Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/760e8091-2223-3b65-b116-a5851aa0d680.roa
File:                     760e8091-2223-3b65-b116-a5851aa0d680.roa (raw, json)
Hash identifier:          s/5pBFwvh5ycKoZl5tcGscWnHsYVG/Rf64i0b/aEvOk=
Subject key identifier:   59:9A:CD:36:C7:84:C9:82:0C:2B:51:E4:6F:F0:5A:A4:B5:76:5B:01
Certificate issuer:       /CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
Certificate serial:       010D0C9F4328584784567807AB1CEE69D5AECE80
Authority key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/760e8091-2223-3b65-b116-a5851aa0d680.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     14478
IP address blocks:        23.136.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:78:07:ab:1c:ee:69:d5:ae:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=c55e4c91-0135-45ab-9a2d-a74a245ed155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9b:4c:bd:26:5f:1e:1e:74:0c:e9:d5:8b:c8:
                    66:70:c1:d0:1a:2b:29:82:36:6f:43:33:9e:dc:47:
                    81:b3:ff:27:4a:c7:a2:8d:30:32:b8:47:d2:52:06:
                    80:90:89:91:79:0e:6c:26:58:2e:16:44:34:06:29:
                    ca:84:f5:8e:43:ef:87:06:59:74:85:f5:62:e0:af:
                    05:6d:44:50:fa:d3:d6:76:84:ce:90:94:01:7b:37:
                    cd:f8:25:6b:01:92:f5:31:a3:41:96:60:ae:a3:22:
                    f7:05:ad:32:91:e0:e6:f8:11:92:f2:d6:e3:c2:fa:
                    a5:da:be:22:03:91:15:c6:12:0e:9a:af:34:ec:ff:
                    ea:40:da:e2:2e:a6:9f:0b:32:e4:5b:9d:8d:1a:62:
                    3d:0c:21:32:7e:0e:3a:4f:77:80:33:3c:06:a8:ef:
                    a0:9d:75:b0:5a:ca:48:37:1c:2f:71:ab:6c:a8:67:
                    aa:b0:2d:bb:0b:ee:eb:50:fa:24:2f:25:0b:ab:6a:
                    ce:cb:ae:f1:80:c4:38:05:d1:1f:6b:fb:53:4f:33:
                    b3:39:f8:8d:36:e4:28:22:b0:7b:63:bb:18:a5:36:
                    f5:9c:11:07:48:81:59:f2:8f:ad:b6:0d:22:d8:4e:
                    11:1f:51:f6:ee:78:40:fc:ab:0e:d5:03:a3:bf:72:
                    ad:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9A:CD:36:C7:84:C9:82:0C:2B:51:E4:6F:F0:5A:A4:B5:76:5B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/760e8091-2223-3b65-b116-a5851aa0d680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl

            X509v3 Authority Key Identifier:
                keyid:37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:94:fd:62:02:fa:9d:f7:28:df:91:f1:52:e8:09:a5:7f:d3:
         ef:94:74:d6:26:c1:e7:b3:43:3b:9a:d2:70:23:f7:97:ba:d5:
         32:0a:5b:74:fc:37:3b:29:63:37:e9:64:56:47:05:5a:04:30:
         dd:83:93:6f:6e:b9:1e:e7:94:ee:68:05:8c:e3:6c:2e:dd:9d:
         38:31:cb:de:b0:ee:68:fb:15:ed:0e:8d:ca:30:d1:28:30:97:
         19:40:78:c1:c9:b9:84:6e:f2:47:9a:7d:84:5e:59:2f:97:fa:
         55:9b:77:89:ee:a8:6c:ed:cf:60:22:77:57:30:9d:47:0c:73:
         8d:cc:0a:08:73:fc:4f:da:dc:61:b3:e5:7f:d1:eb:9d:76:a9:
         ff:29:61:c4:3c:c6:80:f0:58:33:ff:f5:fe:e1:6c:d0:52:aa:
         a3:42:97:12:b8:1d:b8:46:0d:47:4e:db:40:b4:b7:3d:16:74:
         60:ea:ee:70:28:b9:56:3a:c6:54:89:72:23:6f:64:33:0a:b6:
         0d:6d:c8:3d:d4:1d:c2:21:81:be:59:8f:4b:f0:72:9f:8c:93:
         e7:4d:33:8f:fd:8f:c0:12:54:ec:4c:5f:34:40:32:33:dd:94:
         d5:3a:8d:dc:85:25:6c:ce:8f:2f:77:29:79:86:7e:c7:9f:ed:
         ea:bf:a7:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVngHqxzuadWuzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGIwMWY4MjktMWNlNi00N2Q1LWFmMmQtZjYxYTI1N2Yw
MjNmMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk
YzU1ZTRjOTEtMDEzNS00NWFiLTlhMmQtYTc0YTI0NWVkMTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JtMvSZfHh50DOnVi8hmcMHQGispgjZvQzOe
3EeBs/8nSseijTAyuEfSUgaAkImReQ5sJlguFkQ0BinKhPWOQ++HBll0hfVi4K8F
bURQ+tPWdoTOkJQBezfN+CVrAZL1MaNBlmCuoyL3Ba0ykeDm+BGS8tbjwvql2r4i
A5EVxhIOmq807P/qQNriLqafCzLkW52NGmI9DCEyfg46T3eAMzwGqO+gnXWwWspI
NxwvcatsqGeqsC27C+7rUPokLyULq2rOy67xgMQ4BdEfa/tTTzOzOfiNNuQoIrB7
Y7sYpTb1nBEHSIFZ8o+ttg0i2E4RH1H27nhA/KsO1QOjv3KtMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmazTbHhMmCDCtR5G/wWqS1dlsBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YjAx
ZjgyOS0xY2U2LTQ3ZDUtYWYyZC1mNjFhMjU3ZjAyM2YvNzYwZTgwOTEtMjIyMy0z
YjY1LWIxMTYtYTU4NTFhYTBkNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGIwMWY4MjktMWNlNi00N2Q1LWFm
MmQtZjYxYTI1N2YwMjNmLzhiMDFmODI5LTFjZTYtNDdkNS1hZjJkLWY2MWEyNTdm
MDIzZi5jcmwwHwYDVR0jBBgwFoAUN6UgHh7+xC+2bdTq4xb3MP7vkQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84YjAxZjgyOS0xY2U2LTQ3ZDUtYWYyZC1mNjFh
MjU3ZjAyM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKU/WIC+p33KN+R8VLoCaV/0++UdNYmweezQzua0nAj95e61TIKW3T8
NzspYzfpZFZHBVoEMN2Dk29uuR7nlO5oBYzjbC7dnTgxy96w7mj7Fe0Ojcow0Sgw
lxlAeMHJuYRu8keafYReWS+X+lWbd4nuqGztz2Aid1cwnUcMc43MCghz/E/a3GGz
5X/R6512qf8pYcQ8xoDwWDP/9f7hbNBSqqNClxK4HbhGDUdO20C0tz0WdGDq7nAo
uVY6xlSJciNvZDMKtg1tyD3UHcIhgb5Zj0vwcp+Mk+dNM4/9j8ASVOxMXzRAMjPd
lNU6jdyFJWzOjy93KXmGfsef7eq/p0E=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org