Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa
File:                     252c79ea-8e09-336a-a0e3-096a0586430b.roa (raw, json)
Hash identifier:          1nNPJ7Lsm50Q0dTS/1uaRy7e/e5dxtFs+zl4p+tmZFI=
Subject key identifier:   4D:AF:84:19:D1:98:81:F3:C4:E5:4F:EC:D6:1F:C2:BE:3D:3A:31:E5
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584598FE088E9BE1A8BE7C1BFCA0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     31898
IP address blocks:        23.239.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:08:8e:9b:e1:a8:be:7c:1b:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=0524de65-e28e-4d05-9093-282f82911c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:69:62:a5:ca:2c:91:24:bf:f7:91:8e:62:
                    8e:8c:8b:f8:6f:1f:3b:fd:10:4e:30:5b:0b:fb:02:
                    e6:04:24:5a:02:ce:47:b2:8f:8f:de:1a:7f:76:05:
                    7a:2a:8f:f4:8c:97:5b:fc:95:de:52:93:13:a3:d5:
                    b4:d7:04:fd:d8:76:53:76:6b:7c:af:04:fc:2a:8c:
                    9e:76:bc:1d:1f:2a:23:2d:5e:89:4a:9e:df:ba:2a:
                    d9:06:52:9c:29:5c:db:ae:cc:37:b9:e4:32:05:b2:
                    c9:2f:c0:e2:15:bc:af:a8:74:64:bd:07:60:49:03:
                    0e:0c:76:02:d0:d7:09:59:07:b8:26:83:b8:a5:00:
                    b5:99:d1:5f:54:1d:67:e0:8d:e0:94:dc:76:37:7e:
                    13:f8:ce:ef:41:e1:66:34:10:0b:b5:ac:3b:c8:71:
                    19:65:53:e0:70:24:7a:0e:aa:34:12:61:f0:e5:06:
                    17:d5:aa:4e:cd:3a:43:4d:83:cd:44:64:5c:72:57:
                    59:d3:ad:42:f9:63:59:b3:0b:f4:f5:3a:46:61:06:
                    3f:80:31:63:4a:9b:00:fb:7c:7c:58:c1:9c:90:df:
                    5d:db:72:69:78:9e:20:7f:79:ed:c8:2a:ce:bb:f3:
                    c3:c7:62:6b:81:68:b2:8d:f1:a4:2b:44:15:1a:a8:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AF:84:19:D1:98:81:F3:C4:E5:4F:EC:D6:1F:C2:BE:3D:3A:31:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/252c79ea-8e09-336a-a0e3-096a0586430b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:eb:d0:ba:52:3c:0f:6b:df:24:f6:96:a4:13:d7:e8:8c:3d:
         f0:37:b7:a1:62:eb:25:1a:47:ff:a9:21:3b:3d:9f:0b:cb:21:
         c7:d1:40:17:23:76:8f:31:7b:08:f7:58:7e:6e:ce:3c:08:12:
         a4:a4:19:f3:0c:ad:af:43:70:e4:9e:c5:75:65:ef:97:6e:c5:
         a0:67:66:e9:3e:1b:db:f9:9a:a5:6f:d8:27:f9:d8:e6:7d:82:
         80:67:cf:cb:27:fe:8a:f6:d7:35:43:23:5a:e5:7f:6e:ba:7e:
         27:23:21:3e:a7:53:40:cf:a6:94:d9:bd:d9:ef:aa:aa:6a:0f:
         a2:7c:8f:31:8c:1f:63:d7:98:cd:64:5f:a4:34:cb:17:09:30:
         32:57:a6:33:45:23:41:3d:03:7a:c7:89:4d:94:98:ba:ae:5d:
         42:98:4b:b9:09:14:4a:f0:20:65:09:54:88:fa:b5:5b:55:25:
         72:d4:d9:18:c3:0f:31:8b:7c:6c:0b:b3:cc:56:d5:fd:64:00:
         eb:31:b6:b4:2c:53:94:72:67:a6:d9:33:8f:92:da:41:02:7c:
         8b:ee:65:7f:0d:7d:51:cd:92:3c:65:f5:7a:41:15:ff:07:db:
         dc:8d:d5:a2:41:1b:bc:85:1d:08:20:88:82:11:df:f1:9c:31:
         6a:a4:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:47 2024 by rpki-client on console-fra.rpki-client.org