Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/9cd43b80-c934-3292-93a9-ad9f7b8f98b9.roa
File:                     9cd43b80-c934-3292-93a9-ad9f7b8f98b9.roa (raw, json)
Hash identifier:          NUiB6kl5lOowTvShNKFKpfxjdJJjKLV8QZgj09+pSwg=
Subject key identifier:   C9:E5:DA:21:8B:A0:B9:70:D6:24:19:0B:C3:22:93:CC:37:3D:C3:C0
Certificate issuer:       /CN=a4a5ba5d-c707-479a-82b6-0d1735321896
Certificate serial:       010D0C9F43285844F0354DF67F906C9F2E87A760
Authority key identifier: F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/9cd43b80-c934-3292-93a9-ad9f7b8f98b9.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     29802
IP address blocks:        23.226.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:4d:f6:7f:90:6c:9f:2e:87:a7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a5ba5d-c707-479a-82b6-0d1735321896
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=cf34841e-9898-44db-aefa-26604bbe2fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:98:ea:0b:d3:3e:95:49:09:93:2a:52:66:94:
                    74:0d:47:29:03:e9:be:1a:4d:90:4a:c3:83:b1:bb:
                    64:26:3d:5b:41:04:69:6c:aa:74:35:af:01:bc:47:
                    e9:99:e5:1d:5b:9a:b5:dc:a4:af:74:9f:11:dd:69:
                    24:51:aa:ee:5d:f2:7d:d0:fa:22:8a:36:f4:e9:b8:
                    e9:15:3c:42:d2:2d:98:61:f3:20:28:11:82:95:5e:
                    88:61:91:55:1a:b6:67:fd:be:43:f8:9d:b9:dc:06:
                    00:b8:38:d0:92:27:bf:ff:6e:1b:f1:84:4a:41:db:
                    0b:f9:91:92:3d:78:1c:6b:f7:36:6a:1a:a9:aa:71:
                    92:39:1b:05:99:2d:5d:bd:d9:90:ab:cc:9f:fa:3a:
                    04:9d:44:8d:61:a9:64:9d:e7:2e:94:94:9e:fc:c3:
                    88:1d:6e:c7:4e:4b:ff:60:59:5f:bd:94:3d:54:a7:
                    97:82:18:83:45:b8:f1:61:0b:0e:a7:b8:b7:e2:d4:
                    d7:58:b3:b3:01:93:c3:ec:63:95:e2:a0:9d:6d:ee:
                    f6:56:17:6a:dd:6b:10:61:70:6e:09:90:da:d5:3d:
                    30:43:00:d2:1a:4e:4f:94:c2:03:98:96:99:79:64:
                    d3:a7:d9:37:60:e6:14:13:d3:2d:8e:a9:1f:ca:c9:
                    b0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E5:DA:21:8B:A0:B9:70:D6:24:19:0B:C3:22:93:CC:37:3D:C3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/9cd43b80-c934-3292-93a9-ad9f7b8f98b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl

            X509v3 Authority Key Identifier:
                keyid:F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:66:17:c8:65:5f:a3:35:ac:f8:2e:cb:66:05:d8:62:f4:82:
         30:0f:bc:ab:0a:72:7a:13:af:f5:08:ef:1b:45:d9:a2:98:73:
