Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa
File:                     84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa (raw, json)
Hash identifier:          FeYTrjF8csAwAfkquM0IzuXnPYeQkjGXHw7eHC3wd8s=
Subject key identifier:   49:F9:56:20:F3:70:E5:B5:91:A1:31:27:1A:9A:F2:FF:FF:80:6C:C3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285845777DD48133EA7B745EDBE600
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     7203
IP address blocks:        23.19.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d4:81:33:ea:7b:74:5e:db:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=c0ffdaae-cf6e-4a25-9a76-b7cc214570b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:a0:44:8e:75:9e:2b:74:1c:fa:e0:c3:df:
                    99:15:36:66:4f:b7:0e:50:de:fc:b2:dd:bf:70:fd:
                    cc:f5:26:53:ff:34:71:fa:a0:8a:ee:54:fc:fc:96:
                    e9:48:60:e3:68:15:c8:1c:0e:42:71:8b:f2:58:6d:
                    de:90:7d:07:18:e3:06:50:53:c4:c0:dc:cc:7e:76:
                    58:25:0a:1c:87:e1:af:bb:05:d6:6d:42:56:66:1e:
                    ab:4e:06:77:ad:a3:22:2d:e2:39:58:69:b4:d2:80:
                    b4:4e:e8:12:f2:46:bd:63:da:1d:f5:69:5c:82:ea:
                    00:87:59:4d:0b:bf:fc:cb:4d:05:22:4e:82:21:61:
                    f2:42:5b:78:cf:9b:a3:bb:f6:52:e7:0e:2a:5f:46:
                    de:22:da:0a:11:6f:52:79:24:27:8b:95:ab:61:74:
                    01:e6:c4:ad:7e:c3:ed:89:9d:2e:63:cf:7b:f0:08:
                    3c:02:ac:1d:18:dd:03:2d:2b:d8:ea:61:ff:a5:b1:
                    98:29:f5:69:c4:b5:35:12:1f:92:de:30:54:f0:bf:
                    bc:37:5a:42:9e:fe:9e:62:6d:86:9b:60:2d:ae:8f:
                    be:f6:b0:13:62:78:f5:05:48:f5:70:6c:01:4b:81:
                    93:f8:d2:2f:54:e2:26:1a:f5:13:49:16:58:70:d8:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F9:56:20:F3:70:E5:B5:91:A1:31:27:1A:9A:F2:FF:FF:80:6C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f9:7b:64:70:b2:5b:b2:1d:ac:48:ab:c0:88:b0:9b:5b:a1:
         2f:27:e6:c3:32:e5:a6:a2:43:0e:96:75:84:57:99:73:a8:51:
         4b:d2:84:19:df:66:cc:90:b4:bd:55:a1:d1:d2:c6:57:5e:37:
         aa:8b:aa:96:7d:fd:40:08:54:3b:3c:cb:a5:56:60:7e:94:e3:
         78:c0:56:fa:54:41:ae:80:db:f0:e2:09:86:d8:da:35:23:dd:
         b8:d1:c7:dc:1a:e9:e2:f0:2f:40:da:ea:5a:1b:0c:f2:70:5c:
         c2:8e:3f:af:36:a9:25:c7:d1:2b:d9:bd:f2:97:6e:5e:db:d7:
         1d:1a:62:ad:5c:7a:01:72:e1:a0:40:02:86:59:fc:28:0e:8b:
         19:42:40:9a:7b:e2:d7:e7:43:0d:92:00:7d:0f:26:e1:5b:85:
         c1:90:de:cb:27:a0:a6:4a:86:2e:91:9b:9a:fd:d3:b5:7a:7b:
         11:8a:ee:e5:5a:b7:36:f7:f4:b5:e3:74:ef:c4:5d:41:1f:b0:
         79:85:4b:1f:3c:6a:b3:d4:83:1f:91:4f:d0:6f:b6:49:d0:b9:
         e2:28:b1:c8:de:c1:02:a7:05:b0:91:ae:fc:53:e1:e7:cc:8f:
         4e:62:65:ae:48:a9:c2:1c:6c:c0:dd:54:6e:c5:dc:f1:94:34:
         b9:37:27:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fdSBM+p7dF7b5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
YzBmZmRhYWUtY2Y2ZS00YTI1LTlhNzYtYjdjYzIxNDU3MGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVegRI51nit0HPrgw9+ZFTZmT7cOUN78st2/
cP3M9SZT/zRx+qCK7lT8/JbpSGDjaBXIHA5CcYvyWG3ekH0HGOMGUFPEwNzMfnZY
JQoch+GvuwXWbUJWZh6rTgZ3raMiLeI5WGm00oC0TugS8ka9Y9od9WlcguoAh1lN
C7/8y00FIk6CIWHyQlt4z5uju/ZS5w4qX0beItoKEW9SeSQni5WrYXQB5sStfsPt
iZ0uY8978Ag8AqwdGN0DLSvY6mH/pbGYKfVpxLU1Eh+S3jBU8L+8N1pCnv6eYm2G
m2Atro++9rATYnj1BUj1cGwBS4GT+NIvVOImGvUTSRZYcNge4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEn5ViDzcOW1kaExJxqa8v//gGzDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODRiYjg3NmUtYzQ3ZC0z
M2Y0LThjZDctMWYzYmI0YjgyMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJX5e2RwsluyHaxIq8CIsJtboS8n5sMy5aaiQw6WdYRXmXOoUUvShBnf
ZsyQtL1VodHSxldeN6qLqpZ9/UAIVDs8y6VWYH6U43jAVvpUQa6A2/DiCYbY2jUj
3bjRx9wa6eLwL0Da6lobDPJwXMKOP682qSXH0SvZvfKXbl7b1x0aYq1cegFy4aBA
AoZZ/CgOixlCQJp74tfnQw2SAH0PJuFbhcGQ3ssnoKZKhi6Rm5r907V6exGK7uVa
tzb39LXjdO/EXUEfsHmFSx88arPUgx+RT9BvtknQueIoscjewQKnBbCRrvxT4efM
j05iZa5IqcIcbMDdVG7F3PGUNLk3J6Q=
-----END CERTIFICATE-----
Generated at Fri May 31 17:47:11 2024 by rpki-client on console-fra.rpki-client.org