Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa
File:                     04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (raw, json)
Hash identifier:          s4alO48BLGWO1Mx9soILanXCBO2nTkagPe1MdyVX45Y=
Subject key identifier:   5B:78:14:2E:25:16:6F:06:2A:54:72:42:F3:53:15:20:A7:6E:A1:6B
Certificate issuer:       /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
Certificate serial:       010D0C9F4328584522759CA27BB344DB213A4080
Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     49585
IP address blocks:        23.149.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:9c:a2:7b:b3:44:db:21:3a:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=55510e8e-4c45-4d61-8f74-599bfc58a4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5c:dd:29:f4:33:80:cb:0d:11:da:f7:80:ef:
                    48:c9:8f:f8:27:45:86:53:de:7c:28:c8:c9:85:37:
                    e8:dc:66:75:63:83:2e:9a:0f:36:59:fa:e7:60:7b:
                    49:24:bc:5d:15:d4:3e:7d:7f:70:8a:fe:6a:83:7f:
                    f3:d5:09:e2:b4:42:94:93:8c:9c:bd:1e:90:21:fc:
                    2f:57:2e:3f:7d:82:85:df:56:86:cd:42:c4:62:7f:
                    80:05:54:29:85:08:56:71:6c:45:63:26:60:2a:5c:
                    c7:6a:6a:98:6c:46:16:b0:09:57:a1:a2:e9:62:50:
                    a4:23:3e:9e:9d:fe:d1:bd:7d:0b:9c:ac:ad:87:29:
                    0a:c6:03:07:7c:c6:94:26:d6:e2:52:fd:d2:36:7b:
                    05:05:07:1f:da:22:1d:33:cf:b9:ea:a2:40:04:bd:
                    ff:18:78:8a:2e:5e:43:5a:92:e4:26:c0:7b:a9:d9:
                    ca:2b:aa:10:87:27:a3:2e:e7:5a:de:69:9f:34:39:
                    51:c0:17:57:e7:f1:70:f4:41:18:58:88:cd:81:e3:
                    82:46:58:28:eb:3b:cd:98:86:c6:9c:e4:7e:90:f7:
                    ea:0a:c1:02:47:1f:a3:3a:93:95:9c:12:8a:9d:86:
                    7d:42:52:4f:14:47:81:39:55:8c:96:cd:34:fb:ef:
                    f2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:78:14:2E:25:16:6F:06:2A:54:72:42:F3:53:15:20:A7:6E:A1:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl

            X509v3 Authority Key Identifier:
                keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:76:2a:41:55:9f:58:87:63:64:06:b1:a4:86:85:5f:18:
         b2:35:f7:28:45:eb:15:a2:ad:8d:36:a7:a5:0e:3e:d7:15:08:
         ab:92:01:5b:05:4a:b8:84:22:c4:91:14:70:2e:48:cc:b9:f2:
         9d:1a:b4:f8:2f:cc:6f:59:4d:fb:d7:20:e3:60:95:f5:50:b3:
         8b:c4:0d:75:a2:a7:6f:ee:3c:01:a0:f1:ce:9e:61:20:2f:e8:
         37:13:0c:5c:06:58:8b:92:56:dc:41:aa:f8:2f:b1:d4:65:a3:
         1f:ff:8e:26:42:39:a5:fe:8c:3d:56:42:5b:f3:e0:e4:9b:30:
         c1:44:54:01:f0:f9:66:89:c3:fb:a0:44:86:f5:6e:64:66:b9:
         63:45:f7:c4:1b:79:02:d7:11:07:2b:c3:55:4a:bc:90:77:73:
         a8:35:2c:40:65:0c:11:6b:15:ed:2b:a4:2f:79:7d:80:f7:fc:
         66:19:86:67:29:fa:17:d3:86:5d:4c:0a:7e:db:8a:7e:a6:67:
         76:11:fd:80:fe:22:d4:f1:11:e4:46:c6:07:27:c2:7c:47:dc:
         5f:1e:14:18:a2:56:cb:85:44:cf:fe:38:cc:4e:fb:e3:ba:b3:
         05:20:f1:53:1e:57:21:db:f9:cf:a6:b1:23:f8:77:fe:c7:fa:
         45:d1:f4:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUidZyie7NE2yE6QIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw
MjBlMB4XDTI0MDMwODAyMDAyNloXDTI0MDYwNjAxMDAyNlowLzEtMCsGA1UEAxMk
NTU1MTBlOGUtNGM0NS00ZDYxLThmNzQtNTk5YmZjNThhNGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VzdKfQzgMsNEdr3gO9IyY/4J0WGU958KMjJ
hTfo3GZ1Y4Mumg82WfrnYHtJJLxdFdQ+fX9wiv5qg3/z1QnitEKUk4ycvR6QIfwv
Vy4/fYKF31aGzULEYn+ABVQphQhWcWxFYyZgKlzHamqYbEYWsAlXoaLpYlCkIz6e
nf7RvX0LnKythykKxgMHfMaUJtbiUv3SNnsFBQcf2iIdM8+56qJABL3/GHiKLl5D
WpLkJsB7qdnKK6oQhyejLuda3mmfNDlRwBdX5/Fw9EEYWIjNgeOCRlgo6zvNmIbG
nOR+kPfqCsECRx+jOpOVnBKKnYZ9QlJPFEeBOVWMls00++/yZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFt4FC4lFm8GKlRyQvNTFSCnbqFrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3
M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMDRiMzViNDItYTA3Yy0z
NGVmLTlmM2EtYzJmNmU1YmZiOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk
ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl
MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx
YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5UoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJvdipBVZ9Yh2NkBrGkhoVfGLI19yhF6xWirY02p6UOPtcVCKuSAVsF
SriEIsSRFHAuSMy58p0atPgvzG9ZTfvXIONglfVQs4vEDXWip2/uPAGg8c6eYSAv
6DcTDFwGWIuSVtxBqvgvsdRlox//jiZCOaX+jD1WQlvz4OSbMMFEVAHw+WaJw/ug
RIb1bmRmuWNF98QbeQLXEQcrw1VKvJB3c6g1LEBlDBFrFe0rpC95fYD3/GYZhmcp
+hfThl1MCn7bin6mZ3YR/YD+ItTxEeRGxgcnwnxH3F8eFBiiVsuFRM/+OMxO++O6
swUg8VMeVyHb+c+msSP4d/7H+kXR9Gg=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:00 2024 by rpki-client on console-fra.rpki-client.org