         61:60:8c:ad:83:1b:64:d1:7f:86:7a:15:ca:51:d1:04:01:ca:
         f1:ce:05:5d:ec:70:47:d6:c2:29:a4:d5:6b:dd:93:4f:98:7e:
         52:24:2e:f9:c0:ac:f6:7c:43:e6:7a:93:97:a6:3a:ae:30:b3:
         2b:0d:e2:14:41:1b:e5:6c:1c:eb:1c:12:26:d2:3f:a5:89:9a:
         bb:b7:9f:fa:5f:fe:c9:bc:d4:ba:74:43:81:6a:36:c7:96:d6:
         dc:51:47:c4:49:f0:4b:ca:50:82:49:f7:ac:2d:d6:39:0e:40:
         2b:3a:8e:f7:e3:f2:4d:00:a1:59:7f:88:95:70:58:86:cf:14:
         95:e4:fe:5d:ba:0a:75:73:bc:66:ab:d2:27:73:cb:e2:ee:c0:
         4d:cf:47:c4:19:29:c3:f2:03:a8:64:bc:18:ea:92:10:01:65:
         20:f9:c8:81:64:d5:c3:45:7d:b8:fa:43:75:13:3a:44:34:02:
         df:2e:e5:c6:d4:b7:5b:2a:55:93:84:08:1e:7d:06:20:7a:8a:
         02:c8:04:1d:4a:ac:fd:62:a2:28:47:67:46:19:f1:b5:22:ac:
         4e:30:5c:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETwNU32f5Bsny6Hp2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRhNWJhNWQtYzcwNy00NzlhLTgyYjYtMGQxNzM1MzIx
ODk2MB4XDTI0MDIxOTAyMDAyNVoXDTI0MDUxOTAxMDAyNVowLzEtMCsGA1UEAxMk
Y2YzNDg0MWUtOTg5OC00NGRiLWFlZmEtMjY2MDRiYmUyZmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5jqC9M+lUkJkypSZpR0DUcpA+m+Gk2QSsOD
sbtkJj1bQQRpbKp0Na8BvEfpmeUdW5q13KSvdJ8R3WkkUaruXfJ90Poiijb06bjp
FTxC0i2YYfMgKBGClV6IYZFVGrZn/b5D+J253AYAuDjQkie//24b8YRKQdsL+ZGS
PXgca/c2ahqpqnGSORsFmS1dvdmQq8yf+joEnUSNYalkneculJSe/MOIHW7HTkv/
YFlfvZQ9VKeXghiDRbjxYQsOp7i34tTXWLOzAZPD7GOV4qCdbe72Vhdq3WsQYXBu
CZDa1T0wQwDSGk5PlMIDmJaZeWTTp9k3YOYUE9MtjqkfysmwBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMnl2iGLoLlw1iQZC8Mik8w3PcPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNGE1
YmE1ZC1jNzA3LTQ3OWEtODJiNi0wZDE3MzUzMjE4OTYvOWNkNDNiODAtYzkzNC0z
MjkyLTkzYTktYWQ5ZjdiOGY5OGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTRhNWJhNWQtYzcwNy00NzlhLTgy
YjYtMGQxNzM1MzIxODk2L2E0YTViYTVkLWM3MDctNDc5YS04MmI2LTBkMTczNTMy
MTg5Ni5jcmwwHwYDVR0jBBgwFoAU+GYgYKjEaFyTb1Fl00Mwosnp6ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNGE1YmE1ZC1jNzA3LTQ3OWEtODJiNi0wZDE3
MzUzMjE4OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+J5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVmF8hlX6M1rPguy2YF2GL0gjAPvKsKcnoTr/UI7xtF2aKYc2FgjK2D
G2TRf4Z6FcpR0QQByvHOBV3scEfWwimk1Wvdk0+YflIkLvnArPZ8Q+Z6k5emOq4w
sysN4hRBG+VsHOscEibSP6WJmru3n/pf/sm81Lp0Q4FqNseW1txRR8RJ8EvKUIJJ
96wt1jkOQCs6jvfj8k0AoVl/iJVwWIbPFJXk/l26CnVzvGar0idzy+LuwE3PR8QZ
KcPyA6hkvBjqkhABZSD5yIFk1cNFfbj6Q3UTOkQ0At8u5cbUt1sqVZOECB59BiB6
igLIBB1KrP1ioihHZ0YZ8bUirE4wXLM=
-----END CERTIFICATE-----
Generated at Tue Apr 30 02:21:49 2024 by rpki-client on console-fra.rpki-client.org