Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76384d38-f8f1-3dce-9e99-25b897cd0e4b.roa
File:                     76384d38-f8f1-3dce-9e99-25b897cd0e4b.roa (raw, json)
Hash identifier:          oveLactjVdpDa9FNRc3OC7CwqEuxDQInyLHBDdKst3A=
Subject key identifier:   63:5B:ED:DC:5E:39:29:F8:D9:82:A3:8A:5A:77:CC:8E:F5:CD:E4:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845840DCBFD103FEA6407950E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76384d38-f8f1-3dce-9e99-25b897cd0e4b.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     35994
IP address blocks:        23.43.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:cb:fd:10:3f:ea:64:07:95:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=3ea55952-fdd2-4033-8488-fc786fc669ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:d3:36:f9:7d:48:1f:4b:ce:b5:ad:d5:89:
                    06:be:4b:4b:6e:8b:50:b4:e9:2d:e4:1d:61:d9:cd:
                    05:a8:e2:31:9c:21:61:e4:4a:8a:90:41:a6:ca:36:
                    5c:ab:d3:81:d4:fc:d2:dd:3d:0e:37:f9:1c:99:3c:
                    87:a5:dc:c5:9e:cd:24:f3:8c:37:9d:f4:f7:e5:d2:
                    14:ad:11:79:18:67:91:f9:bd:90:a7:01:da:66:4e:
                    31:ec:58:8e:1c:e9:8e:1d:5e:7f:4c:c1:60:f1:cf:
                    5e:a4:c3:a1:97:ed:56:ee:03:b8:fa:98:86:4a:d9:
                    b9:db:35:8c:77:e1:79:17:48:7d:fc:3d:eb:bb:73:
                    b5:53:2c:c0:db:45:f4:df:e6:f0:1d:6f:1e:4f:73:
                    c5:83:f1:53:53:e7:02:53:2d:88:ac:a9:d7:68:00:
                    0e:b3:b1:50:71:e1:c7:0a:b0:30:b6:86:a8:3b:7b:
                    bf:52:d3:48:08:d4:30:65:7f:c3:49:04:69:82:4a:
                    fe:42:67:7a:63:48:b8:a2:d6:8e:d8:8c:89:7a:0b:
                    09:06:a9:27:9c:68:94:20:4e:ae:86:9a:91:1a:3b:
                    42:a4:b4:7d:8e:f4:d6:e5:59:8a:52:02:a7:1a:a6:
                    6c:11:b0:db:28:e4:09:04:14:e3:1f:30:23:87:a5:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5B:ED:DC:5E:39:29:F8:D9:82:A3:8A:5A:77:CC:8E:F5:CD:E4:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76384d38-f8f1-3dce-9e99-25b897cd0e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6a:d2:e7:6a:21:69:14:23:41:fb:1d:ab:44:ba:59:ba:a6:
         d8:d7:2b:3b:d5:5b:e8:7f:7e:cf:b8:2d:82:bb:ce:ec:59:f4:
         be:7f:fb:47:92:aa:0f:b6:ec:9a:a2:5a:98:7b:fb:ea:7d:bc:
         8f:11:bf:06:c9:f6:50:26:3e:92:34:24:2f:a9:b9:04:fa:84:
         4c:d7:e2:e9:82:62:bd:7e:0d:1c:cc:77:00:5b:02:0b:3d:20:
         7c:c0:4c:5d:6f:7e:53:32:15:74:84:9c:f1:34:2e:57:17:1e:
         b1:ff:18:83:65:21:93:19:69:43:c7:f8:2b:e7:d9:5d:0d:08:
         b9:b0:58:8f:b1:4d:9f:e5:42:af:80:7e:49:04:52:2d:a8:60:
         f1:07:f3:e0:6f:cf:9f:89:c9:06:ef:9f:5b:e3:12:fa:6f:75:
         5d:66:52:6c:51:d4:5e:dc:b4:cd:44:56:a1:eb:7e:b6:fd:fd:
         fc:9a:41:ea:68:16:c4:ac:ad:1e:8d:b1:aa:69:ee:58:f7:00:
         ff:11:10:19:fc:c3:b9:4a:f6:78:fe:a2:3d:e8:33:4b:9a:96:
         42:a3:04:8c:a9:3f:dc:fb:79:c3:02:63:95:f1:33:03:80:64:
         c2:6a:c5:25:01:ef:33:51:3f:4c:88:1c:c5:2e:4a:e4:4f:3f:
         fb:b6:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:57:49 2024 by rpki-client on console-fra.rpki-client.org