Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e77655c9-5dbf-3ccf-890a-1a5be6e9ba23.roa
File:                     e77655c9-5dbf-3ccf-890a-1a5be6e9ba23.roa (raw, json)
Hash identifier:          NDjZ4dOkCtItUwUcv6mrgZ8sjHpckmoldsyxScY9jeg=
Subject key identifier:   57:DA:70:13:4D:83:D9:C3:E4:4F:94:49:7F:6A:73:8D:36:78:29:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845BFD2BD4E647EF22D3A26BD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e77655c9-5dbf-3ccf-890a-1a5be6e9ba23.roa
Signing time:             Fri 03 May 2024 10:50:05 +0000
ROA not before:           Fri 03 May 2024 10:50:05 +0000
ROA not after:            Thu 01 Aug 2024 10:50:05 +0000
asID:                     20940
IP address blocks:        23.50.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bf:d2:bd:4e:64:7e:f2:2d:3a:26:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  3 10:50:05 2024 GMT
            Not After : Aug  1 10:50:05 2024 GMT
        Subject: CN=7f4946b6-bcfe-4bf3-a3f3-df2bece4ce67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:03:4a:6d:88:eb:19:24:c2:3d:85:a8:2d:cb:
                    a1:d0:ec:34:70:f3:2c:6e:08:54:82:21:47:2f:dc:
                    57:1b:11:b5:6b:97:1d:b1:e6:93:90:39:eb:8d:b0:
                    b1:9d:29:2c:8b:d9:83:90:e6:40:78:72:f3:2d:91:
                    75:a3:81:7d:04:74:42:05:3f:37:ee:c0:73:9b:2d:
                    d7:15:11:6b:40:ff:47:85:fe:f5:41:fc:12:1f:3c:
                    cf:eb:f0:76:1b:38:a2:54:93:ba:1d:a0:e8:b5:d8:
                    f9:69:44:ab:ef:55:36:c0:04:3a:15:de:df:5b:bc:
                    92:b3:fe:95:d0:3c:6c:39:62:1c:16:be:40:1b:12:
                    3d:63:c3:91:82:ca:dc:64:da:c4:76:28:51:be:53:
                    ba:05:43:2f:c1:4b:3a:35:02:28:d4:54:15:d0:54:
                    70:f5:ed:cf:cd:da:74:c9:3b:c3:08:73:1c:a7:c2:
                    f9:8a:6d:4b:5f:ec:1b:ae:d3:f0:58:8b:7d:da:7a:
                    e0:c1:69:78:49:53:e1:b1:60:c7:56:d2:85:fe:87:
                    0b:d8:24:7f:8e:b6:3a:4a:ca:8e:f5:cc:5c:66:ec:
                    71:f8:23:a3:f9:20:af:32:74:95:28:58:b5:3d:ef:
                    57:b1:0d:24:22:45:77:27:6d:8d:6a:e5:2e:87:0e:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DA:70:13:4D:83:D9:C3:E4:4F:94:49:7F:6A:73:8D:36:78:29:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e77655c9-5dbf-3ccf-890a-1a5be6e9ba23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:07:64:a7:2f:8e:b7:fb:a6:90:45:fc:86:16:29:c4:92:7d:
         bf:14:60:c1:ea:43:c6:24:7a:fd:97:70:cd:20:4d:22:23:82:
         e8:a7:59:00:e8:93:8a:df:cd:1e:0f:4d:d7:18:a2:03:cb:4d:
         77:14:a2:fc:fe:8c:c1:9c:a8:23:37:d1:65:98:ee:31:9e:ab:
         0b:79:3e:9f:f1:99:39:e9:1f:4d:4a:ed:21:4c:72:04:d7:90:
         67:a6:e7:30:5a:7e:ed:1f:20:34:b6:97:67:4c:56:0d:f6:38:
         55:f5:a7:05:fa:09:4a:8a:a6:14:40:c7:a2:55:2d:f6:b3:54:
         cf:22:ba:9e:67:ba:1a:68:ad:99:a4:7b:21:a5:9d:e6:fb:66:
         dd:22:13:4c:c3:71:9d:f2:02:1a:09:aa:87:87:e7:37:82:15:
         bf:dc:e0:12:ff:64:6f:ce:73:7a:c1:ab:87:b0:e4:05:d6:08:
         30:4e:64:f6:20:20:e6:8b:7d:51:f5:a0:32:0f:8c:f9:37:50:
         2f:3d:7a:af:9d:36:43:41:ff:54:1b:34:98:e3:d2:52:53:cc:
         34:98:90:3a:5b:54:af:1c:a6:b6:cc:19:0a:99:64:8e:09:23:
         8f:c0:bb:4b:84:6a:d4:c1:72:aa:8d:fa:8e:cd:af:23:42:0b:
         47:3c:c2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:14:37 2024 by rpki-client on console-ams.rpki-client.org