Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81aaea0f-9864-365f-b348-2578cb48cdec.roa
File:                     81aaea0f-9864-365f-b348-2578cb48cdec.roa (raw, json)
Hash identifier:          5hBG/XPeBY/hyo2Y46X7bAuSWhSxUKkeRHX1xZM3CBY=
Subject key identifier:   0C:6F:6D:05:80:56:4F:66:F8:A8:99:EB:6A:CE:D0:56:F2:1E:70:38
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DEC00E90C1CC4C5CFEB4A780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81aaea0f-9864-365f-b348-2578cb48cdec.roa
Signing time:             Tue 14 May 2024 12:42:30 +0000
ROA not before:           Tue 14 May 2024 12:42:30 +0000
ROA not after:            Mon 12 Aug 2024 12:42:30 +0000
asID:                     24319
IP address blocks:        23.45.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c0:0e:90:c1:cc:4c:5c:fe:b4:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 12:42:30 2024 GMT
            Not After : Aug 12 12:42:30 2024 GMT
        Subject: CN=217d0810-6394-44f2-b436-61a37f1d9298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:b7:c5:65:35:ee:29:e8:fc:2d:64:ce:58:
                    16:27:aa:bf:e3:8e:46:06:b3:95:53:c1:12:df:02:
                    34:7a:94:59:74:5d:48:ff:0d:d5:54:36:5d:6c:16:
                    29:f2:e9:23:c0:79:13:4d:01:a4:fc:b4:aa:00:d0:
                    5a:8f:92:f1:91:f8:bf:6f:42:ae:03:61:44:39:d4:
                    09:53:be:97:9f:46:6f:6f:97:c7:69:35:26:ff:ac:
                    3e:56:03:aa:09:c0:1d:4d:15:8a:46:1a:d4:95:73:
                    81:3b:d8:47:2f:75:7b:38:72:a8:d3:2b:ce:66:a6:
                    95:68:fc:0c:bb:31:1e:1c:a5:5b:e4:c1:00:cb:5c:
                    9e:75:17:de:ea:6f:cf:97:d2:b4:9c:67:29:b0:88:
                    0e:82:34:f2:ff:8f:46:43:0a:b3:5f:45:14:02:09:
                    31:78:d8:5b:cf:b0:81:e2:f8:5f:10:b0:8a:34:6c:
                    ed:e2:13:5f:b8:3f:e1:a5:cf:ed:88:ec:44:36:a1:
                    bd:16:a8:f3:a2:01:54:03:06:63:32:79:cb:89:58:
                    2d:6d:a1:03:f2:4c:ae:f5:86:e8:c3:f7:72:4c:70:
                    15:8a:74:98:92:56:cf:e8:76:3b:06:54:25:1c:b9:
                    31:30:d8:5e:a3:ab:b7:0b:a9:a9:ec:97:36:52:7f:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6F:6D:05:80:56:4F:66:F8:A8:99:EB:6A:CE:D0:56:F2:1E:70:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81aaea0f-9864-365f-b348-2578cb48cdec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:aa:52:35:85:10:3b:52:59:c6:e3:7e:10:d3:03:e2:03:c5:
         84:8d:d1:a4:d0:4e:64:00:eb:eb:aa:d2:b2:62:10:39:f9:a4:
         ea:d0:07:16:b6:54:82:ca:0e:5d:d9:8c:60:ab:a8:c7:0c:47:
         53:8e:29:2d:71:40:33:2a:b8:66:a3:fb:72:d7:88:cb:d2:c2:
         59:99:b0:bf:28:66:70:ea:03:15:bf:1a:4a:bc:3b:63:bc:a2:
         b4:f5:a3:c5:07:f4:82:34:20:79:99:33:c1:b3:eb:34:e7:88:
         57:7f:b7:7b:02:9c:f0:a3:d6:d3:46:91:31:ee:6f:8d:c0:82:
         7c:6b:c9:4b:e1:f7:d8:cf:fd:8a:92:d6:57:55:eb:9a:a8:b9:
         bb:2e:3d:38:a7:2a:fe:42:07:fa:3d:1a:f5:e1:83:47:21:83:
         eb:60:52:ad:10:01:f3:c1:af:7d:4a:3e:0c:a1:42:9b:b4:a3:
         27:9c:e2:07:42:dd:a7:58:16:8e:bf:95:5c:34:95:7b:3e:ad:
         a0:f2:9f:9e:e4:50:3b:54:cc:10:90:96:0c:c4:2b:a4:cc:d0:
         d4:21:39:fa:70:6b:b2:d6:43:d2:81:5c:f1:82:b7:37:98:72:
         16:3c:6d:1c:2c:3d:44:1c:96:81:c9:4b:1b:44:5c:60:c9:fa:
         23:1d:ff:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:13:47 2024 by rpki-client on console-ams.rpki-client.org