Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa
File:                     cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa (raw, json)
Hash identifier:          HMf4YQYuT8jKzIwup79k929amp7S741wOCWXos2+MWk=
Subject key identifier:   C9:4C:C0:F5:DC:5F:FC:4C:23:80:FA:78:65:A2:B6:D8:50:7D:F9:57
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F43285845E193C8B04D5D491C3D406D80
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     6233
IP address blocks:        23.106.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c8:b0:4d:5d:49:1c:3d:40:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=065261d2-24b7-4eda-986d-a385457061af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:ab:1b:05:25:8e:50:6d:0a:e3:de:7e:4f:
                    d2:0f:2b:16:ca:41:fb:83:6c:0c:56:cc:c9:97:0e:
                    02:6f:80:33:1a:f0:9e:c2:68:2a:9c:37:0b:60:85:
                    e8:38:d3:a4:39:66:34:75:b4:cf:37:36:4a:29:37:
                    51:ce:6b:71:93:c8:7e:4a:19:a3:67:33:9c:20:49:
                    71:97:0b:90:07:8d:1e:3d:be:86:55:36:f4:66:e0:
                    98:e6:f3:6c:32:7e:ae:d6:b9:b2:0b:59:22:11:d1:
                    05:b1:14:f4:60:ff:e2:9e:87:3b:d1:d0:01:9d:de:
                    5e:83:72:77:f7:1e:88:44:23:c4:84:6c:b9:37:cd:
                    4d:0d:08:58:3a:79:4b:5d:37:09:fb:43:6f:fd:ae:
                    9f:11:d0:99:01:b4:eb:8a:30:2c:6f:1b:20:cd:28:
                    2b:07:f4:4f:81:98:ee:21:d8:d9:51:2e:da:dd:8f:
                    58:50:1e:b7:84:66:70:e8:be:8e:ce:d6:5d:d5:7a:
                    46:86:15:b3:c9:ba:98:b4:54:7f:f7:d7:67:94:ca:
                    79:60:e0:7e:20:16:c0:9b:c3:78:b8:c0:13:50:6a:
                    80:e9:e6:c8:d5:ff:ef:4d:3e:f5:0a:13:72:56:d3:
                    78:03:73:ba:9f:e1:af:72:ce:f7:6f:32:5f:29:1b:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4C:C0:F5:DC:5F:FC:4C:23:80:FA:78:65:A2:B6:D8:50:7D:F9:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.106.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:17:b7:85:d4:7a:2e:a0:fa:e0:41:a3:aa:94:96:2f:ef:86:
         0d:e6:49:d2:b8:b7:24:25:73:18:c5:7f:df:f8:62:9b:d2:05:
         3d:38:6b:79:91:cc:ae:75:2b:5f:94:52:08:53:3d:5a:ba:77:
         62:0c:39:be:ba:28:7f:47:b5:85:fa:8c:28:ea:5f:9d:ca:ee:
         f9:3e:a7:e6:c4:78:05:39:05:2a:f5:85:0b:b4:62:7c:d8:1e:
         c1:04:f6:12:4d:24:43:fd:00:26:7c:c2:22:8e:44:03:fd:c9:
         4b:ba:39:e8:55:8d:26:03:3a:6b:a2:ba:0a:8d:c2:6a:0c:af:
         bb:71:55:9d:20:76:75:cc:df:df:00:39:a8:2d:db:17:47:5a:
         47:39:63:dc:ea:89:1f:42:9a:17:ec:3b:8d:b7:84:67:24:42:
         44:1d:73:7a:04:e5:9e:45:19:d3:fe:a9:4b:18:f1:fe:72:63:
         da:d1:66:d4:3b:13:71:ac:bd:2c:6f:ae:3c:4b:bf:85:80:fe:
         17:39:14:c6:ea:ca:6c:e5:80:92:e0:ea:23:78:f0:56:2a:86:
         ee:71:3b:32:06:9e:a4:62:63:a9:6b:75:d8:bd:ee:14:3e:d7:
         38:df:c8:3e:b8:12:2d:8c:1e:6b:03:0a:ce:4b:20:83:9f:e5:
         55:32:88:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXhk8iwTV1JHD1AbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1
ZTM5MB4XDTI0MDUxNTEzMDAzNFoXDTI0MDgxMzEzMDAzNFowLzEtMCsGA1UEAxMk
MDY1MjYxZDItMjRiNy00ZWRhLTk4NmQtYTM4NTQ1NzA2MWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm2rGwUljlBtCuPefk/SDysWykH7g2wMVszJ
lw4Cb4AzGvCewmgqnDcLYIXoONOkOWY0dbTPNzZKKTdRzmtxk8h+ShmjZzOcIElx
lwuQB40ePb6GVTb0ZuCY5vNsMn6u1rmyC1kiEdEFsRT0YP/inoc70dABnd5eg3J3
9x6IRCPEhGy5N81NDQhYOnlLXTcJ+0Nv/a6fEdCZAbTrijAsbxsgzSgrB/RPgZju
IdjZUS7a3Y9YUB63hGZw6L6OztZd1XpGhhWzybqYtFR/99dnlMp5YOB+IBbAm8N4
uMATUGqA6ebI1f/vTT71ChNyVtN4A3O6n+Gvcs73bzJfKRvwJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlMwPXcX/xMI4D6eGWitthQfflXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx
ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvY2FjYmJhZGUtOTdjMC0z
ZThjLTkxODMtNmE5NGU2MDlhOGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi
YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1
NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky
OTE2NTVlMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF2qAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMXt4XUei6g+uBBo6qUli/vhg3mSdK4tyQlcxjFf9/4YpvSBT04a3mR
zK51K1+UUghTPVq6d2IMOb66KH9HtYX6jCjqX53K7vk+p+bEeAU5BSr1hQu0YnzY
HsEE9hJNJEP9ACZ8wiKORAP9yUu6OehVjSYDOmuiugqNwmoMr7txVZ0gdnXM398A
Oagt2xdHWkc5Y9zqiR9CmhfsO423hGckQkQdc3oE5Z5FGdP+qUsY8f5yY9rRZtQ7
E3GsvSxvrjxLv4WA/hc5FMbqymzlgJLg6iN48FYqhu5xOzIGnqRiY6lrddi97hQ+
1zjfyD64Ei2MHmsDCs5LIIOf5VUyiPE=
-----END CERTIFICATE-----
Generated at Tue May 21 01:57:18 2024 by rpki-client on console-fra.rpki-client.org