Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa
File:                     657f8682-de8b-3ad4-9a97-6a6c03122181.roa (raw, json)
Hash identifier:          2RvGCPQsWHPSJVi4Z2zTMlAKW/EJqFf9+fnPFHHqt1M=
Subject key identifier:   86:9A:CD:D2:38:79:36:92:94:EF:27:92:26:92:A3:4D:EB:88:0C:EC
Certificate issuer:       /CN=9b5de5e9-14a1-4521-b0e7-1db468c0b09b
Certificate serial:       010D0C9F43285847A5D6A9D3C467D9EA403B04C0
Authority key identifier: D7:C5:03:1B:51:85:42:FD:EC:B4:A6:16:B9:1C:45:74:BE:97:4E:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     395631
IP address blocks:        23.131.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a9:d3:c4:67:d9:ea:40:3b:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5de5e9-14a1-4521-b0e7-1db468c0b09b
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=5a32acb5-3364-4c67-baab-90b173a0f294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:a1:13:8a:77:04:de:fd:d9:d3:e0:8d:0a:
                    5c:56:ba:44:fe:1a:13:6b:6c:d1:2c:da:c6:85:fc:
                    0e:2e:2c:2d:73:d4:0f:0f:7a:10:83:51:9a:1b:31:
                    58:b7:67:de:d1:49:9a:91:c5:f2:2d:f9:e6:3b:61:
                    cc:f8:d2:7a:5f:71:d9:68:2c:1f:39:2f:5e:22:fc:
                    81:9d:b8:b2:7a:aa:47:e6:92:f8:0b:63:45:0f:2e:
                    ad:dd:81:9c:26:56:a1:39:0a:b6:5d:74:4e:10:e2:
                    98:f7:62:5a:5d:f1:33:8d:68:78:23:0d:2a:4c:b6:
                    47:6c:c2:9a:1f:99:67:14:21:59:96:a3:4b:85:4c:
                    9a:9d:1f:31:1e:a6:36:79:bb:30:66:86:d2:80:9b:
                    72:b7:ba:66:52:75:15:72:7a:13:61:2a:d8:0a:1d:
                    22:24:24:52:96:35:1a:43:98:ff:0a:03:90:01:fa:
                    bf:eb:95:0f:86:30:2e:ca:e3:0e:5c:dd:42:19:e5:
                    7a:a9:ab:08:da:b1:1c:60:d8:d5:7d:dc:8b:38:92:
                    e5:99:54:89:b6:8b:c8:3b:56:ef:6b:d3:08:6c:38:
                    fb:ee:3b:59:51:1e:16:69:85:39:b4:64:f3:43:cb:
                    8d:20:59:31:64:7a:a4:54:c7:97:fc:5c:e9:d9:11:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9A:CD:D2:38:79:36:92:94:EF:27:92:26:92:A3:4D:EB:88:0C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/657f8682-de8b-3ad4-9a97-6a6c03122181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.crl

            X509v3 Authority Key Identifier:
                keyid:D7:C5:03:1B:51:85:42:FD:EC:B4:A6:16:B9:1C:45:74:BE:97:4E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b5de5e9-14a1-4521-b0e7-1db468c0b09b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:66:b5:a3:4e:0e:c4:60:7a:6a:44:e6:be:83:c5:12:cf:
         7f:a6:91:1e:1d:6e:4c:62:2a:c3:77:6a:88:90:4a:7e:aa:9b:
         f4:9b:de:a5:f9:e0:c5:94:80:d2:ed:e2:0e:06:c8:68:94:12:
         2a:e1:e8:a4:10:a8:fb:6a:21:ae:f0:f4:cb:27:9b:65:d0:4a:
         45:7d:a7:64:bb:3e:e3:00:e8:c2:6d:72:f2:9a:20:0e:09:04:
         f5:44:5a:ba:23:88:ed:04:63:ac:2a:c8:03:45:93:73:e9:52:
         16:92:91:bb:40:2d:41:e7:8b:85:51:43:1a:12:cf:f3:49:c3:
         c5:17:bf:9d:7d:18:1c:f4:c6:6c:b8:42:24:87:76:9c:72:ae:
         01:7f:5b:43:ec:d7:6f:9b:ac:54:9a:11:fd:2b:51:9d:19:90:
         50:40:ac:b8:71:be:e5:de:8a:d8:3c:34:a4:69:38:c9:0a:f2:
         99:ea:65:e0:3e:6d:70:79:18:e7:49:d6:58:12:e9:1c:56:53:
         b6:c5:d7:c8:4f:5e:47:9e:fc:4f:fa:59:50:cd:9a:b0:98:18:
         dd:47:f8:69:ce:56:75:17:d5:5b:d6:83:18:50:38:83:c7:06:
         12:b9:2d:39:de:8f:a3:be:a1:b6:ff:29:33:d1:01:27:2e:93:
         a8:88:96:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qnTxGfZ6kA7BMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWI1ZGU1ZTktMTRhMS00NTIxLWIwZTctMWRiNDY4YzBi
MDliMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
NWEzMmFjYjUtMzM2NC00YzY3LWJhYWItOTBiMTczYTBmMjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn12hE4p3BN792dPgjQpcVrpE/hoTa2zRLNrG
hfwOLiwtc9QPD3oQg1GaGzFYt2fe0UmakcXyLfnmO2HM+NJ6X3HZaCwfOS9eIvyB
nbiyeqpH5pL4C2NFDy6t3YGcJlahOQq2XXROEOKY92JaXfEzjWh4Iw0qTLZHbMKa
H5lnFCFZlqNLhUyanR8xHqY2ebswZobSgJtyt7pmUnUVcnoTYSrYCh0iJCRSljUa
Q5j/CgOQAfq/65UPhjAuyuMOXN1CGeV6qasI2rEcYNjVfdyLOJLlmVSJtovIO1bv
a9MIbDj77jtZUR4WaYU5tGTzQ8uNIFkxZHqkVMeX/Fzp2REk9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIaazdI4eTaSlO8nkiaSo03riAzsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YjVk
ZTVlOS0xNGExLTQ1MjEtYjBlNy0xZGI0NjhjMGIwOWIvNjU3Zjg2ODItZGU4Yi0z
YWQ0LTlhOTctNmE2YzAzMTIyMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWI1ZGU1ZTktMTRhMS00NTIxLWIw
ZTctMWRiNDY4YzBiMDliLzliNWRlNWU5LTE0YTEtNDUyMS1iMGU3LTFkYjQ2OGMw
YjA5Yi5jcmwwHwYDVR0jBBgwFoAU18UDG1GFQv3stKYWuRxFdL6XTlkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85YjVkZTVlOS0xNGExLTQ1MjEtYjBlNy0xZGI0
NjhjMGIwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4OwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrfZrWjTg7EYHpqROa+g8USz3+mkR4dbkxiKsN3aoiQSn6qm/Sb3qX5
4MWUgNLt4g4GyGiUEirh6KQQqPtqIa7w9Msnm2XQSkV9p2S7PuMA6MJtcvKaIA4J
BPVEWrojiO0EY6wqyANFk3PpUhaSkbtALUHni4VRQxoSz/NJw8UXv519GBz0xmy4
QiSHdpxyrgF/W0Ps12+brFSaEf0rUZ0ZkFBArLhxvuXeitg8NKRpOMkK8pnqZeA+
bXB5GOdJ1lgS6RxWU7bF18hPXkee/E/6WVDNmrCYGN1H+GnOVnUX1VvWgxhQOIPH
BhK5LTnej6O+obb/KTPRAScuk6iIloo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:13 2024 by rpki-client on console-fra.rpki-client.org