Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/3ebc8de2-393a-3fc9-b573-24293f9e3cbb.roa
File:                     3ebc8de2-393a-3fc9-b573-24293f9e3cbb.roa (raw, json)
Hash identifier:          aNMW/uqaeLPm2FzrrFxTfF38LiOSHFYCxI+u145FTuk=
Subject key identifier:   B3:A9:7F:41:D8:9B:C0:94:BE:1F:82:B5:49:59:7F:72:CE:44:AC:9E
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584558C840B5AF1A14B1CEE67B00
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/3ebc8de2-393a-3fc9-b573-24293f9e3cbb.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     23470
IP address blocks:        23.133.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:40:b5:af:1a:14:b1:ce:e6:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=b1a126f9-d918-4782-9486-e6b8994b3862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:a6:42:08:cf:b5:13:6b:71:bc:6c:71:65:
                    da:71:05:3d:3f:a2:4d:4a:40:de:14:cd:9e:2f:11:
                    ac:49:96:27:23:85:03:f5:a2:c0:db:b2:9a:37:a4:
                    9c:cd:27:8a:9f:6f:9a:6a:a8:e8:bd:50:4a:3a:5a:
                    63:c8:40:fb:97:c2:b6:24:40:cd:5e:ea:3e:81:48:
                    ff:41:bc:8a:1b:79:04:f2:a7:51:52:1e:6f:1d:c4:
                    87:a1:1f:73:96:c6:45:55:29:bb:15:4a:cf:6d:d0:
                    0e:30:d8:79:3d:e6:18:1c:dc:8d:93:ed:25:7f:df:
                    f3:40:c4:df:c1:03:96:a5:9c:e3:f7:25:e0:b7:30:
                    ca:64:f5:92:3c:3e:8e:61:ed:90:4b:15:a9:ab:49:
                    ef:7b:c0:b1:63:d7:7a:c8:6e:b1:82:1c:c7:ca:d8:
                    3e:ba:5b:3b:fb:3d:12:a7:3b:c1:ae:0c:60:8e:7d:
                    aa:f9:2d:bd:9e:02:34:10:5c:03:a9:b5:e1:83:5f:
                    ad:72:24:d5:69:b5:6f:c2:68:a4:64:f3:fc:8d:c1:
                    49:b3:1a:4a:cd:54:eb:46:54:14:50:8a:49:20:05:
                    24:bd:91:cd:12:d3:34:b0:60:88:63:c0:9d:2d:68:
                    a3:95:6c:09:54:d0:fc:d8:a5:ce:ca:e3:dc:18:d0:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A9:7F:41:D8:9B:C0:94:BE:1F:82:B5:49:59:7F:72:CE:44:AC:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/3ebc8de2-393a-3fc9-b573-24293f9e3cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:67:ce:76:77:44:a1:1e:da:f9:83:eb:9f:68:7e:9c:18:a4:
         c2:5d:47:69:68:47:da:60:b3:d9:83:70:d9:a4:0c:e3:df:3e:
         30:57:59:27:33:77:57:34:b1:5b:d0:6e:11:77:57:53:e2:b9:
         03:5b:26:e2:8e:25:dc:8d:3b:b8:d8:41:7c:08:5d:9c:a1:d7:
         94:8b:9d:69:c3:7e:a5:8a:c9:57:65:fd:41:65:4f:50:a6:e7:
         d9:b8:f0:3d:92:e6:ef:68:85:1c:12:58:c8:fe:a9:3e:4b:bf:
         03:4c:35:9b:1f:29:d0:4e:d3:30:2b:83:e1:ef:d6:73:b2:1d:
         2d:d1:55:c1:80:f0:8e:ef:8e:8a:5c:bf:b7:b7:7d:10:25:5b:
         89:30:d0:35:2f:41:a6:64:5f:14:e8:9c:e8:6a:e4:86:49:fc:
         d1:12:3b:76:dc:e1:57:bb:bf:5d:5c:d9:75:84:4e:b5:5c:dc:
         f0:17:5a:42:b6:05:71:4b:c5:fc:0e:14:93:cd:04:b3:76:74:
         58:6e:c9:73:d2:22:57:b5:9e:c0:8d:da:cb:a7:40:00:34:b6:
         86:35:97:81:db:53:d4:3b:74:4b:ae:a0:ff:41:67:52:e4:f7:
         26:ed:34:11:40:f6:86:fc:39:ef:82:08:69:b4:5d:3e:f7:81:
         8a:c0:01:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVYyEC1rxoUsc7mewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3
NGJjMB4XDTI0MDMyNzEzMDAzNVoXDTI0MDYyNTEzMDAzNVowLzEtMCsGA1UEAxMk
YjFhMTI2ZjktZDkxOC00NzgyLTk0ODYtZTZiODk5NGIzODYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZSmQgjPtRNrcbxscWXacQU9P6JNSkDeFM2e
LxGsSZYnI4UD9aLA27KaN6SczSeKn2+aaqjovVBKOlpjyED7l8K2JEDNXuo+gUj/
QbyKG3kE8qdRUh5vHcSHoR9zlsZFVSm7FUrPbdAOMNh5PeYYHNyNk+0lf9/zQMTf
wQOWpZzj9yXgtzDKZPWSPD6OYe2QSxWpq0nve8CxY9d6yG6xghzHytg+uls7+z0S
pzvBrgxgjn2q+S29ngI0EFwDqbXhg1+tciTVabVvwmikZPP8jcFJsxpKzVTrRlQU
UIpJIAUkvZHNEtM0sGCIY8CdLWijlWwJVND82KXOyuPcGNBxvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOpf0HYm8CUvh+CtUlZf3LORKyeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2
NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvM2ViYzhkZTItMzkzYS0z
ZmM5LWI1NzMtMjQyOTNmOWUzY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm
MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl
NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5
NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4UAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANnznZ3RKEe2vmD659ofpwYpMJdR2loR9pgs9mDcNmkDOPfPjBXWScz
d1c0sVvQbhF3V1PiuQNbJuKOJdyNO7jYQXwIXZyh15SLnWnDfqWKyVdl/UFlT1Cm
59m48D2S5u9ohRwSWMj+qT5LvwNMNZsfKdBO0zArg+Hv1nOyHS3RVcGA8I7vjopc
v7e3fRAlW4kw0DUvQaZkXxTonOhq5IZJ/NESO3bc4Ve7v11c2XWETrVc3PAXWkK2
BXFLxfwOFJPNBLN2dFhuyXPSIle1nsCN2sunQAA0toY1l4HbU9Q7dEuuoP9BZ1Lk
9ybtNBFA9ob8Oe+CCGm0XT73gYrAAQw=
-----END CERTIFICATE-----
Generated at Thu May 2 03:13:54 2024 by rpki-client on console-ams.rpki-client.org