:5a:
                    f5:33:19:a5:b2:f8:f0:c8:ef:35:6a:c4:2a:d4:7d:
                    f4:d8:b6:ee:5e:e5:2e:fc:cd:11:b0:16:bd:ae:82:
                    81:f1:c9:93:d2:8b:5b:7a:b3:fc:87:b3:33:44:d8:
                    90:cb:5d:a1:e9:a1:79:fd:33:61:8c:b5:90:6a:55:
                    e9:05:62:49:0b:74:ca:c1:74:89:f3:6d:7f:52:eb:
                    7c:90:16:e2:e6:e7:24:d7:a1:3c:8f:ed:24:6b:7b:
                    5d:0e:54:f5:25:61:f4:4d:1e:cd:8e:66:04:56:c6:
                    0a:e8:8b:2b:a9:b3:c9:6e:5e:ef:5b:47:71:5e:a5:
                    42:42:51:b4:f1:5d:4d:d6:93:47:ca:6b:ec:84:c8:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:39:7B:34:83:13:B3:6B:EB:73:08:BE:D5:3C:55:2D:90:6F:AF:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/668c3a0a-9fa8-3d77-a71c-b71b64a802ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:49:d2:00:1b:5d:f6:79:da:14:cb:15:85:be:04:99:66:18:
         f8:95:21:37:4b:ee:91:35:ed:f0:e2:50:f6:57:f4:d3:d3:ed:
         e9:e1:5d:4a:29:f0:be:44:9a:68:33:69:c9:fe:9c:87:49:10:
         6e:92:15:46:a5:0f:e8:af:f6:d7:df:2b:a3:e3:00:08:ad:04:
         a0:d6:9d:0b:df:20:f2:46:88:96:af:58:b7:88:f2:ea:16:ba:
         83:1f:fc:37:50:3a:df:24:56:8a:d6:81:e6:ac:00:5a:42:26:
         28:b8:7c:59:f0:60:32:45:75:c9:80:7b:7e:f8:8f:b1:94:db:
         f5:b3:8c:69:24:3f:8d:c4:24:51:e3:02:c0:1b:d2:92:04:22:
         5d:56:e7:27:11:d8:ba:30:f1:b4:1b:ed:d3:64:6c:35:83:de:
         af:82:12:41:22:cb:be:ab:30:e4:23:c7:85:d5:5f:08:7b:71:
         24:1a:96:d4:8d:ea:80:63:a0:a8:1c:8b:41:53:5f:10:b6:e4:
         2d:13:36:e1:e4:89:e2:c8:30:7c:2d:b6:ba:cf:60:e6:36:21:
         03:b1:96:80:cb:42:0b:05:c5:66:a2:2a:4a:e5:ca:40:63:d1:
         40:58:15:a8:5a:68:ba:0b:7e:a8:e7:45:9c:ca:53:ff:13:3a:
         cb:8c:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:15:30 2024 by rpki-client on console-fra.rpki-client.org