Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa
File:                     e09c5497-2279-333f-a80e-11090886d149.roa (raw, json)
Hash identifier:          NXQmL9vS1faCGpmrex4Azemceni6rvBupHiMLNeb4QM=
Subject key identifier:   72:23:01:D6:1C:81:0F:C6:32:7D:5D:5E:65:87:BA:CA:DF:D3:A6:D6
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285845777DD6136ED6F1887A9D9580
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     28753
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d6:13:6e:d6:f1:88:7a:9d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=8bfa96a2-cdb1-4963-b435-42fafa3b44cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:c5:62:8d:7c:ab:a2:eb:3d:c0:80:b7:3e:
                    ce:74:14:1f:ec:2b:47:ba:65:56:5a:32:aa:27:48:
                    25:eb:fb:bd:7e:de:77:0a:61:7d:ac:de:41:7f:a4:
                    9d:fb:73:2d:3e:4c:69:dd:dd:f0:f5:1e:c4:3b:35:
                    b0:f0:46:ff:37:80:44:aa:e7:a2:7c:09:54:57:6f:
                    74:c5:4d:b0:2c:8a:ef:27:5f:c4:42:59:59:ae:c5:
                    52:f4:0f:4d:e7:35:47:f4:bc:ad:33:d5:c6:f7:f8:
                    b8:f1:be:9b:fe:e7:ee:a9:61:14:a4:4a:5c:29:41:
                    fd:98:1e:30:e2:ac:0c:2d:ab:eb:fb:17:92:48:02:
                    09:9b:f7:f8:e3:84:61:0f:5b:ff:a3:71:5a:66:cc:
                    ce:e0:01:22:88:bd:5d:eb:f5:5c:ce:a2:a3:be:bb:
                    ec:8d:65:6b:11:42:59:a2:94:8d:3a:77:94:bf:4e:
                    f1:35:9b:a6:ce:36:d9:df:b8:2a:4a:73:3b:5a:0b:
                    2a:31:55:ff:dd:50:df:e4:5c:17:ce:ef:a4:01:66:
                    22:e1:b4:20:c7:24:07:fa:e8:17:15:27:34:e8:45:
                    26:d8:91:17:b9:a0:de:a7:6f:1d:61:81:66:f3:37:
                    9b:1f:f2:ad:59:45:cd:2d:10:95:ec:83:aa:d3:9f:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:23:01:D6:1C:81:0F:C6:32:7D:5D:5E:65:87:BA:CA:DF:D3:A6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:17:cb:d8:7b:e4:10:de:1b:6d:7f:46:b4:c6:b6:0b:95:4f:
         f8:c2:b3:e5:c9:5c:1b:26:2d:b6:f7:c1:bc:54:5b:aa:fc:b9:
         b3:53:e4:2b:32:f1:f2:79:7c:69:3b:3d:74:b1:ec:05:c5:08:
         11:d9:2b:a4:a4:04:35:19:d4:bc:06:bb:06:77:93:8b:4a:32:
         27:41:d4:bf:c5:3c:80:4b:f1:70:a7:2a:b0:0c:84:e4:22:97:
         a4:a0:ce:9e:f7:34:fa:2d:7d:8e:a3:e9:0d:93:50:9e:dc:a6:
         25:58:90:f2:1e:6d:a0:c2:09:6a:3f:c2:44:c2:fa:e7:c3:8b:
         a6:86:8b:b4:7c:c1:ea:6b:c0:4a:43:e6:cd:46:34:df:f3:c0:
         e4:b6:31:be:42:ac:c0:79:af:1f:bd:10:1e:b1:aa:c0:a7:03:
         33:13:0a:d0:68:0d:3c:9a:49:0a:07:de:f7:e5:5d:07:9c:94:
         52:6a:44:8a:0c:f7:93:c5:a6:ed:57:c3:16:2a:76:e0:4d:82:
         7b:40:ee:43:bb:ba:b3:a2:f9:b3:80:23:19:27:25:97:11:a0:
         14:90:d8:b9:ca:50:6b:7e:66:b5:11:e8:de:57:f5:6a:5f:4f:
         3d:07:a9:ba:62:27:96:a2:c8:6a:88:36:67:77:f1:ce:38:41:
         71:c6:7c:47
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEV3fdYTbtbxiHqdlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
OGJmYTk2YTItY2RiMS00OTYzLWI0MzUtNDJmYWZhM2I0NGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTbFYo18q6LrPcCAtz7OdBQf7CtHumVWWjKq
J0gl6/u9ft53CmF9rN5Bf6Sd+3MtPkxp3d3w9R7EOzWw8Eb/N4BEqueifAlUV290
xU2wLIrvJ1/EQllZrsVS9A9N5zVH9LytM9XG9/i48b6b/ufuqWEUpEpcKUH9mB4w
4qwMLavr+xeSSAIJm/f444RhD1v/o3FaZszO4AEiiL1d6/VczqKjvrvsjWVrEUJZ
opSNOneUv07xNZumzjbZ37gqSnM7WgsqMVX/3VDf5FwXzu+kAWYi4bQgxyQH+ugX
FSc06EUm2JEXuaDep28dYYFm8zebH/KtWUXNLRCV7IOq05+0TQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFHIjAdYcgQ/GMn1dXmWHusrf06bWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZTA5YzU0OTctMjI3OS0z
MzNmLWE4MGUtMTEwOTA4ODZkMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E
AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGhfL2HvkEN4bbX9GtMa2C5VP+MKz5clc
GyYttvfBvFRbqvy5s1PkKzLx8nl8aTs9dLHsBcUIEdkrpKQENRnUvAa7BneTi0oy
J0HUv8U8gEvxcKcqsAyE5CKXpKDOnvc0+i19jqPpDZNQntymJViQ8h5toMIJaj/C
RML658OLpoaLtHzB6mvASkPmzUY03/PA5LYxvkKswHmvH70QHrGqwKcDMxMK0GgN
PJpJCgfe9+VdB5yUUmpEigz3k8Wm7VfDFip24E2Ce0DuQ7u6s6L5s4AjGScllxGg
FJDYucpQa35mtRHo3lf1al9PPQepumInlqLIaog2Z3fxzjhBccZ8Rw==
-----END CERTIFICATE-----
Generated at Wed May 1 20:52:03 2024 by rpki-client on console-ams.rpki-client.org