Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ed5f04-d7cb-364e-8090-9a0f23158775.roa
File:                     e4ed5f04-d7cb-364e-8090-9a0f23158775.roa (raw, json)
Hash identifier:          QHCHX6MaEfve3BCCn+YfVtT7E0Z5i6gQ3m/Bf8CKgLg=
Subject key identifier:   5E:BB:94:96:5B:2D:DD:C2:AA:AA:61:DB:F3:A9:E1:12:79:8E:C2:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858456C5313FB1C6D19ADE9C6AB40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ed5f04-d7cb-364e-8090-9a0f23158775.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     21342
IP address blocks:        23.59.249.0/24 maxlen: 24
                          23.59.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:13:fb:1c:6d:19:ad:e9:c6:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=8f28ad57-4638-4b00-90f4-8483957ce212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:6e:62:a7:9e:6b:62:30:22:82:94:e2:bf:
                    e1:68:51:11:40:66:6c:5f:c7:e9:e0:a6:be:50:91:
                    9a:8d:eb:f1:30:4d:97:3f:05:27:cf:c4:27:5d:8b:
                    eb:ae:29:53:d4:34:53:1a:b3:91:66:5e:c2:7f:6a:
                    99:a2:be:1f:d6:cf:49:29:91:e3:26:3e:f8:0e:b6:
                    a9:f9:cb:51:a0:af:37:f2:53:c3:80:16:7a:cc:ba:
                    69:9b:c4:6a:f5:33:b1:cb:44:76:40:b5:5b:d8:44:
                    8c:d2:b3:86:b0:21:f5:40:b1:86:50:0d:9e:f9:34:
                    71:5c:46:54:da:74:5c:99:1a:01:8e:ba:7f:5d:b8:
                    4a:d4:b3:cd:20:0f:27:43:5a:4f:b9:c7:14:ee:26:
                    c2:00:ef:35:db:af:f7:a5:07:f8:66:3a:a1:d5:1d:
                    0c:d5:fe:8c:e0:3b:e3:da:58:e6:78:11:af:95:a5:
                    01:3e:b8:f7:8a:de:43:e6:74:99:62:d7:37:11:99:
                    8d:51:69:40:5d:d3:8a:e7:5b:70:71:ac:36:75:4c:
                    3e:dd:b7:65:70:1f:ad:e4:fa:f6:7a:36:8d:e5:1a:
                    61:42:07:19:df:f8:6c:bb:d9:4f:62:07:f6:4e:9b:
                    67:61:28:02:c0:eb:4c:9f:fc:5a:49:a7:12:42:de:
                    91:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BB:94:96:5B:2D:DD:C2:AA:AA:61:DB:F3:A9:E1:12:79:8E:C2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ed5f04-d7cb-364e-8090-9a0f23158775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:65:37:6c:79:a2:09:aa:5c:b7:66:b5:a6:25:be:f4:d9:6f:
         b8:a7:6b:cd:9b:90:03:c6:c6:d4:af:8e:12:ca:92:d1:8d:83:
         d8:76:4d:42:f8:6c:3e:c4:a0:e0:bf:a0:27:55:8c:43:15:13:
         2d:8d:60:af:ba:0d:fc:3c:c8:bf:41:b3:5c:ca:95:f1:d5:b6:
         2c:22:ca:20:54:3c:f6:a9:ac:c0:29:c9:ab:37:f4:5b:1b:f1:
         bd:65:08:eb:a9:6a:d7:b8:32:b3:ae:3a:4b:10:85:b7:6d:41:
         1d:5b:53:c1:06:eb:81:99:44:eb:ce:27:2d:f6:9f:57:20:83:
         a9:4a:ac:ec:1b:15:39:a6:94:7b:18:8d:35:29:58:1f:06:36:
         27:81:be:6b:e4:a7:b2:bf:0f:75:5b:20:52:47:bf:61:b1:f6:
         52:03:1f:b6:c2:cf:27:38:29:ca:dd:f0:65:b8:a2:ce:b1:6c:
         00:d4:bc:39:75:5a:de:92:c0:6e:e7:7b:05:c3:a6:f4:fb:59:
         c9:ee:bb:42:47:51:3a:6d:33:59:47:a1:f7:b6:3b:4c:92:de:
         14:25:80:f2:8f:e1:16:4e:d2:ad:41:ff:6c:41:ed:2d:08:de:
         ec:9a:4b:9b:80:f5:9f:97:b6:10:cd:e0:47:2e:ec:5a:10:50:
         7e:c0:30:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:57 2024 by rpki-client on console-fra.rpki-client.org