Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9587cb92-7f84-38ec-9a69-380b921027c5.roa
File:                     9587cb92-7f84-38ec-9a69-380b921027c5.roa (raw, json)
Hash identifier:          NlRne8xLf/etGujuf1hchJ0mI5piyXCTw29KrzxjciA=
Subject key identifier:   5F:8D:EF:37:5B:91:CC:74:A2:51:20:AE:3C:D9:C6:4C:E4:51:D8:D8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A10ECA7FEF269C09AE110E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9587cb92-7f84-38ec-9a69-380b921027c5.roa
Signing time:             Mon 22 Apr 2024 10:21:01 +0000
ROA not before:           Mon 22 Apr 2024 10:21:01 +0000
ROA not after:            Sun 21 Jul 2024 10:21:01 +0000
asID:                     20940
IP address blocks:        23.72.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:0e:ca:7f:ef:26:9c:09:ae:11:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 10:21:01 2024 GMT
            Not After : Jul 21 10:21:01 2024 GMT
        Subject: CN=32d68bf5-829e-4b7f-ba96-80520f35f9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:07:dd:29:5e:39:72:7d:f5:cd:5a:3b:50:
                    14:fa:4b:48:c1:ad:c5:41:2c:5f:a9:39:b8:9e:e0:
                    08:03:4c:e2:10:ee:7d:c2:3f:a3:cf:d6:d1:33:27:
                    62:40:82:ef:85:95:63:fb:79:e9:e5:ff:31:43:e8:
                    67:36:78:79:03:a7:06:b5:a9:93:f5:dc:b9:d5:a8:
                    18:20:26:42:e7:42:16:b6:4b:d2:af:91:1d:fb:ab:
                    17:9a:13:75:a5:ce:d0:27:73:be:5c:4a:ed:32:43:
                    21:9a:08:2a:a2:f9:96:21:29:fe:dd:8d:29:28:aa:
                    d6:1e:e8:ea:57:24:64:33:37:de:7b:af:d3:49:df:
                    1c:68:a2:b2:30:b9:aa:4f:8f:b5:fa:d0:06:75:b4:
                    b7:e1:c2:ae:6c:75:49:4f:4e:19:30:b8:51:1a:af:
                    3f:15:8f:a7:49:11:f7:95:a1:09:0d:69:dc:ab:2d:
                    08:4d:26:50:5b:63:b0:1f:4c:54:93:21:fb:f1:c5:
                    8d:17:95:bf:3b:cc:58:83:6d:e5:3e:66:8e:ae:34:
                    0f:91:6b:7c:a1:88:55:8b:5f:c0:71:ab:a2:98:5f:
                    c6:a8:67:64:90:7e:2c:50:9b:01:81:70:2c:15:28:
                    52:75:5a:09:60:8d:a1:2e:7b:e8:b9:73:91:a7:33:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:EF:37:5B:91:CC:74:A2:51:20:AE:3C:D9:C6:4C:E4:51:D8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9587cb92-7f84-38ec-9a69-380b921027c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.72.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:33:7a:20:90:7d:49:fc:ce:2d:18:4a:d6:d3:c5:2f:ef:22:
         73:18:6a:77:54:60:a9:a2:11:ca:29:09:4b:7d:97:7f:ec:50:
         14:73:f1:7d:bc:05:ce:9f:3e:af:91:bc:fb:16:d1:5d:43:20:
         e0:f1:e3:c5:ae:8e:90:72:13:63:bf:7d:54:f3:9c:f2:0c:7d:
         7c:d5:c7:3c:26:ae:0f:f2:6c:eb:56:4c:65:c7:60:4d:df:32:
         79:48:70:47:da:ca:45:a9:7f:9a:85:27:12:b4:03:b3:97:7a:
         ab:5b:6b:1a:34:10:96:8c:98:c8:bd:d7:1a:2c:62:1f:76:2a:
         03:5c:24:22:69:e1:0f:f6:f5:eb:29:2e:43:ae:d1:62:d5:c2:
         2c:6a:70:87:65:82:c9:39:c7:d9:1d:f2:68:80:56:7c:9e:2d:
         ac:1d:97:4e:ca:ab:49:c1:63:c6:fe:c2:ab:15:38:50:e5:60:
         d5:23:42:07:43:89:cc:28:1d:d5:10:e4:76:51:66:f7:f9:22:
         8c:39:c4:35:22:dd:65:b7:18:44:ec:f0:3b:94:cc:6c:dd:4a:
         6a:b7:d0:32:15:e6:ed:50:6d:5e:aa:ad:bc:12:38:79:2d:af:
         12:97:20:84:5c:f7:5c:6d:dc:2b:bc:76:0c:19:48:ae:eb:3a:
         b6:1a:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:57 2024 by rpki-client on console-fra.rpki-client.org