Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/ee780dca-bf73-3c37-b943-62c5d11a74f4.roa
File:                     ee780dca-bf73-3c37-b943-62c5d11a74f4.roa (raw, json)
Hash identifier:          28zftCUpOhkq0LcKq3Ze+toy8sgbjGaK4l9bTRyHDjU=
Subject key identifier:   0E:6E:7D:4C:DD:53:77:01:8D:45:FD:D3:D1:CC:58:92:D7:F5:FD:02
Certificate issuer:       /CN=50dd3001-8039-47e8-a642-92a97c54da3b
Certificate serial:       010D0C9F43285847A0414687EB0A776489E6B800
Authority key identifier: 1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/ee780dca-bf73-3c37-b943-62c5d11a74f4.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     400771
IP address blocks:        23.141.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:46:87:eb:0a:77:64:89:e6:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50dd3001-8039-47e8-a642-92a97c54da3b
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=a2bdd3fa-6b23-494d-9aec-f9c79ad94ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:64:be:88:3c:87:e5:ab:d6:fa:a5:04:1c:d6:
                    e4:5d:80:09:7e:9e:33:30:ca:6f:45:66:f4:a4:a2:
                    12:d1:3d:0e:7c:24:15:81:12:18:bb:a0:b1:c4:62:
                    a5:23:24:45:8e:72:15:86:87:19:15:de:61:0a:4c:
                    f3:0d:25:cf:dd:41:7f:0c:63:6b:9a:9c:e0:67:7f:
                    f8:fc:e3:0b:f7:b3:93:19:b9:1b:64:f8:49:31:16:
                    e5:52:65:76:c0:32:a7:c8:95:0d:d5:ab:5f:ba:a3:
                    13:60:7b:a6:7d:a4:2b:d8:ef:84:32:af:bb:9e:22:
                    97:8b:2f:78:8b:7c:f8:39:b3:39:90:37:bd:3e:c6:
                    2c:06:ca:5a:06:8e:5c:e0:57:bf:ec:26:7a:d8:28:
                    96:37:ea:95:6f:4f:e2:19:33:dd:d8:f3:b1:c4:00:
                    1c:6f:f5:2e:76:88:20:8f:31:1a:2d:5d:05:c2:6e:
                    18:25:26:0c:61:ca:d4:7e:3a:5b:cf:f6:c0:3b:c0:
                    f0:11:3f:be:a0:5b:91:d2:1b:39:6c:b8:ae:11:67:
                    b5:ed:26:30:22:62:35:68:77:c6:a7:7c:d0:fe:09:
                    ce:2a:d7:5e:53:cd:5b:3a:7b:aa:ea:87:fc:9a:01:
                    b2:55:01:54:b3:81:08:4c:e3:b0:84:9f:de:e9:ff:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6E:7D:4C:DD:53:77:01:8D:45:FD:D3:D1:CC:58:92:D7:F5:FD:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/ee780dca-bf73-3c37-b943-62c5d11a74f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.crl

            X509v3 Authority Key Identifier:
                keyid:1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:c7:f7:27:82:c3:94:b6:7c:98:2e:d2:f1:76:77:d2:ec:
         09:ef:b6:e7:91:22:a9:0f:bf:42:ab:d9:6b:93:c3:97:40:3c:
         b6:62:25:ff:dc:3a:36:36:e9:89:65:47:b5:70:ee:9a:29:75:
         76:b5:34:0f:63:af:5e:9e:ea:c9:01:cd:b7:fd:ed:3f:5a:20:
         57:43:98:af:6a:83:95:7a:d1:06:fb:7c:d6:de:15:79:24:b8:
         10:b6:b6:3b:9c:81:46:c5:5a:22:ab:31:66:9b:9f:91:69:7b:
         43:e9:6a:8f:ae:01:e0:d3:44:8e:aa:d5:23:fb:2e:14:e7:dd:
         25:76:d5:d9:71:db:ab:e1:ef:3b:12:e4:d2:4d:28:1b:e4:d8:
         0d:54:82:be:86:0f:ba:9a:fd:7d:ca:d3:c6:9b:ff:6f:58:98:
         4e:a3:0d:02:e1:8e:6b:dd:d5:f6:e0:65:00:3d:2d:8b:08:f9:
         58:3b:c3:e5:0b:ab:ae:cd:f9:72:89:f1:5c:38:eb:b2:d0:8c:
         40:d0:b5:cb:de:44:7f:9e:b2:93:3d:c9:2d:19:6b:76:7d:dc:
         d4:08:b9:13:cf:77:21:c0:8f:32:92:84:94:d7:ef:00:49:d9:
         57:46:42:ec:e8:b9:63:38:c4:95:98:8d:7b:19:ed:28:c2:ad:
         6f:1d:3d:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQUaH6wp3ZInmuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkZDMwMDEtODAzOS00N2U4LWE2NDItOTJhOTdjNTRk
YTNiMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
YTJiZGQzZmEtNmIyMy00OTRkLTlhZWMtZjljNzlhZDk0Y2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GS+iDyH5avW+qUEHNbkXYAJfp4zMMpvRWb0
pKIS0T0OfCQVgRIYu6CxxGKlIyRFjnIVhocZFd5hCkzzDSXP3UF/DGNrmpzgZ3/4
/OML97OTGbkbZPhJMRblUmV2wDKnyJUN1atfuqMTYHumfaQr2O+EMq+7niKXiy94
i3z4ObM5kDe9PsYsBspaBo5c4Fe/7CZ62CiWN+qVb0/iGTPd2POxxAAcb/Uudogg
jzEaLV0Fwm4YJSYMYcrUfjpbz/bAO8DwET++oFuR0hs5bLiuEWe17SYwImI1aHfG
p3zQ/gnOKtdeU81bOnuq6of8mgGyVQFUs4EITOOwhJ/e6f+xIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5ufUzdU3cBjUX909HMWJLX9f0CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MGRk
MzAwMS04MDM5LTQ3ZTgtYTY0Mi05MmE5N2M1NGRhM2IvZWU3ODBkY2EtYmY3My0z
YzM3LWI5NDMtNjJjNWQxMWE3NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTBkZDMwMDEtODAzOS00N2U4LWE2
NDItOTJhOTdjNTRkYTNiLzUwZGQzMDAxLTgwMzktNDdlOC1hNjQyLTkyYTk3YzU0
ZGEzYi5jcmwwHwYDVR0jBBgwFoAUH4q+G06hvlsXErRFBNC/5BVwPAowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81MGRkMzAwMS04MDM5LTQ3ZTgtYTY0Mi05MmE5
N2M1NGRhM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF40oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUcx/cngsOUtnyYLtLxdnfS7AnvtueRIqkPv0Kr2WuTw5dAPLZiJf/c
OjY26YllR7Vw7popdXa1NA9jr16e6skBzbf97T9aIFdDmK9qg5V60Qb7fNbeFXkk
uBC2tjucgUbFWiKrMWabn5Fpe0Ppao+uAeDTRI6q1SP7LhTn3SV21dlx26vh7zsS
5NJNKBvk2A1Ugr6GD7qa/X3K08ab/29YmE6jDQLhjmvd1fbgZQA9LYsI+Vg7w+UL
q67N+XKJ8Vw467LQjEDQtcveRH+espM9yS0Za3Z93NQIuRPPdyHAjzKShJTX7wBJ
2VdGQuzouWM4xJWYjXsZ7SjCrW8dPXg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:03 2024 by rpki-client on console-fra.rpki-client.org