Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/76a05650-c369-4673-a859-45cf3c4e13db/93fc8697-d276-3f32-bd08-219603ab2534.roa
File:                     93fc8697-d276-3f32-bd08-219603ab2534.roa (raw, json)
Hash identifier:          xrDxPE3elq93scLWtv2SDzLdXqLv/jkCOoZYFwmUFTw=
Subject key identifier:   91:62:90:9C:8D:57:5B:95:4A:5F:63:D1:C2:E3:C7:FB:B8:1B:D5:E3
Certificate issuer:       /CN=76a05650-c369-4673-a859-45cf3c4e13db
Certificate serial:       010D0C9F432858472405BD0B7CEA1D5E31622125
Authority key identifier: A6:AC:4A:19:34:23:34:12:BA:32:CC:1D:05:60:6F:8E:64:CA:FB:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/76a05650-c369-4673-a859-45cf3c4e13db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/76a05650-c369-4673-a859-45cf3c4e13db/93fc8697-d276-3f32-bd08-219603ab2534.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     54987
IP address blocks:        23.153.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/76a05650-c369-4673-a859-45cf3c4e13db/76a05650-c369-4673-a859-45cf3c4e13db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/76a05650-c369-4673-a859-45cf3c4e13db/76a05650-c369-4673-a859-45cf3c4e13db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/76a05650-c369-4673-a859-45cf3c4e13db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:bd:0b:7c:ea:1d:5e:31:62:21:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a05650-c369-4673-a859-45cf3c4e13db
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=d90943fb-2ff4-467c-922f-46d56a2e56d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:f2:11:56:e5:82:5b:50:67:74:77:a4:35:
                    ec:9b:0a:83:f1:71:c3:b7:14:b6:59:13:6b:d0:6e:
                    6f:6c:94:c1:d8:0b:dc:d8:60:f5:99:40:b8:cc:53:
                    65:36:5c:56:f8:c3:98:0c:f4:bf:8a:d6:a0:e8:49:
                    d8:04:9d:20:f8:d7:da:d1:fa:ef:17:83:75:32:b4:
                    67:e2:45:d9:dd:eb:2e:0b:b9:10:e9:5a:10:b1:e5:
                    b5:e4:4e:e0:ad:ba:05:73:5f:ad:96:71:11:e0:4e:
                    05:af:8e:0f:25:4a:e0:ad:4f:44:0b:58:e5:39:90:
                    55:5e:80:f7:af:67:b3:6d:8c:6c:e8:72:e3:b5:37:
                    db:f7:05:0c:81:29:1c:0b:6a:03:82:05:93:cc:a3:
                    9d:be:61:30:35:da:af:b9:c7:1a:38:33:2f:d2:aa:
                    d7:ed:8a:23:7c:9d:61:7c:ca:15:d7:ea:3d:2d:91:
                    1c:a1:13:26:c6:32:46:ec:09:7d:34:ee:82:4d:9a:
                    be:cd:65:40:8b:e9:8d:7f:50:8b:9f:b8:59:9a:89:
                    bf:bb:3b:d1:78:0b:61:16:ac:a8:6f:f5:bc:40:ab:
                    0c:59:0a:a5:19:ac:ff:20:10:6b:df:13:af:e5:69:
                    98:45:f5:1e:1f:bf:42:10:b4:70:b0:79:99:06:32:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:62:90:9C:8D:57:5B:95:4A:5F:63:D1:C2:E3:C7:FB:B8:1B:D5:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/76a05650-c369-4673-a859-45cf3c4e13db/93fc8697-d276-3f32-bd08-219603ab2534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/76a05650-c369-4673-a859-45cf3c4e13db/76a05650-c369-4673-a859-45cf3c4e13db.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AC:4A:19:34:23:34:12:BA:32:CC:1D:05:60:6F:8E:64:CA:FB:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/76a05650-c369-4673-a859-45cf3c4e13db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:48:fe:d5:4d:ba:f6:5b:ba:a8:f1:dc:c8:ee:e0:b5:c8:
