Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40093bea-2ade-3806-9114-f2826ee55899.roa
File:                     40093bea-2ade-3806-9114-f2826ee55899.roa (raw, json)
Hash identifier:          I9OAyQ17AjyvzRkTJ4LPX4I2m3+I1tztz0iL/OLDhYM=
Subject key identifier:   3E:9C:83:39:96:75:A3:97:27:43:78:C3:EE:49:3F:69:9D:68:77:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB5DAF29A176ADB3212640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40093bea-2ade-3806-9114-f2826ee55899.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     20214
IP address blocks:        23.24.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:5d:af:29:a1:76:ad:b3:21:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=793788a8-5379-478e-91ec-44d5524c9fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:04:b6:76:f2:90:99:2e:5e:51:2b:cf:ed:
                    45:09:22:d7:9e:8b:0c:9a:7a:37:bf:91:66:5f:10:
                    60:dd:bd:cb:9e:24:b8:b2:07:9f:e4:9c:4c:7d:96:
                    96:11:e2:28:b7:fb:55:46:2a:ad:70:d2:90:8f:38:
                    25:48:a0:c7:38:aa:5d:1c:c1:d4:a5:7c:bf:3d:0a:
                    d2:1f:b2:6f:08:91:83:b0:7d:ae:c3:c1:94:a6:0c:
                    6e:57:71:b2:14:67:22:50:2b:78:52:02:15:b9:96:
                    3a:14:a8:a1:99:19:6c:af:46:f3:c3:f9:44:4d:50:
                    7f:90:30:bf:6a:79:ae:2d:0e:7f:da:50:a6:2f:80:
                    ad:52:e5:72:95:f3:23:28:0e:a6:21:3b:d5:3e:9b:
                    78:90:92:88:d3:4c:8f:55:04:ee:aa:a3:79:05:f6:
                    94:59:df:dd:a9:d0:12:93:b8:fe:04:61:4b:fb:f3:
                    a9:4d:4c:8f:55:97:4e:53:09:0f:3b:f7:b6:a1:2e:
                    0b:f1:2e:91:5d:3f:c5:d5:b2:de:ff:4b:63:67:04:
                    99:07:bc:2e:9b:c4:f3:ce:f8:20:3b:3e:00:0d:44:
                    1c:de:38:eb:5b:e2:d6:1a:a7:fc:7f:4d:fe:cd:6a:
                    c3:8b:db:3d:0b:c9:b7:64:85:79:44:54:41:fd:14:
                    b6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9C:83:39:96:75:A3:97:27:43:78:C3:EE:49:3F:69:9D:68:77:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40093bea-2ade-3806-9114-f2826ee55899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.24.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:47:25:80:98:d6:9d:f9:0f:95:01:0f:27:92:ce:ae:f7:2b:
         71:c7:bc:f7:68:41:e8:fd:d3:7d:8b:22:10:d4:44:e6:58:cc:
         5d:35:a7:34:f5:1b:2e:cb:bf:3c:ab:76:6f:10:66:a2:0a:d1:
         90:ec:2b:e0:8d:a2:eb:48:4b:38:ed:74:2e:6b:82:ab:ed:f0:
         d5:a6:b1:0b:0e:9a:3d:28:76:86:7a:d7:90:05:9f:d6:fc:6f:
         34:9d:44:4d:72:75:ef:12:47:6f:3f:d5:24:34:ab:25:0a:7d:
         1c:31:a2:99:f7:02:1e:10:75:5b:dc:35:11:00:b4:db:81:c0:
         cd:d0:49:ea:a2:3d:ff:d2:98:96:b8:47:3a:bb:64:f8:79:80:
         76:04:56:fd:42:99:69:c3:19:a5:8d:8e:e9:da:c1:45:1b:ef:
         87:3b:65:f6:a1:6e:b5:85:c3:b2:52:8b:ff:62:a8:0c:a1:20:
         82:86:b2:14:a6:17:3c:0c:bc:b2:2e:f7:66:b3:f5:82:a6:ee:
         97:e1:cc:01:b6:dd:ee:0a:da:0f:d4:3f:a9:6c:e7:16:08:bb:
         d8:23:c9:fb:de:9c:10:84:6a:90:9b:43:60:86:5f:56:7a:17:
         66:ef:a4:1f:f4:5b:b4:51:d0:31:d0:7a:1f:a2:3f:7b:b1:e9:
         bc:cd:94:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfq12vKaF2rbMhJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NzkzNzg4YTgtNTM3OS00NzhlLTkxZWMtNDRkNTUyNGM5ZmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1EEtnbykJkuXlErz+1FCSLXnosMmno3v5Fm
XxBg3b3LniS4sgef5JxMfZaWEeIot/tVRiqtcNKQjzglSKDHOKpdHMHUpXy/PQrS
H7JvCJGDsH2uw8GUpgxuV3GyFGciUCt4UgIVuZY6FKihmRlsr0bzw/lETVB/kDC/
anmuLQ5/2lCmL4CtUuVylfMjKA6mITvVPpt4kJKI00yPVQTuqqN5BfaUWd/dqdAS
k7j+BGFL+/OpTUyPVZdOUwkPO/e2oS4L8S6RXT/F1bLe/0tjZwSZB7wum8Tzzvgg
Oz4ADUQc3jjrW+LWGqf8f03+zWrDi9s9C8m3ZIV5RFRB/RS22QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6cgzmWdaOXJ0N4w+5JP2mdaHftMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDAwOTNiZWEtMmFkZS0z
ODA2LTkxMTQtZjI4MjZlZTU1ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFxigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANNHJYCY1p35D5UBDyeSzq73K3HHvPdoQej9032LIhDUROZYzF01pzT1
Gy7Lvzyrdm8QZqIK0ZDsK+CNoutISzjtdC5rgqvt8NWmsQsOmj0odoZ615AFn9b8
bzSdRE1yde8SR28/1SQ0qyUKfRwxopn3Ah4QdVvcNREAtNuBwM3QSeqiPf/SmJa4
Rzq7ZPh5gHYEVv1CmWnDGaWNjunawUUb74c7ZfahbrWFw7JSi/9iqAyhIIKGshSm
FzwMvLIu92az9YKm7pfhzAG23e4K2g/UP6ls5xYIu9gjyfvenBCEapCbQ2CGX1Z6
F2bvpB/0W7RR0DHQeh+iP3ux6bzNlNI=
-----END CERTIFICATE-----
Generated at Sat May 4 14:47:41 2024 by rpki-client on console-fra.rpki-client.org