Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa
File:                     94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa (raw, json)
Hash identifier:          NY8HgMuf/cEO8BvDSEys8QelGIXyRBSVKaHAJi3zSbs=
Subject key identifier:   1D:64:E0:89:38:41:8C:FC:72:A3:B7:66:DB:13:67:84:0E:66:C0:2D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DE956059CBFFB8B474062B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa
Signing time:             Tue 14 May 2024 11:16:30 +0000
ROA not before:           Tue 14 May 2024 11:16:30 +0000
ROA not after:            Mon 12 Aug 2024 11:16:30 +0000
asID:                     35994
IP address blocks:        23.44.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:95:60:59:cb:ff:b8:b4:74:06:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 11:16:30 2024 GMT
            Not After : Aug 12 11:16:30 2024 GMT
        Subject: CN=506b1dae-7c93-49e0-8897-4e0f695778b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:0c:77:29:a6:9c:24:1f:13:39:53:5a:ad:
                    ca:c7:48:ab:01:aa:bc:61:df:41:eb:b5:0f:82:20:
                    8a:3a:77:44:33:5c:2e:01:83:cf:ce:a6:ce:68:d5:
                    fc:fb:c0:93:d7:87:b9:ad:9a:3d:e9:86:be:dd:9a:
                    87:d7:ab:30:a9:bd:da:99:fd:92:16:ae:84:83:da:
                    d6:87:4d:98:b2:bf:0e:29:76:9e:fc:f9:b0:56:fc:
                    d3:23:de:30:c9:d6:7c:01:28:fb:92:29:43:d6:b2:
                    34:a8:6a:87:09:b2:88:49:95:aa:e2:1a:4b:12:78:
                    7e:60:ee:1e:06:9c:38:d8:09:a8:4a:c8:cf:8f:36:
                    07:70:b2:31:9d:0c:99:3a:44:d5:34:66:d7:2d:05:
                    8d:1f:18:ae:2f:51:4e:e2:a3:07:11:52:99:a9:58:
                    7c:81:3d:99:a0:8c:38:53:1d:05:64:6d:bc:23:35:
                    02:ff:c5:95:65:07:4b:e4:ad:30:c4:b7:b4:1a:6e:
                    de:c0:f6:cd:ce:7b:b6:7e:27:4a:b0:1f:79:03:90:
                    1b:59:aa:2b:6e:ba:79:e1:50:55:f3:1f:2c:7a:39:
                    ed:dd:26:97:7c:fc:31:4b:69:04:77:b4:6d:7e:49:
                    de:07:b6:1d:91:7c:31:95:ee:09:5a:46:bd:79:78:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:64:E0:89:38:41:8C:FC:72:A3:B7:66:DB:13:67:84:0E:66:C0:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0a:55:90:28:86:7c:ea:ed:a0:ad:86:83:ab:bc:19:cc:d7:
         ea:83:3f:da:b9:0d:7a:f2:dd:b3:c5:c9:d8:57:26:ff:5f:41:
         bf:16:b4:b8:2a:69:8f:63:91:48:24:eb:c9:f6:0b:b4:5a:4c:
         9f:de:2e:ae:30:5d:30:b2:72:1d:87:a3:49:07:ca:c3:6e:28:
         d5:72:e9:12:6f:70:32:ca:7a:d8:06:df:6e:47:52:52:9a:e8:
         26:e4:c0:66:b2:ed:a0:66:4d:6b:fb:8d:e1:87:e6:a1:65:98:
         41:80:33:11:51:61:0a:ac:6c:ec:ec:bf:d6:a0:d3:62:4c:3b:
         2c:0f:a0:1d:8b:b2:0e:ae:19:90:e7:73:ae:99:9d:fe:1d:10:
         79:7b:b7:a5:42:15:24:94:10:8f:a6:09:8f:6f:2b:14:0a:38:
         c2:9a:c0:b2:ab:40:2a:6f:7b:93:c3:be:49:db:ae:fe:d8:90:
         79:77:ed:28:da:a0:9f:89:32:a3:3c:9a:95:e3:36:52:53:c6:
         6d:f7:d3:67:71:08:b9:2d:84:67:fb:73:d6:b0:b2:b9:51:b1:
         b8:bb:47:18:c9:e9:d6:90:31:1a:3e:a5:65:d3:71:c3:12:d4:
         c2:28:29:c1:9f:9f:f7:f2:ef:7b:0f:04:22:9c:6d:bd:f7:47:
         76:c4:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:15:38 2024 by rpki-client on console-fra.rpki-client.org