Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/f282509f-6fe8-3695-bbb8-a22242c776bb.roa
File:                     f282509f-6fe8-3695-bbb8-a22242c776bb.roa (raw, json)
Hash identifier:          dO0S0y3CvlkJJqiSca61h/C2oqKw3OsUuHErpU19xhA=
Subject key identifier:   66:5E:5B:F9:C4:2F:AF:A2:B5:6A:E8:1A:D4:FE:AE:F3:99:83:E4:A0
Certificate issuer:       /CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
Certificate serial:       010D0C9F432858452EE7EB5738479DBC8156CD00
Authority key identifier: 28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/f282509f-6fe8-3695-bbb8-a22242c776bb.roa
Signing time:             Tue 12 Mar 2024 13:00:28 +0000
ROA not before:           Tue 12 Mar 2024 13:00:28 +0000
ROA not after:            Mon 10 Jun 2024 13:00:28 +0000
asID:                     54429
IP address blocks:        23.146.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2e:e7:eb:57:38:47:9d:bc:81:56:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
        Validity
            Not Before: Mar 12 13:00:28 2024 GMT
            Not After : Jun 10 13:00:28 2024 GMT
        Subject: CN=1a4b5691-ba0a-4b0b-81b1-a60e82ed2042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:85:c1:37:e4:0b:e3:de:0f:af:ee:97:09:
                    d0:e0:82:5c:27:c0:26:db:2b:8e:a3:36:3e:9e:be:
                    81:ef:7d:ff:f7:3f:36:c1:87:26:1d:31:ad:42:e7:
                    9e:7d:54:47:ab:d6:43:43:5b:98:39:84:28:ea:dc:
                    e5:6a:7e:1a:a5:7f:05:e8:06:37:7f:41:0f:66:6e:
                    fd:8f:0d:e6:c0:63:44:33:7b:48:30:43:df:d6:52:
                    3e:8f:74:df:cb:e3:7c:b8:9c:30:e9:8b:65:77:25:
                    fa:67:fe:f8:ee:c8:2c:32:4d:bf:09:6c:f5:4a:c1:
                    4e:70:ba:0e:19:54:8f:c5:11:ea:b7:10:dd:e9:a9:
                    7a:86:7d:05:08:06:63:ba:e6:43:61:54:3d:85:ff:
                    3d:05:8e:4d:8d:2d:5d:d8:26:da:a1:08:b5:50:3d:
                    64:2a:f5:33:cd:b4:86:29:f1:de:2f:86:c9:d1:90:
                    02:b1:65:ff:bb:11:50:64:bd:91:44:46:f2:fa:75:
                    a9:93:97:55:21:6d:48:5a:5b:d3:7f:44:ae:32:59:
                    32:61:c8:8d:64:49:21:68:20:3a:06:1d:96:c0:7b:
                    07:3d:b5:66:f0:52:38:92:4d:92:14:b0:f7:3d:d9:
                    3d:21:03:e8:38:ca:16:6b:ba:c3:dc:ea:88:fd:0f:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5E:5B:F9:C4:2F:AF:A2:B5:6A:E8:1A:D4:FE:AE:F3:99:83:E4:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/f282509f-6fe8-3695-bbb8-a22242c776bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl

            X509v3 Authority Key Identifier:
                keyid:28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:c5:85:bb:bf:73:b3:e7:eb:1c:6c:93:1b:f7:95:67:40:3b:
