Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/0e7235c8-98da-3ec3-9eb5-de439380fc70.roa
File:                     0e7235c8-98da-3ec3-9eb5-de439380fc70.roa (raw, json)
Hash identifier:          LX1lLBO34pBg45D+wunidUwcLD9IEfif/lNRWG03Vwc=
Subject key identifier:   12:07:49:7C:4B:9E:13:42:A6:C4:8E:B2:6C:75:99:E1:FC:B9:E6:61
Certificate issuer:       /CN=9faf7a12-0176-44f9-9938-7bbccac3d238
Certificate serial:       010D0C9F432858457FDDD5D5C8AE7BE6BB437780
Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/0e7235c8-98da-3ec3-9eb5-de439380fc70.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     30399
IP address blocks:        23.152.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d5:d5:c8:ae:7b:e6:bb:43:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=c6977ce6-a9a1-4417-b66c-84b29decdb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cd:c8:48:2f:d7:51:5e:b7:bb:99:f3:9b:3a:
                    79:55:ed:01:da:a8:c1:4a:b3:c6:e6:cc:fa:0d:d1:
                    88:43:d8:22:e3:1b:6a:cb:95:55:9f:8d:d1:0c:2a:
                    90:85:5b:8e:c1:64:96:36:1f:f1:58:4e:ff:1a:87:
                    d5:10:5f:db:a9:ee:b1:b5:23:5c:97:b4:a0:4f:38:
                    dc:fd:eb:06:fc:4d:cc:04:26:f7:62:1b:db:17:fb:
                    0f:09:6d:04:60:b7:1c:ba:1e:e2:76:77:cf:ec:03:
                    41:e6:b1:de:e9:ab:65:dd:47:83:f4:7f:c1:96:35:
                    34:00:7f:cd:da:33:ac:6d:73:46:2c:7e:61:69:b6:
                    90:66:1f:00:c6:ab:3e:4a:d7:82:28:b9:01:06:2c:
                    de:8f:87:e3:19:3b:ed:51:32:06:2c:64:03:38:c6:
                    c0:97:f2:c3:27:90:55:3e:3e:e2:f4:ab:ee:e4:80:
                    a2:11:dd:34:97:96:fe:e9:b3:da:dc:7a:11:e0:fc:
                    84:89:23:4d:c4:02:5a:03:fd:3c:9c:42:75:92:ab:
                    0c:59:b7:8a:bd:87:9b:65:28:4a:4c:c3:f3:47:9b:
                    38:27:0c:0b:5a:e0:3f:73:61:e6:94:b6:91:fb:3f:
                    38:c0:38:f6:ed:b1:b2:e6:8d:a8:4e:a1:49:a1:05:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:07:49:7C:4B:9E:13:42:A6:C4:8E:B2:6C:75:99:E1:FC:B9:E6:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/0e7235c8-98da-3ec3-9eb5-de439380fc70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl

            X509v3 Authority Key Identifier:
                keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:ce:eb:34:a8:52:46:82:cc:3b:2e:f0:87:a8:42:9e:79:
         ad:74:93:48:f9:7a:27:b2:e5:16:dc:13:1b:26:09:01:68:79:
         10:05:88:a7:2e:f0:da:e4:d8:7a:2b:71:53:ab:6a:02:ae:81:
         3c:36:c2:9e:77:01:2c:e3:15:5a:12:1d:56:d7:54:39:f5:a8:
         55:7f:40:14:bd:08:2f:5d:b0:1b:4a:b6:2c:62:61:52:ab:03:
         8b:81:ef:4b:b7:1c:c5:88:b7:ad:05:3e:1d:4c:59:48:65:e0:
         6d:45:d1:0c:7a:fc:ea:35:bb:00:bb:1a:6a:11:7b:b2:f2:fc:
         96:6e:cb:13:aa:a4:6d:38:a1:1e:1d:ba:ed:33:c0:d8:b0:53:
         97:b4:0f:46:f8:78:78:4d:c3:22:ab:b9:c2:8a:60:1b:17:42:
         75:23:a9:fc:3b:e4:2c:ed:71:3f:d3:94:84:cd:27:a2:c8:b9:
         f3:e8:8d:3b:fa:47:87:bc:24:60:c3:47:59:d8:47:99:72:5f:
         44:8a:5e:66:b4:d6:fb:cb:52:b9:05:84:10:90:e6:e8:f0:10:
         7b:b1:75:66:0b:07:ff:9c:74:96:ad:a5:64:f7:ca:6f:f8:5a:
         c6:f8:9a:4c:c9:11:2b:16:df:9b:1b:b4:e3:06:4b:e4:27:99:
         2c:5a:29:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV/3dXVyK575rtDd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk
MjM4MB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
YzY5NzdjZTYtYTlhMS00NDE3LWI2NmMtODRiMjlkZWNkYjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM3ISC/XUV63u5nzmzp5Ve0B2qjBSrPG5sz6
DdGIQ9gi4xtqy5VVn43RDCqQhVuOwWSWNh/xWE7/GofVEF/bqe6xtSNcl7SgTzjc
/esG/E3MBCb3YhvbF/sPCW0EYLccuh7idnfP7ANB5rHe6atl3UeD9H/BljU0AH/N
2jOsbXNGLH5habaQZh8Axqs+SteCKLkBBizej4fjGTvtUTIGLGQDOMbAl/LDJ5BV
Pj7i9Kvu5ICiEd00l5b+6bPa3HoR4PyEiSNNxAJaA/08nEJ1kqsMWbeKvYebZShK
TMPzR5s4JwwLWuA/c2HmlLaR+z84wDj27bGy5o2oTqFJoQXhvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIHSXxLnhNCpsSOsmx1meH8ueZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm
N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvMGU3MjM1YzgtOThkYS0z
ZWMzLTllYjUtZGU0MzkzODBmYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5
MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz
ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj
Y2FjM2QyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5goMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEm1zus0qFJGgsw7LvCHqEKeea10k0j5eiey5RbcExsmCQFoeRAFiKcu
8Nrk2HorcVOragKugTw2wp53ASzjFVoSHVbXVDn1qFV/QBS9CC9dsBtKtixiYVKr
A4uB70u3HMWIt60FPh1MWUhl4G1F0Qx6/Oo1uwC7GmoRe7Ly/JZuyxOqpG04oR4d
uu0zwNiwU5e0D0b4eHhNwyKrucKKYBsXQnUjqfw75CztcT/TlITNJ6LIufPojTv6
R4e8JGDDR1nYR5lyX0SKXma01vvLUrkFhBCQ5ujwEHuxdWYLB/+cdJatpWT3ym/4
Wsb4mkzJESsW35sbtOMGS+QnmSxaKZQ=
-----END CERTIFICATE-----
Generated at Thu May 16 01:33:14 2024 by rpki-client on console-fra.rpki-client.org