Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da41a18a-e78f-3f41-be28-54998a87623b.roa
File:                     da41a18a-e78f-3f41-be28-54998a87623b.roa (raw, json)
Hash identifier:          BvnoQmcy85JPKI0qlcO9qLQqgnh61uNhltb8xPNTH2c=
Subject key identifier:   A2:32:5F:1E:1A:FD:8D:48:C5:CE:3B:87:50:DB:43:07:C0:60:93:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845840DCC99C3BFD88EF7401A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da41a18a-e78f-3f41-be28-54998a87623b.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     35994
IP address blocks:        23.211.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:cc:99:c3:bf:d8:8e:f7:40:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=70e1082e-3fb9-4847-8e2c-a35ae6fd377c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:21:04:27:14:ab:8f:41:7e:55:44:9e:0a:f6:
                    41:85:da:79:38:b3:39:50:f7:9f:17:50:00:4e:83:
                    e4:32:70:f7:45:ab:d0:35:68:fc:72:17:a7:9a:ff:
                    7a:dc:cf:c7:5c:a1:88:3c:9d:4c:77:3d:c3:0a:a8:
                    6e:4e:96:50:ea:27:b9:ab:5d:10:8f:20:9a:9d:75:
                    45:76:4b:2a:a1:a5:23:bb:7e:7c:da:99:ec:35:42:
                    d0:9f:3a:6a:86:c1:01:b0:9f:df:db:18:a4:73:93:
                    92:db:52:ca:4f:ec:aa:ec:12:38:b0:92:0a:2f:69:
                    97:3f:19:a5:1c:e4:d8:8c:04:04:27:80:88:ed:94:
                    df:6c:00:25:69:a9:29:20:3d:6b:b2:9a:07:06:7f:
                    26:54:89:60:9a:dc:9d:28:93:3a:07:96:eb:74:f2:
                    db:85:72:b1:64:d8:07:8f:5b:10:dd:64:22:1a:98:
                    48:f2:d1:34:6e:17:24:61:f0:1c:94:a3:f0:e1:1b:
                    ca:6c:e9:55:62:ba:38:49:22:60:cc:f2:9b:f7:e7:
                    42:bf:d4:0e:30:2f:7c:d3:d2:8f:d9:e1:68:f2:30:
                    5c:f3:8a:e7:06:71:90:9a:a7:26:55:79:7c:87:e0:
                    64:83:cd:78:66:e3:f5:e2:82:34:e6:56:e2:fa:71:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:32:5F:1E:1A:FD:8D:48:C5:CE:3B:87:50:DB:43:07:C0:60:93:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da41a18a-e78f-3f41-be28-54998a87623b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:64:fb:a5:d7:f4:51:ef:e4:3c:41:85:58:b8:d5:cc:24:
         0e:fa:14:23:69:01:65:48:ae:89:c8:62:03:50:5b:ac:fa:46:
         80:4e:9e:7f:50:7d:a2:e0:9a:ad:e3:2c:ce:5b:2f:68:a8:ff:
         04:ea:1e:24:6c:34:24:c9:27:32:11:9b:f6:2f:c8:6d:ce:e1:
         c9:a6:54:5b:6c:03:08:ec:30:24:66:77:c4:ad:b5:7d:be:90:
         16:67:10:2c:a3:14:0c:36:2f:3f:45:8d:05:cd:5a:47:d9:61:
         e5:c7:a5:11:5c:80:36:2d:90:8d:32:4c:e0:1b:73:24:3f:9c:
         e0:52:db:df:3d:b8:5d:92:dd:d1:9a:10:00:eb:42:58:12:69:
         5c:df:03:5c:d9:55:ff:f3:19:b5:fd:82:09:96:fd:76:25:b8:
         fb:9f:77:4e:55:e8:4c:e7:21:e9:49:5e:c7:86:cb:20:84:78:
         c8:8c:29:5c:d2:67:59:5f:6c:71:35:5e:79:bd:bc:f4:73:1b:
         ef:3a:73:10:af:8f:95:a6:3f:55:f6:fb:27:03:57:cd:79:94:
         9c:10:b5:1f:96:2a:7b:94:ac:4e:4c:9e:cd:64:f1:57:4b:30:
         5b:11:0e:b1:29:9e:99:a1:be:be:07:e1:7a:49:08:51:53:26:
         ac:56:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:55:27 2024 by rpki-client on console-fra.rpki-client.org