Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa
File:                     47d7fcfd-95fd-3503-adb6-67e323a7831f.roa (raw, json)
Hash identifier:          IY8e/uvU6lRv/CZwucHq1svb9zY5y85H0Mm0nwmybvY=
Subject key identifier:   FA:C5:02:9B:02:30:C2:5F:BA:49:C3:5F:C6:DC:6F:A6:1A:11:75:30
Certificate issuer:       /CN=fe90a536-ade0-4ce0-ac99-a1c784d18816
Certificate serial:       010D0C9F4328584566BDB74413CE504671B89620
Authority key identifier: 0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     397554
IP address blocks:        23.134.144.0/24 maxlen: 24
                          2605:40c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b7:44:13:ce:50:46:71:b8:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe90a536-ade0-4ce0-ac99-a1c784d18816
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=1699f9d9-30af-4124-86e6-081860efbe4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:93:01:32:0b:f0:8e:f6:a1:bf:3e:37:cb:86:
                    68:41:17:e5:73:aa:b0:6c:d9:54:68:2d:2c:71:2f:
                    99:4f:a5:14:5b:51:27:be:9d:c2:88:6d:a9:a9:54:
                    94:be:4d:ff:a9:9c:b1:85:9e:0a:4c:5a:72:33:bd:
                    c5:4e:8f:54:79:ec:f0:02:8a:d7:48:7d:1f:45:c5:
                    a9:e2:47:35:c1:c5:38:bd:92:b5:d3:d1:e3:57:f8:
                    15:88:c8:a5:ac:e7:32:f6:b0:11:c1:93:81:96:52:
                    87:2a:5e:c5:fd:85:ea:78:c9:78:fd:ad:4e:31:58:
                    5d:34:b0:8b:b8:79:a9:48:22:2d:59:48:7f:38:d0:
                    11:0d:d0:38:8a:46:7c:c6:46:80:be:4b:43:e0:20:
                    66:cb:12:6d:af:63:b1:a9:8f:4c:c2:87:81:5f:31:
                    dd:91:91:f4:26:da:d6:88:19:8f:7d:a5:b4:8d:72:
                    d5:d1:0c:06:9d:96:f5:35:7c:68:ac:c5:3d:d0:cd:
                    03:b9:ed:a6:29:ee:21:51:92:be:1c:b9:08:ca:eb:
                    13:0f:0c:d7:4c:a0:94:f6:e0:f6:02:b4:a6:fa:64:
                    51:48:31:55:9d:c0:44:9d:6a:6b:13:04:f3:9d:02:
                    01:44:9e:8d:a0:b1:88:d9:3a:45:43:8a:68:0b:17:
                    8a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C5:02:9B:02:30:C2:5F:BA:49:C3:5F:C6:DC:6F:A6:1A:11:75:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.144.0/24
                IPv6:
                  2605:40c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:88:2e:4e:31:46:6f:5c:86:a8:ac:0b:a0:cd:e6:77:2f:
         01:06:a5:49:90:fb:b1:86:25:90:19:4b:84:0d:84:3b:b3:d3:
         f6:20:87:0e:d5:36:8b:a6:21:10:4b:3c:93:9c:f8:a9:ac:38:
         35:a2:3f:0d:b0:dc:56:ab:f8:d1:32:6c:64:e5:d5:11:fa:28:
         72:8f:0a:67:4a:4f:86:20:53:55:ab:29:81:ec:33:25:e0:49:
         ad:7f:8f:ac:26:8c:72:3b:ad:2d:c7:fd:eb:6a:51:b2:72:12:
         e5:92:a4:5b:1a:cc:68:4e:59:be:7e:d7:6c:0f:86:91:87:20:
         1b:b1:27:81:57:67:52:22:ac:8e:df:72:61:2b:7b:a4:8a:79:
         f4:a7:69:59:5a:f4:5c:25:78:5f:38:01:26:6a:c1:ee:8a:bc:
         aa:7f:5d:1f:4b:ab:45:04:cb:bb:cb:2a:59:ac:46:0c:2a:d5:
         e2:92:75:da:f1:a8:b0:00:34:a2:05:39:4a:1d:b2:00:37:c8:
         a4:e4:32:16:6f:de:75:07:63:3c:d7:aa:33:b5:d2:6e:5a:3b:
         cf:9c:2b:fe:5e:03:02:0a:6f:64:43:ae:7e:55:fb:8c:0b:89:
         bd:5f:72:b8:19:82:21:5e:d8:45:ef:72:5d:33:0e:3e:e9:38:
         57:93:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:18:13 2024 by rpki-client on console-ams.rpki-client.org