Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ac96cb-20bc-309a-8efe-948bbb9f3835.roa
File:                     70ac96cb-20bc-309a-8efe-948bbb9f3835.roa (raw, json)
Hash identifier:          oXS/mFy3MNVqyheqTFIct9N4ddUQa39Xm/I6EfOFCH0=
Subject key identifier:   2B:93:63:7F:B4:F8:FC:A5:85:33:FB:E0:67:8C:8E:00:EA:43:F8:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DEDF2235C7E3A60AE89347E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ac96cb-20bc-309a-8efe-948bbb9f3835.roa
Signing time:             Tue 14 May 2024 13:45:07 +0000
ROA not before:           Tue 14 May 2024 13:45:07 +0000
ROA not after:            Mon 12 Aug 2024 13:45:07 +0000
asID:                     35994
IP address blocks:        23.46.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:df:22:35:c7:e3:a6:0a:e8:93:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 13:45:07 2024 GMT
            Not After : Aug 12 13:45:07 2024 GMT
        Subject: CN=d97585dc-aa42-4e49-a1a7-524e27ba0445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:9c:e5:e5:25:13:a4:c2:e1:04:7c:0e:cb:
                    6e:55:c6:0d:02:57:37:62:a0:a8:ba:1e:07:1c:d5:
                    02:ed:2b:8b:c2:b9:7c:64:20:e4:6c:bb:f7:26:14:
                    d8:a0:e5:a9:f8:30:85:b6:f9:96:46:f9:25:33:e1:
                    b8:84:8c:1b:6d:f6:5a:92:00:c8:38:d9:eb:ce:77:
                    63:08:24:b6:2e:70:61:12:b9:46:9b:e8:2a:ff:b9:
                    62:03:07:8d:09:e7:e8:57:80:c5:75:80:6c:25:28:
                    48:15:50:47:27:f6:ff:09:40:82:68:a3:ea:ee:cb:
                    b1:92:1a:8b:58:ba:7b:78:a1:c9:44:a9:dd:2b:43:
                    ea:f4:cb:06:9c:8c:7d:ee:b5:a0:dd:fa:28:6b:e6:
                    5a:9a:35:2e:9b:63:81:2f:f4:9b:93:3c:8d:96:08:
                    01:4c:79:f0:da:ac:12:3f:4e:ce:08:04:d4:e8:20:
                    3f:65:e3:dc:2d:8d:21:e6:0e:a9:83:59:4c:dd:7a:
                    66:42:20:12:31:0b:f1:59:7f:11:fc:98:b5:35:93:
                    80:fe:6e:86:a3:4c:0e:fa:f4:aa:07:9e:f0:28:63:
                    89:b9:0f:67:c7:c8:1d:42:2e:b5:0d:00:a4:1f:1d:
                    d0:d7:82:fa:e8:b6:02:5e:b9:00:ed:23:52:f2:49:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:93:63:7F:B4:F8:FC:A5:85:33:FB:E0:67:8C:8E:00:EA:43:F8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ac96cb-20bc-309a-8efe-948bbb9f3835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:db:3f:15:44:e7:58:12:c5:22:f2:b0:7e:45:e9:31:b8:f3:
         c7:d2:ea:90:3f:e3:01:9d:58:8a:1d:e6:f5:d4:e5:52:30:f2:
         25:75:04:c4:d8:52:33:28:1f:9e:df:9f:8c:d2:e4:0d:84:75:
         86:c4:ef:18:31:40:2d:c3:8f:d5:d3:92:92:b9:6a:6b:fc:e6:
         46:e0:cd:b7:72:09:ef:41:fa:9e:3f:f9:7a:97:c0:66:10:4d:
         55:8a:a4:aa:09:e1:34:d3:94:cb:b9:76:0f:96:a2:c5:68:3b:
         7c:f5:80:fb:10:5f:18:ab:ee:5c:16:42:b9:c3:0d:be:c2:ab:
         bd:cd:55:1a:07:3f:87:6c:6d:40:33:72:c5:8b:b8:dc:6d:8e:
         d3:20:76:17:32:ea:0e:d0:d2:9c:d1:8e:1c:70:c7:54:a3:97:
         05:17:a0:0b:95:2e:02:27:67:f1:6e:2e:ae:e1:37:12:a4:f5:
         75:13:44:62:c2:35:0d:bb:3f:4b:53:10:1f:8f:34:bb:f6:b0:
         2a:91:d0:df:8e:09:80:00:23:1e:e3:5b:67:fc:bf:82:9b:16:
         45:19:fc:48:ea:9a:1f:af:d3:a4:9c:3f:eb:07:cd:55:6e:0a:
         ad:e6:9b:f9:29:eb:97:6a:99:11:d3:f4:82:f5:3a:41:3c:05:
         64:f9:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:15:32 2024 by rpki-client on console-fra.rpki-client.org