Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/426b412f-a43c-3d09-aae6-0833d218aefc.roa
File:                     426b412f-a43c-3d09-aae6-0833d218aefc.roa (raw, json)
Hash identifier:          5KVXVx+YXZJUBuGTTgRr/w00A5ZtOmqEDmbWIA7EJ+0=
Subject key identifier:   D3:64:E2:17:68:08:AC:A3:89:51:CC:E9:DF:24:8E:03:38:7F:12:C5
Certificate issuer:       /CN=1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce
Certificate serial:       010D0C9F43285847E094BA55B8619267BB726580
Authority key identifier: 14:02:82:72:64:93:A9:34:A5:AF:26:C3:0B:CF:B8:FB:49:37:40:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/426b412f-a43c-3d09-aae6-0833d218aefc.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     46515
IP address blocks:        23.155.152.0/24 maxlen: 24
                          2620:ad:2000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ba:55:b8:61:92:67:bb:72:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=9f857c51-2598-45ef-b158-e7132240a43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:6f:ea:79:b8:c5:2b:5a:ce:58:b3:c3:05:
                    a9:87:d3:c5:2c:1c:db:42:70:05:8c:51:a0:4c:8c:
                    20:15:e9:27:e2:fa:a0:9c:31:34:22:4a:e0:25:8f:
                    77:98:52:9d:5d:83:2b:f7:06:2d:0c:76:68:ed:52:
                    a1:1a:4e:69:45:97:55:39:d6:6b:ae:9f:3e:0e:08:
                    a0:07:63:6c:58:fe:72:9a:8d:c1:22:08:96:04:0f:
                    e5:67:eb:7f:4d:93:63:bf:9d:7e:c5:83:39:9a:54:
                    8e:b7:86:92:3c:af:31:57:f6:71:bf:ae:f8:c7:8d:
                    fa:01:f6:52:ab:55:db:e5:55:ff:85:a8:c7:d8:b2:
                    5d:93:bc:19:9f:b3:cb:f5:cd:d7:24:e7:5e:2a:91:
                    5a:6e:32:57:f5:4b:14:03:3a:ff:24:5e:d3:b6:ac:
                    7f:b4:52:b2:45:23:56:4c:26:dc:78:25:d5:d7:10:
                    8f:6a:e1:2f:2b:26:dc:10:ad:3e:d0:b7:5f:32:c8:
                    b5:85:32:98:95:47:49:33:f6:67:c9:ba:7a:6b:4b:
                    1d:83:e8:ef:1b:0e:c3:f5:ae:8e:1d:c1:3b:86:a9:
                    48:63:ef:39:50:14:4b:77:6c:0e:fe:ec:08:29:88:
                    55:bc:53:0b:17:63:54:17:e8:bb:7c:61:01:91:a4:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:64:E2:17:68:08:AC:A3:89:51:CC:E9:DF:24:8E:03:38:7F:12:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/426b412f-a43c-3d09-aae6-0833d218aefc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.crl

            X509v3 Authority Key Identifier:
                keyid:14:02:82:72:64:93:A9:34:A5:AF:26:C3:0B:CF:B8:FB:49:37:40:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ad5d9d2-d74a-4ba0-b8a5-7f590019f4ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.152.0/24
                IPv6:
