Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/14f73e52-7825-3f57-b7ce-56bda9756aa4.roa
File:                     14f73e52-7825-3f57-b7ce-56bda9756aa4.roa (raw, json)
Hash identifier:          kFK2E+MjPdSQSCwiGXXdvM48jxsOUL43zHdsgfFSMpc=
Subject key identifier:   53:13:F1:7A:7F:4E:F4:CA:CF:7A:5F:32:9A:FE:F5:7B:5B:91:89:04
Certificate issuer:       /CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
Certificate serial:       010D0C9F432858451E4598DAC2D45EEAC264EE00
Authority key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/14f73e52-7825-3f57-b7ce-56bda9756aa4.roa
Signing time:             Wed 06 Mar 2024 14:00:31 +0000
ROA not before:           Wed 06 Mar 2024 14:00:31 +0000
ROA not after:            Tue 04 Jun 2024 13:00:31 +0000
asID:                     396279
IP address blocks:        23.173.128.0/24 maxlen: 24
                          2620:12f:100e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1e:45:98:da:c2:d4:5e:ea:c2:64:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
        Validity
            Not Before: Mar  6 14:00:31 2024 GMT
            Not After : Jun  4 13:00:31 2024 GMT
        Subject: CN=fc35e8fd-3cab-4478-8185-453da652ed4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:93:8b:30:11:99:22:42:07:9c:91:79:59:
                    af:57:24:5d:f3:23:b7:a2:f4:89:b0:e6:e8:ac:66:
                    69:cd:dd:9f:30:b9:3d:00:35:cd:bd:70:90:55:81:
                    7e:d5:c7:61:eb:79:0c:32:cb:fd:75:86:f7:92:55:
                    f1:d7:0b:d8:5c:89:1e:f1:9f:ab:47:77:7d:96:18:
                    8a:49:0c:21:da:b4:47:2d:0d:b0:f3:1f:6c:0a:a1:
                    1d:09:44:d0:a9:68:c0:1d:eb:98:b3:5b:8d:cb:5e:
                    17:c7:b4:30:4b:df:18:e7:4e:16:8d:ed:84:f6:d5:
                    78:c4:6c:a1:a0:b5:f3:13:35:c8:b2:74:c9:eb:12:
                    69:6e:e5:99:b9:53:91:b2:54:68:18:36:13:a1:c1:
                    be:e7:a6:ef:7e:cf:0e:39:86:39:ce:7a:09:e2:60:
                    25:15:22:f9:47:66:31:25:f5:b7:e7:0c:bb:5a:f4:
                    57:ae:bc:fc:a5:8e:ab:01:e3:f3:d2:e0:2e:99:da:
                    88:16:86:6b:e6:b5:6a:09:9b:cc:65:35:e7:4c:0a:
                    76:da:af:32:af:2b:af:99:e8:9e:1a:dc:05:9f:26:
                    14:c7:54:ab:b1:24:31:4b:d1:57:95:8c:5b:e5:dd:
                    cd:84:89:67:fc:02:42:66:24:d5:7c:39:c6:48:92:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:13:F1:7A:7F:4E:F4:CA:CF:7A:5F:32:9A:FE:F5:7B:5B:91:89:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/14f73e52-7825-3f57-b7ce-56bda9756aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl

            X509v3 Authority Key Identifier:
                keyid:A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.128.0/24
                IPv6:
                  2620:12f:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:15:e2:9a:a3:9d:4f:00:4e:b1:8a:13:cb:c7:fa:2a:6f:
         d6:4e:60:b0:df:be:2c:4e:ad:73:e0:2e:08:b6:ec:16:9c:dc:
         6b:e4:d6:77:0c:a8:31:c7:7a:e3:83:a3:ad:f1:20:60:fb:8a:
         59:30:0e:d9:20:42:9a:ac:4e:99:3a:2f:b7:3b:b5:9b:32:fd:
         74:de:44:a3:8e:fd:48:0c:e3:7c:97:81:c2:54:41:19:d6:ee:
         4c:1d:6f:3e:82:45:24:f0:8b:57:9f:92:e0:9b:02:45:02:4f:
         3b:94:27:55:11:fb:f8:f0:09:c3:d3:e9:57:b1:92:63:1a:e4:
         2b:6d:b3:4d:be:60:57:9d:61:23:46:8a:94:cc:e1:53:ea:42:
         58:b7:00:81:ac:71:74:a4:ec:d2:aa:d8:7e:18:da:bc:9d:8f:
         29:ba:41:64:95:bd:33:9f:86:6f:9e:4d:95:b7:3a:7b:6f:b4:
         72:c4:50:1d:4e:e6:1a:88:06:d2:26:44:17:6c:62:06:24:67:
         03:de:a4:47:f3:4c:d0:59:99:3b:fe:d1:c2:05:bc:a7:1a:16:
         b2:34:83:21:7a:a1:49:fc:f9:65:86:cf:c7:07:f1:11:96:97:
         43:08:c1:a7:14:e1:19:9e:df:a6:78:06:77:69:ef:4e:8e:81:
         43:4d:b2:a2
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEUeRZjawtRe6sJk7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlhMzhhYTktZWVhOS00ZGEzLTljN2EtOWVkMWMyMzQw
YjgzMB4XDTI0MDMwNjE0MDAzMVoXDTI0MDYwNDEzMDAzMVowLzEtMCsGA1UEAxMk
ZmMzNWU4ZmQtM2NhYi00NDc4LTgxODUtNDUzZGE2NTJlZDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApByTizARmSJCB5yReVmvVyRd8yO3ovSJsObo
rGZpzd2fMLk9ADXNvXCQVYF+1cdh63kMMsv9dYb3klXx1wvYXIke8Z+rR3d9lhiK
SQwh2rRHLQ2w8x9sCqEdCUTQqWjAHeuYs1uNy14Xx7QwS98Y504Wje2E9tV4xGyh
oLXzEzXIsnTJ6xJpbuWZuVORslRoGDYTocG+56bvfs8OOYY5znoJ4mAlFSL5R2Yx
JfW35wy7WvRXrrz8pY6rAePz0uAumdqIFoZr5rVqCZvMZTXnTAp22q8yryuvmeie
GtwFnyYUx1SrsSQxS9FXlYxb5d3NhIln/AJCZiTVfDnGSJJ7wQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFFMT8Xp/TvTKz3pfMpr+9XtbkYkEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWEz
OGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQxYzIzNDBiODMvMTRmNzNlNTItNzgyNS0z
ZjU3LWI3Y2UtNTZiZGE5NzU2YWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlhMzhhYTktZWVhOS00ZGEzLTlj
N2EtOWVkMWMyMzQwYjgzLzk5YTM4YWE5LWVlYTktNGRhMy05YzdhLTllZDFjMjM0
MGI4My5jcmwwHwYDVR0jBBgwFoAUprX8ebmAJVcnQICNntPieS8xdfEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWEzOGFhOS1lZWE5LTRkYTMtOWM3YS05ZWQx
YzIzNDBiODMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF62AMA8E
AgACMAkDBwAmIAEvEA4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAapkV4pqjnU8ATrGKE8vH+ipv1k5gsN++
LE6tc+AuCLbsFpzca+TWdwyoMcd644OjrfEgYPuKWTAO2SBCmqxOmTovtzu1mzL9
dN5Eo479SAzjfJeBwlRBGdbuTB1vPoJFJPCLV5+S4JsCRQJPO5QnVRH7+PAJw9Pp
V7GSYxrkK22zTb5gV51hI0aKlMzhU+pCWLcAgaxxdKTs0qrYfhjavJ2PKbpBZJW9
M5+Gb55Nlbc6e2+0csRQHU7mGogG0iZEF2xiBiRnA96kR/NM0FmZO/7RwgW8pxoW
sjSDIXqhSfz5ZYbPxwfxEZaXQwjBpxThGZ7fpngGd2nvTo6BQ02yog==
-----END CERTIFICATE-----
Generated at Wed May 22 01:47:55 2024 by rpki-client on console-ams.rpki-client.org