         ec:a7:e7:41:59:39:7f:af:60:b3:c1:0e:59:07:de:64:94:01:
         47:57:43:cd:a9:32:7e:3a:c6:a5:54:57:4b:c2:73:be:0a:93:
         1c:b2:6c:07:e0:41:4e:3d:51:1f:2d:e2:c6:ef:69:ce:a9:3b:
         c9:42:b2:11:3c:ca:b5:43:56:0d:35:7d:e7:03:9c:d1:46:c9:
         2c:0e:bc:ec:db:58:06:86:6f:3e:fe:b1:5b:b3:49:bc:9f:fe:
         b5:8f:a5:cd:b0:42:66:41:f2:f4:32:5e:1c:dc:96:e8:a4:de:
         76:87:60:fc:78:a9:c9:78:03:d8:a9:47:82:da:5a:19:8b:2d:
         b9:58:86:14:db:6d:b1:4b:58:66:ab:56:1f:b4:63:82:c2:aa:
         bb:c0:9a:98:2e:28:19:fa:01:18:d2:f2:78:cd:0e:07:3a:1b:
         df:e5:b6:16:81:fe:11:32:29:5a:59:9d:bd:56:d6:f3:ca:09:
         1c:98:79:b9:18:11:73:52:7e:0d:04:f5:f1:5c:4b:db:91:fc:
         cc:12:17:8c:29:53:02:59:a1:02:eb:42:2e:2b:bd:bf:b6:47:
         38:fa:12:1e:ae:d3:69:92:1e:bd:eb:6c:1c:a2:7b:e6:b6:53:
         45:25:10:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUu5+tXOEedvIFWzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEwMjI1MTQtZWE5ZS00Y2ViLTlkMWItOTc2OGJlZTM2
YTRmMB4XDTI0MDMxMjEzMDAyOFoXDTI0MDYxMDEzMDAyOFowLzEtMCsGA1UEAxMk
MWE0YjU2OTEtYmEwYS00YjBiLTgxYjEtYTYwZTgyZWQyMDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUWFwTfkC+PeD6/ulwnQ4IJcJ8Am2yuOozY+
nr6B733/9z82wYcmHTGtQueefVRHq9ZDQ1uYOYQo6tzlan4apX8F6AY3f0EPZm79
jw3mwGNEM3tIMEPf1lI+j3Tfy+N8uJww6YtldyX6Z/747sgsMk2/CWz1SsFOcLoO
GVSPxRHqtxDd6al6hn0FCAZjuuZDYVQ9hf89BY5NjS1d2CbaoQi1UD1kKvUzzbSG
KfHeL4bJ0ZACsWX/uxFQZL2RREby+nWpk5dVIW1IWlvTf0SuMlkyYciNZEkhaCA6
Bh2WwHsHPbVm8FI4kk2SFLD3Pdk9IQPoOMoWa7rD3OqI/Q+fLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZeW/nEL6+itWroGtT+rvOZg+SgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lYTAy
MjUxNC1lYTllLTRjZWItOWQxYi05NzY4YmVlMzZhNGYvZjI4MjUwOWYtNmZlOC0z
Njk1LWJiYjgtYTIyMjQyYzc3NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWEwMjI1MTQtZWE5ZS00Y2ViLTlk
MWItOTc2OGJlZTM2YTRmL2VhMDIyNTE0LWVhOWUtNGNlYi05ZDFiLTk3NjhiZWUz
NmE0Zi5jcmwwHwYDVR0jBBgwFoAUKEDCAdB25eH59zQrMjdY49x72H0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lYTAyMjUxNC1lYTllLTRjZWItOWQxYi05NzY4
YmVlMzZhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5KoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALbFhbu/c7Pn6xxskxv3lWdAO+yn50FZOX+vYLPBDlkH3mSUAUdXQ82p
Mn46xqVUV0vCc74KkxyybAfgQU49UR8t4sbvac6pO8lCshE8yrVDVg01fecDnNFG
ySwOvOzbWAaGbz7+sVuzSbyf/rWPpc2wQmZB8vQyXhzcluik3naHYPx4qcl4A9ip
R4LaWhmLLblYhhTbbbFLWGarVh+0Y4LCqrvAmpguKBn6ARjS8njNDgc6G9/lthaB
/hEyKVpZnb1W1vPKCRyYebkYEXNSfg0E9fFcS9uR/MwSF4wpUwJZoQLrQi4rvb+2
Rzj6Eh6u02mSHr3rbByie+a2U0UlEDk=
-----END CERTIFICATE-----
Generated at Wed May 15 16:06:15 2024 by rpki-client on console-ams.rpki-client.org