                  2620:ad:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:93:95:d7:d8:e9:04:b5:dd:95:ca:00:3e:94:4e:8e:82:3d:
         b9:a2:9b:92:29:46:a1:1d:3d:7c:04:38:0e:b2:c5:98:97:48:
         4e:32:c8:a1:92:51:0b:fd:4b:91:32:2b:65:83:d1:ec:47:4b:
         84:75:2f:a4:16:76:19:1d:38:59:0f:80:2c:e3:3c:16:22:cd:
         ea:e3:b0:f5:a9:f8:33:86:7f:c3:44:5c:f7:b9:18:5e:d8:95:
         a4:ca:3c:d4:02:60:fa:5a:38:ce:f8:cf:d0:73:8e:9d:c5:aa:
         ef:8c:04:1f:18:d1:23:3f:da:35:c4:00:44:a8:58:75:16:a9:
         3a:11:ed:30:ff:a0:14:91:10:88:a7:c5:b0:6b:d8:b3:c3:a2:
         aa:f0:91:d3:fa:a7:e4:e8:1c:39:cf:72:5d:68:49:e7:1c:ac:
         21:ae:74:35:b4:84:64:88:2f:d6:6f:bd:29:9a:1e:4c:81:ad:
         61:89:82:53:ee:74:bc:8f:65:ad:8d:19:cc:b0:5a:4a:99:a1:
         41:f7:24:81:cc:ac:ec:8d:c2:ab:35:d4:8e:ef:38:c7:25:09:
         44:58:e8:16:16:ee:b1:6c:92:e1:9e:77:77:8a:91:30:84:3f:
         ac:49:52:5b:39:10:08:83:06:5a:a2:59:9d:68:0e:51:9d:b6:
         dd:a9:c0:87
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEfglLpVuGGSZ7tyZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFkNWQ5ZDItZDc0YS00YmEwLWI4YTUtN2Y1OTAwMTlm
NGNlMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
OWY4NTdjNTEtMjU5OC00NWVmLWIxNTgtZTcxMzIyNDBhNDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJZv6nm4xStazlizwwWph9PFLBzbQnAFjFGg
TIwgFekn4vqgnDE0IkrgJY93mFKdXYMr9wYtDHZo7VKhGk5pRZdVOdZrrp8+Dgig
B2NsWP5ymo3BIgiWBA/lZ+t/TZNjv51+xYM5mlSOt4aSPK8xV/Zxv674x436AfZS
q1Xb5VX/hajH2LJdk7wZn7PL9c3XJOdeKpFabjJX9UsUAzr/JF7Ttqx/tFKyRSNW
TCbceCXV1xCPauEvKybcEK0+0LdfMsi1hTKYlUdJM/Znybp6a0sdg+jvGw7D9a6O
HcE7hqlIY+85UBRLd2wO/uwIKYhVvFMLF2NUF+i7fGEBkaS+nQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFNNk4hdoCKyjiVHM6d8kjgM4fxLFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWQ1
ZDlkMi1kNzRhLTRiYTAtYjhhNS03ZjU5MDAxOWY0Y2UvNDI2YjQxMmYtYTQzYy0z
ZDA5LWFhZTYtMDgzM2QyMThhZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFkNWQ5ZDItZDc0YS00YmEwLWI4
YTUtN2Y1OTAwMTlmNGNlLzFhZDVkOWQyLWQ3NGEtNGJhMC1iOGE1LTdmNTkwMDE5
ZjRjZS5jcmwwHwYDVR0jBBgwFoAUFAKCcmSTqTSlrybDC8+4+0k3QDowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWQ1ZDlkMi1kNzRhLTRiYTAtYjhhNS03ZjU5
MDAxOWY0Y2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5uYMA8E
AgACMAkDBwQmIACtIAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYZOV19jpBLXdlcoAPpROjoI9uaKbkilG
oR09fAQ4DrLFmJdITjLIoZJRC/1LkTIrZYPR7EdLhHUvpBZ2GR04WQ+ALOM8FiLN
6uOw9an4M4Z/w0Rc97kYXtiVpMo81AJg+lo4zvjP0HOOncWq74wEHxjRIz/aNcQA
RKhYdRapOhHtMP+gFJEQiKfFsGvYs8OiqvCR0/qn5OgcOc9yXWhJ5xysIa50NbSE
ZIgv1m+9KZoeTIGtYYmCU+50vI9lrY0ZzLBaSpmhQfckgcys7I3CqzXUju84xyUJ
RFjoFhbusWyS4Z53d4qRMIQ/rElSWzkQCIMGWqJZnWgOUZ223anAhw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org