Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5d925c2-716f-3675-9238-a6c14a053c09.roa
File:                     f5d925c2-716f-3675-9238-a6c14a053c09.roa (raw, json)
Hash identifier:          I3lqh/nB5ldwIHmjSfmyztbacjnX3iUuSQenkH0Ea+o=
Subject key identifier:   2C:C5:85:25:A5:EE:87:E8:4E:86:86:8B:B8:98:45:00:D3:E1:7C:6F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E12017398283675387D2C300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5d925c2-716f-3675-9238-a6c14a053c09.roa
Signing time:             Wed 15 May 2024 09:07:37 +0000
ROA not before:           Wed 15 May 2024 09:07:37 +0000
ROA not after:            Tue 13 Aug 2024 09:07:37 +0000
asID:                     16625
IP address blocks:        23.47.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:20:17:39:82:83:67:53:87:d2:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 09:07:37 2024 GMT
            Not After : Aug 13 09:07:37 2024 GMT
        Subject: CN=58bd5d9b-4d4b-449d-a6e1-765866dd0f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c7:98:88:5b:4c:5a:95:87:f4:ac:4b:f6:76:
                    3b:6b:d2:cd:0c:9b:6c:89:9e:83:a3:84:de:a3:1b:
                    98:8e:cd:ad:83:77:ab:e0:10:00:10:ba:a7:2d:8b:
                    d4:cf:31:ea:11:4b:fd:8c:3a:8d:25:c7:b4:0e:77:
                    27:6e:c9:b7:56:f5:84:54:59:7c:0f:52:3b:da:f0:
                    fd:ca:1b:55:4e:9f:c0:a1:4b:cb:df:84:2a:34:88:
                    03:05:d2:08:55:0c:02:62:6a:dd:be:69:7c:8a:e3:
                    f0:72:31:9e:1c:38:9f:1f:4f:92:7e:50:eb:80:f3:
                    d3:ea:a1:ae:d6:66:75:28:4a:5d:83:db:c0:99:83:
                    d0:b5:6e:17:64:02:85:78:f8:3c:45:ca:83:8f:27:
                    41:13:12:39:bc:1a:72:4b:7b:dd:50:c5:50:1f:40:
                    bf:5d:ec:12:49:f8:c9:10:7b:1f:63:55:02:2b:8a:
                    c5:d6:55:a6:bf:e8:87:77:f2:f0:b7:74:7f:f9:4d:
                    20:53:11:3d:84:e5:f2:d6:29:fa:29:e3:a4:ae:d0:
                    41:ce:92:74:e2:99:67:67:18:50:94:4f:7d:83:31:
                    39:bb:e3:58:36:90:a1:33:2d:d2:b9:0c:83:54:10:
                    d2:ad:9f:ca:9c:4e:5f:6b:36:c9:eb:ae:af:52:a0:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C5:85:25:A5:EE:87:E8:4E:86:86:8B:B8:98:45:00:D3:E1:7C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5d925c2-716f-3675-9238-a6c14a053c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:28:8a:f8:cb:e4:ec:7c:b8:2b:67:c5:74:47:bb:a2:2a:fd:
         46:ff:7b:b2:14:c4:e2:bc:0c:c7:f1:69:d3:4d:da:a0:1d:8c:
         ca:51:b6:6d:1b:fc:6f:ca:46:63:f6:e3:50:0e:d7:6a:ad:4a:
         60:3a:ee:f2:61:d7:0d:52:65:bc:78:7b:ec:c8:9f:9e:05:b2:
         29:02:cf:6a:8d:fe:4d:83:7d:2c:72:16:12:7e:a9:28:d6:80:
         1d:dd:9f:0a:53:7d:f3:f6:57:70:11:1c:13:7f:51:dc:20:7d:
         0e:82:7d:57:88:7d:16:f5:1c:60:57:00:bf:2f:1a:28:15:7f:
         70:c0:fc:ce:c0:e8:c6:e1:29:3e:4e:1a:c1:ed:88:ea:e3:65:
         60:5a:51:6b:b3:cd:a5:81:12:7c:ff:1a:3c:24:65:c6:c5:71:
         6a:28:9f:f7:b8:87:16:59:5c:b7:72:50:9c:41:b8:5d:b0:93:
         0b:01:04:a3:f0:ed:3a:43:1d:01:ba:05:d1:31:73:fb:b2:62:
         a0:22:53:4d:e2:9a:08:be:a2:78:32:cb:a9:54:9d:89:22:c0:
         56:a3:3d:f6:87:3c:76:1c:6c:57:07:8e:7a:e9:14:c0:c7:a6:
         5d:b9:fe:60:d1:d7:02:01:63:fc:81:9a:5c:3f:94:6a:56:c6:
         de:6b:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:15:50 2024 by rpki-client on console-fra.rpki-client.org