Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/b9aae87e-4089-3272-971b-9dd25eb62515.roa
File:                     b9aae87e-4089-3272-971b-9dd25eb62515.roa (raw, json)
Hash identifier:          Fb4AKZ0+FWxljpQu20NgAf7pyoMeIPYDA3mhoz6JR48=
Subject key identifier:   E6:C2:9F:57:8B:54:9C:42:BD:08:C6:E1:92:A5:0F:CD:48:88:3D:06
Certificate issuer:       /CN=a4a5ba5d-c707-479a-82b6-0d1735321896
Certificate serial:       010D0C9F43285847600B7FA0294054E4ACCE223C
Authority key identifier: F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/b9aae87e-4089-3272-971b-9dd25eb62515.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     29802
IP address blocks:        23.226.122.0/24 maxlen: 24
                          23.226.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:7f:a0:29:40:54:e4:ac:ce:22:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a5ba5d-c707-479a-82b6-0d1735321896
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=3d161da8-2542-4f2e-8db7-388573636340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:d6:72:56:5f:f6:40:bd:ad:2b:5a:0e:50:
                    c5:8f:01:5d:d0:f3:bc:68:db:0b:5f:2b:02:c6:b2:
                    56:d6:0c:c1:2d:a6:01:be:13:bb:b9:91:28:d1:3b:
                    6a:ae:0d:2f:02:15:ef:a5:6f:42:70:f0:3a:2e:8a:
                    00:9e:6b:3f:fb:e3:61:bd:6b:11:aa:f0:bd:d3:4f:
                    a3:71:e5:d5:f3:48:b9:4a:05:3b:34:ba:e8:40:e4:
                    86:31:ec:dd:24:a7:9b:51:a5:1a:cc:df:e4:ec:be:
                    3d:01:06:9d:9d:5f:a6:a3:4b:73:ec:5d:ab:72:76:
                    75:e3:5d:c1:35:c2:9d:7e:34:43:31:ba:68:c2:38:
                    b3:29:1b:ef:8a:77:57:88:78:ac:46:a4:0a:0a:3c:
                    21:6d:8f:fa:af:e3:95:ae:4c:b3:da:6f:f1:00:b9:
                    96:27:9c:d1:02:6d:52:3b:4c:cc:36:cc:bc:c7:0c:
                    10:8c:28:85:1e:6e:fc:fb:36:d5:67:eb:78:8f:22:
                    cc:e4:4c:4a:b8:fa:69:e5:46:e6:12:89:bd:74:57:
                    61:b4:b1:94:c3:75:a5:84:2a:05:ee:80:1a:b9:80:
                    57:43:42:ae:ba:51:5a:01:4b:22:5a:33:ca:8f:63:
                    dd:21:3c:52:a7:1a:4a:3b:9c:b8:c5:58:3b:6b:58:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C2:9F:57:8B:54:9C:42:BD:08:C6:E1:92:A5:0F:CD:48:88:3D:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/b9aae87e-4089-3272-971b-9dd25eb62515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl

            X509v3 Authority Key Identifier:
                keyid:F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:26:92:c6:88:4f:32:53:53:a1:f2:aa:da:c2:d4:20:5d:a8:
         18:a5:bc:0c:a4:df:ee:fa:cb:54:bc:30:d7:a1:8c:88:39:83:
         b9:d5:ae:b8:37:ce:1b:f0:d0:eb:2a:60:2b:30:75:c7:00:b6:
         cd:5f:3e:1c:c3:13:7c:2f:89:57:12:93:10:54:f3:ac:2b:3a:
         cc:ac:c1:94:ad:74:fe:54:26:5c:1b:74:63:2a:e8:ce:36:82:
         05:54:77:3b:e8:34:d9:8d:60:13:3a:23:a8:e3:a2:02:2d:b2:
         16:d4:27:05:20:55:04:9c:fc:c9:e4:08:2c:da:89:6b:14:1f:
         8c:aa:df:1d:5b:ad:aa:05:09:58:1c:c4:3e:50:a4:8c:2d:db:
         e7:ec:f4:11:49:69:3a:10:d3:cf:84:17:bf:5c:df:e2:21:7c:
         a9:cd:32:d9:c3:d2:fb:9b:8b:30:27:70:68:b7:67:ba:0c:6a:
         12:45:68:be:44:4f:c8:b1:c0:5f:5f:37:7a:ac:a9:10:ae:16:
         82:e2:96:ad:fb:ee:f7:82:3b:6b:0f:8e:d1:86:f9:f4:7d:8a:
         3d:54:93:0e:55:d5:03:5b:3c:44:28:af:27:c5:c2:4c:1f:29:
         c7:48:91:78:40:ca:01:8f:9d:66:df:be:02:11:96:29:be:c5:
         cd:82:5e:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC3+gKUBU5KzOIjwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRhNWJhNWQtYzcwNy00NzlhLTgyYjYtMGQxNzM1MzIx
ODk2MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
M2QxNjFkYTgtMjU0Mi00ZjJlLThkYjctMzg4NTczNjM2MzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz/WclZf9kC9rStaDlDFjwFd0PO8aNsLXysC
xrJW1gzBLaYBvhO7uZEo0Ttqrg0vAhXvpW9CcPA6LooAnms/++NhvWsRqvC900+j
ceXV80i5SgU7NLroQOSGMezdJKebUaUazN/k7L49AQadnV+mo0tz7F2rcnZ1413B
NcKdfjRDMbpowjizKRvvindXiHisRqQKCjwhbY/6r+OVrkyz2m/xALmWJ5zRAm1S
O0zMNsy8xwwQjCiFHm78+zbVZ+t4jyLM5ExKuPpp5UbmEom9dFdhtLGUw3WlhCoF
7oAauYBXQ0KuulFaAUsiWjPKj2PdITxSpxpKO5y4xVg7a1iITwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObCn1eLVJxCvQjG4ZKlD81IiD0GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNGE1
YmE1ZC1jNzA3LTQ3OWEtODJiNi0wZDE3MzUzMjE4OTYvYjlhYWU4N2UtNDA4OS0z
MjcyLTk3MWItOWRkMjVlYjYyNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTRhNWJhNWQtYzcwNy00NzlhLTgy
YjYtMGQxNzM1MzIxODk2L2E0YTViYTVkLWM3MDctNDc5YS04MmI2LTBkMTczNTMy
MTg5Ni5jcmwwHwYDVR0jBBgwFoAU+GYgYKjEaFyTb1Fl00Mwosnp6ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNGE1YmE1ZC1jNzA3LTQ3OWEtODJiNi0wZDE3
MzUzMjE4OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+J6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEmksaITzJTU6HyqtrC1CBdqBilvAyk3+76y1S8MNehjIg5g7nVrrg3
zhvw0OsqYCswdccAts1fPhzDE3wviVcSkxBU86wrOsyswZStdP5UJlwbdGMq6M42
ggVUdzvoNNmNYBM6I6jjogItshbUJwUgVQSc/MnkCCzaiWsUH4yq3x1braoFCVgc
xD5QpIwt2+fs9BFJaToQ08+EF79c3+IhfKnNMtnD0vubizAncGi3Z7oMahJFaL5E
T8ixwF9fN3qsqRCuFoLilq377veCO2sPjtGG+fR9ij1Ukw5V1QNbPEQoryfFwkwf
KcdIkXhAygGPnWbfvgIRlim+xc2CXkE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:33 2024 by rpki-client on console-fra.rpki-client.org