Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/7ee8f05a-3b9b-31ac-96bc-6fb815f5f9b0.roa
File:                     7ee8f05a-3b9b-31ac-96bc-6fb815f5f9b0.roa (raw, json)
Hash identifier:          jSxAkT3e6NSxI225TqCzw1sxxy41i0FLkSeDIn4pGpU=
Subject key identifier:   75:B0:5C:C6:6D:54:19:D3:DE:3C:54:D3:D3:D5:5A:00:DD:82:42:5E
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F43285845840DC07E867CA1FF017B05D0
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/7ee8f05a-3b9b-31ac-96bc-6fb815f5f9b0.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        23.227.60.0/24 maxlen: 24
                          23.227.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c0:7e:86:7c:a1:ff:01:7b:05:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=b660d80a-4beb-4f1c-a159-2d56c3229050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:ae:62:bd:f4:65:a1:57:c1:bb:81:d8:a1:
                    3e:5e:ea:ee:08:fb:45:4a:4c:8a:06:0d:62:1e:37:
                    9e:fb:b5:4e:a8:2f:10:56:eb:bd:f5:f9:d8:4d:4e:
                    37:e1:79:39:67:27:46:a7:7e:10:67:83:64:4b:9f:
                    1c:34:da:5b:03:56:78:7d:fa:01:d3:ea:96:b8:89:
                    a5:06:34:aa:cd:d7:66:9f:e1:69:ad:c3:28:fd:41:
                    93:f2:fd:2c:27:1f:48:28:b9:88:93:1f:51:e6:6d:
                    d9:87:49:fe:75:1f:61:f0:73:b3:a5:13:8a:d7:db:
                    e2:e8:47:d8:ab:cc:f2:f6:30:bd:55:35:c5:ef:c4:
                    27:8d:27:63:77:33:3f:12:44:57:7a:f8:29:9b:46:
                    6b:66:ed:1d:04:7b:a7:8d:d8:f6:d6:5b:71:7a:62:
                    cb:7e:58:7b:8d:a1:9c:00:ee:70:ca:7b:65:ab:51:
                    b6:68:05:b4:cc:e2:0e:bc:a4:dd:80:7a:6d:93:b9:
                    12:38:a7:8e:58:3d:3b:d4:27:5a:23:af:4a:3d:0b:
                    b8:54:65:02:ba:54:06:fc:46:78:9f:3c:27:77:f0:
                    01:c6:4c:dc:8a:cf:50:35:93:82:47:af:be:d9:e6:
                    0d:b7:d3:c8:cf:c6:89:66:4a:0c:10:43:dc:c4:0e:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B0:5C:C6:6D:54:19:D3:DE:3C:54:D3:D3:D5:5A:00:DD:82:42:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/7ee8f05a-3b9b-31ac-96bc-6fb815f5f9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:9d:40:d3:b4:39:db:42:01:7d:dc:90:65:d1:09:09:49:72:
         3e:25:4b:bd:0f:eb:c5:da:ed:53:ac:55:66:97:b2:3c:0a:88:
         7b:e2:ee:77:2e:8a:61:e1:e0:13:4f:c4:fc:28:81:31:26:f6:
         3d:04:62:4b:68:72:be:6e:11:23:92:4b:86:e5:14:cd:82:52:
         22:d3:36:68:d6:c9:92:fe:90:08:e8:cc:9f:09:ce:2f:61:77:
         c0:49:f3:9b:2c:81:6d:d2:91:dd:80:6e:5c:1d:53:11:83:aa:
         8c:af:75:0b:c9:4b:93:d7:07:8d:0e:74:f7:ea:2c:8b:f0:9c:
         b7:23:20:53:d3:8a:e1:45:9a:97:87:1f:8d:4f:3a:34:e6:dc:
         a1:57:75:71:67:dd:74:8c:77:aa:68:08:9e:7c:e3:b5:9c:61:
         df:d1:78:ac:94:d5:7d:fa:60:4f:ca:01:a8:34:4c:e6:cc:ac:
         ff:34:a1:4a:c4:c2:56:20:f9:70:7f:dd:45:21:fa:83:46:b9:
         f8:95:5d:a0:6e:52:9a:8e:f5:21:8d:75:06:16:ce:16:e3:37:
         cf:2c:3d:8d:8f:01:cb:f5:2e:bc:fb:aa:93:a3:ec:c1:9a:13:
         fd:b8:04:ba:dc:23:2a:4b:dc:d9:87:e8:33:48:9c:06:98:63:
         e9:19:12:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:27:26 2024 by rpki-client on console-fra.rpki-client.org