Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a97e0916-c88c-3f30-9310-664ce6a8b4e6.roa
File:                     a97e0916-c88c-3f30-9310-664ce6a8b4e6.roa (raw, json)
Hash identifier:          IjvCgBuPRkyL1f4lrmSnY1WJSGTZSIcrsnsG2GU05Ak=
Subject key identifier:   AA:D4:0A:A8:39:62:14:DB:AD:D8:58:BA:9A:AA:65:B6:48:12:68:68
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858456C531425EAEFE30A4FFCF1E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a97e0916-c88c-3f30-9310-664ce6a8b4e6.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     21342
IP address blocks:        173.223.101.0/24 maxlen: 24
                          173.223.100.0/24 maxlen: 24
                          2600:14c0:b::/48 maxlen: 48
                          2600:14c0:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:14:25:ea:ef:e3:0a:4f:fc:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=689ee032-a803-4110-b95f-b5450eb53295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:b5:45:eb:5c:76:e7:71:ef:aa:7b:f3:f4:
                    3d:bf:94:6c:07:47:38:7f:76:04:46:a4:1e:a4:42:
                    ea:87:7b:ac:97:66:0d:a6:1e:4e:da:68:0e:c6:3e:
                    a2:fa:50:b5:8a:d2:b5:17:cc:3b:b2:0f:63:d9:e1:
                    60:52:6a:e6:e9:70:61:a7:f5:13:4f:88:80:80:52:
                    1a:1e:30:ea:08:bb:5c:1f:c7:be:39:59:c7:ee:35:
                    f9:78:36:da:b1:22:e0:16:f2:87:9c:65:39:56:33:
                    cf:14:95:a2:f3:d9:fb:7b:79:3b:98:f4:88:1c:89:
                    85:e0:9c:00:57:3a:1b:1b:00:02:30:be:41:ee:7a:
                    16:1e:16:ef:1d:24:ba:99:66:45:d4:08:f1:d2:23:
                    9c:5c:03:0f:be:db:bd:21:36:ad:ca:c2:fe:f4:b5:
                    23:8c:52:3c:83:bc:41:56:07:4d:31:75:2b:cc:6c:
                    01:40:7f:79:47:8b:60:47:93:4a:cf:9e:1b:64:a6:
                    b8:93:37:22:1c:46:3e:69:33:77:74:02:de:bc:40:
                    06:6d:a9:0a:96:03:be:90:89:8e:9d:24:10:f7:bb:
                    81:43:1d:35:30:f2:0e:b1:8e:12:9e:28:2c:6e:94:
                    d3:62:29:d6:d6:84:6e:91:98:35:44:f7:a0:44:b3:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D4:0A:A8:39:62:14:DB:AD:D8:58:BA:9A:AA:65:B6:48:12:68:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a97e0916-c88c-3f30-9310-664ce6a8b4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.223.100.0/23
                IPv6:
                  2600:14c0:a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:09:9e:f8:80:09:fc:e6:87:3c:b1:5b:79:98:00:6e:84:
         c1:0c:b8:47:6b:7e:77:09:de:21:0a:de:2a:1b:e8:70:2b:aa:
         31:25:5f:22:07:2a:c6:8f:f4:93:b0:24:9c:b5:c9:30:6d:3b:
         85:eb:e8:ec:76:84:d4:09:60:ea:10:f5:d2:ff:fa:07:a9:78:
         b4:5c:19:68:9c:d2:74:80:f5:a8:40:bc:2c:15:7c:e8:be:e2:
         12:b5:11:c2:d2:79:21:9b:45:70:67:2c:e3:c8:8a:7e:17:1a:
         6d:76:22:c4:d4:ba:58:8c:a7:ce:b9:3f:a6:9b:f9:94:36:fa:
         67:5f:ee:a4:c9:86:01:8a:06:16:fa:f8:d2:7e:a8:a4:10:5b:
         aa:9e:1c:91:62:0a:45:77:4a:ac:0c:49:43:00:82:ab:78:ff:
         44:37:bb:65:88:c8:fe:81:ce:0c:8a:34:85:fc:bb:69:26:0e:
         74:b4:32:69:e9:05:8b:38:3b:85:f2:c4:50:82:6d:f4:84:56:
         9b:7a:22:93:28:0e:28:bd:02:e6:04:e1:a1:05:9e:fd:1e:dc:
         a8:e9:45:21:d7:a3:4a:a1:45:e1:67:33:f7:ea:d5:bc:c4:a9:
         e4:39:91:1e:c1:d4:98:93:51:41:95:bf:59:b0:f8:d0:68:06:
         0e:57:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:37 2024 by rpki-client on console-ams.rpki-client.org