Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb9903d9-cf21-31d6-a50e-d3824b10d6dc.roa
File:                     cb9903d9-cf21-31d6-a50e-d3824b10d6dc.roa (raw, json)
Hash identifier:          jfpvrzVyah5hnFfYSAbrYJmtwIktFjt4ahoK3A3VtcA=
Subject key identifier:   EF:46:EC:32:9F:EB:74:C0:EF:75:90:BF:38:A4:B1:76:7C:F8:0A:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584595C9FD9257632F003773B780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb9903d9-cf21-31d6-a50e-d3824b10d6dc.roa
Signing time:             Thu 18 Apr 2024 09:28:30 +0000
ROA not before:           Thu 18 Apr 2024 09:28:30 +0000
ROA not after:            Wed 17 Jul 2024 09:28:30 +0000
asID:                     20940
IP address blocks:        23.64.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:95:c9:fd:92:57:63:2f:00:37:73:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 09:28:30 2024 GMT
            Not After : Jul 17 09:28:30 2024 GMT
        Subject: CN=aa5dda2c-b4a3-47c6-a276-58acce5ad84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:37:47:ae:dd:57:77:a0:7c:fa:0d:0f:d2:
                    fc:32:fa:5a:1d:a5:29:2d:23:ad:b1:ad:a5:f8:cb:
                    e6:33:a2:1b:2d:20:88:7f:aa:55:25:3a:46:ab:37:
                    4d:7a:11:ee:e6:bb:28:a9:25:8a:67:64:e9:51:37:
                    04:a0:8b:7b:d1:c4:72:3d:3d:39:28:65:db:21:7d:
                    de:c1:f5:32:b0:f5:bb:c9:5a:66:b1:2c:e2:94:0d:
                    fa:27:37:65:1d:72:63:7f:a2:ac:7c:f1:50:74:05:
                    e1:98:dd:cb:e5:bd:a5:27:f4:71:12:e2:a1:c7:df:
                    ec:5a:50:5c:03:c9:d0:b3:3e:63:51:44:d7:33:92:
                    ec:6b:20:43:36:4c:7d:23:f1:cb:49:52:8a:c8:07:
                    0e:1e:09:6b:56:c4:6b:d3:cb:dd:ff:d5:13:03:88:
                    a4:82:54:fb:82:7c:ea:44:94:cc:44:6d:56:dc:1a:
                    fc:11:c8:74:d9:d0:ae:4a:e6:22:a1:6d:50:11:4f:
                    a3:c2:b8:96:18:44:89:55:f4:47:ed:6f:e4:01:8d:
                    09:89:b6:b8:06:38:58:2e:51:09:94:71:89:ab:fd:
                    0d:33:7f:f8:22:9a:df:a3:58:fe:d4:6d:24:c7:e3:
                    9d:af:7f:45:fb:7e:01:50:7f:78:df:bf:6c:dd:b6:
                    a3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:46:EC:32:9F:EB:74:C0:EF:75:90:BF:38:A4:B1:76:7C:F8:0A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb9903d9-cf21-31d6-a50e-d3824b10d6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.64.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:06:c9:71:40:87:e5:1c:7c:56:62:c6:8e:8f:93:b5:1b:
         c5:0e:a3:e2:85:67:fa:6d:7d:3a:fb:dc:70:ff:b6:7e:0b:46:
         82:9b:2f:61:c3:9b:de:bc:3b:31:78:e4:21:77:d6:13:62:79:
         68:c9:b0:50:d9:c6:97:be:b2:b0:20:2c:ef:0e:ec:25:ae:72:
         47:24:a4:5f:44:c8:a7:1b:d7:04:ff:c6:86:dd:97:40:5d:7a:
         36:e1:c5:09:19:dc:7e:04:4e:bb:85:c6:d1:20:b1:ea:7e:15:
         7a:6b:44:6d:fb:10:de:59:72:f0:c5:83:19:68:3a:33:5f:c6:
         30:db:e4:b8:85:e4:ef:1b:35:95:3c:9d:ef:e6:89:56:85:d9:
         65:26:4e:bc:5d:d0:fc:50:e6:c6:81:a2:83:a4:cd:35:41:87:
         a9:ea:27:57:93:21:19:19:19:c2:07:09:87:03:a7:88:4c:ef:
         a0:39:e8:b8:de:44:18:30:41:74:42:7d:42:2f:88:a2:f2:18:
         e9:e1:a3:b4:44:c9:6a:46:d3:f5:59:c4:a1:ba:07:32:79:c5:
         4f:35:9f:bb:ac:bf:62:97:1e:0b:2e:2d:58:4c:ef:76:8a:f6:
         bc:f7:53:2a:a8:bf:09:0f:e6:04:06:02:da:c8:f9:b1:58:64:
         e1:e5:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:54 2024 by rpki-client on console-fra.rpki-client.org