         fc:32:96:3b:b3:2c:f2:01:80:d9:f2:47:09:6e:a6:cd:77:7c:
         bf:6a:1d:62:d1:94:91:d0:02:b8:dd:d9:3d:6a:92:8a:98:50:
         a2:87:86:84:9f:91:d9:ec:a1:a4:52:7c:7c:d3:b7:84:dc:78:
         98:1b:d4:ca:1a:de:aa:34:22:02:27:0e:59:04:28:c2:d8:db:
         68:2c:0c:dd:77:62:52:b9:ad:66:74:92:0a:69:7a:97:9d:e3:
         19:c0:d0:a7:30:85:4b:29:59:2b:c6:49:21:dd:a0:cc:21:ac:
         7f:8e:7f:f2:71:db:b3:23:d0:19:c9:df:3c:40:9a:cd:fb:b9:
         7f:e1:63:23:74:6c:8f:77:5a:ce:83:42:43:19:09:5d:10:8e:
         99:2b:61:de:c8:be:42:ef:02:d2:36:45:2f:f8:54:02:12:2c:
         fc:98:70:58:91:14:35:a4:0d:0a:e9:d0:64:23:b1:91:9f:7b:
         ca:23:e3:b7:35:c8:42:66:5e:a0:a8:92:e6:62:c9:21:c1:74:
         bb:c8:54:ae:d7:d5:f5:3b:0c:36:13:e6:bf:29:9b:d1:9b:7b:
         c5:d3:de:82:4f:b8:df:8d:36:28:c7:3f:17:2c:0a:42:05:82:
         8b:7c:48:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBb0LfOodXjFiISUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZhMDU2NTAtYzM2OS00NjczLWE4NTktNDVjZjNjNGUx
M2RiMB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZDkwOTQzZmItMmZmNC00NjdjLTkyMmYtNDZkNTZhMmU1NmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD3yEVblgltQZ3R3pDXsmwqD8XHDtxS2WRNr
0G5vbJTB2Avc2GD1mUC4zFNlNlxW+MOYDPS/itag6EnYBJ0g+Nfa0frvF4N1MrRn
4kXZ3esuC7kQ6VoQseW15E7grboFc1+tlnER4E4Fr44PJUrgrU9EC1jlOZBVXoD3
r2ezbYxs6HLjtTfb9wUMgSkcC2oDggWTzKOdvmEwNdqvuccaODMv0qrX7YojfJ1h
fMoV1+o9LZEcoRMmxjJG7Al9NO6CTZq+zWVAi+mNf1CLn7hZmom/uzvReAthFqyo
b/W8QKsMWQqlGaz/IBBr3xOv5WmYRfUeH79CELRwsHmZBjLfcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFikJyNV1uVSl9j0cLjx/u4G9XjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NmEw
NTY1MC1jMzY5LTQ2NzMtYTg1OS00NWNmM2M0ZTEzZGIvOTNmYzg2OTctZDI3Ni0z
ZjMyLWJkMDgtMjE5NjAzYWIyNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzZhMDU2NTAtYzM2OS00NjczLWE4
NTktNDVjZjNjNGUxM2RiLzc2YTA1NjUwLWMzNjktNDY3My1hODU5LTQ1Y2YzYzRl
MTNkYi5jcmwwHwYDVR0jBBgwFoAUpqxKGTQjNBK6MswdBWBvjmTK+xQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NmEwNTY1MC1jMzY5LTQ2NzMtYTg1OS00NWNm
M2M0ZTEzZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5mgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyqSP7VTbr2W7qo8dzI7uC1yPwyljuzLPIBgNnyRwlups13fL9qHWLR
lJHQArjd2T1qkoqYUKKHhoSfkdnsoaRSfHzTt4TceJgb1Moa3qo0IgInDlkEKMLY
22gsDN13YlK5rWZ0kgppeped4xnA0KcwhUspWSvGSSHdoMwhrH+Of/Jx27Mj0BnJ
3zxAms37uX/hYyN0bI93Ws6DQkMZCV0QjpkrYd7IvkLvAtI2RS/4VAISLPyYcFiR
FDWkDQrp0GQjsZGfe8oj47c1yEJmXqCokuZiySHBdLvIVK7X1fU7DDYT5r8pm9Gb
e8XT3oJPuN+NNijHPxcsCkIFgot8SBg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:21 2024 by rpki-client on console-fra.rpki-client.org