Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/9b3bf823-9516-388f-b46f-d9d250001541.roa
File:                     9b3bf823-9516-388f-b46f-d9d250001541.roa (raw, json)
Hash identifier:          jqDwrHbeq6LtyRGxhXe6eWXGqHh+7isiydur3YKL4nU=
Subject key identifier:   7D:8B:DC:0E:10:E5:57:D2:8B:0B:FB:B1:66:15:DA:35:6E:BB:FD:8E
Certificate issuer:       /CN=e8c42b27-ff84-461c-86a9-f001dd639713
Certificate serial:       010D0C9F432858484C101BDE7DF21FF42A55CF50
Authority key identifier: EA:A3:EE:F6:98:43:43:D7:D2:28:CD:D6:27:14:52:6C:A9:42:92:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/9b3bf823-9516-388f-b46f-d9d250001541.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        23.147.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/e8c42b27-ff84-461c-86a9-f001dd639713.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/e8c42b27-ff84-461c-86a9-f001dd639713.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:1b:de:7d:f2:1f:f4:2a:55:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c42b27-ff84-461c-86a9-f001dd639713
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=5e92f27a-8441-4200-9d25-beec07e65040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c1:8f:93:bc:f2:23:07:08:62:e3:d4:95:d7:
                    e9:42:48:54:81:73:0f:e9:51:75:9f:b2:7c:95:28:
                    cc:ea:7f:c9:3f:42:b1:87:14:71:24:4f:4f:ba:65:
                    e0:6a:99:73:e6:f3:a5:1c:af:66:4c:9c:b3:a7:9d:
                    99:6e:eb:c7:f2:88:b4:db:27:76:ec:05:9d:0b:63:
                    06:c9:d9:47:af:fe:6a:d9:32:39:4a:6d:f8:36:ed:
                    41:c1:f8:1a:69:f2:bf:c3:10:76:67:c6:f1:63:39:
                    ee:b7:a8:59:ff:c4:13:7f:b3:80:6f:5f:f0:8d:7d:
                    70:4f:6b:f2:0f:a2:6d:13:0b:02:f3:bb:cf:ae:58:
                    b4:d5:1b:4d:82:74:d0:46:98:01:2f:e2:7c:34:80:
                    32:e7:fc:15:4c:32:e5:c6:df:0e:87:3e:79:62:bb:
                    63:66:80:4d:61:08:aa:29:ca:b4:12:ce:0e:59:ae:
                    d1:f6:4d:bd:db:da:de:de:0c:72:3e:48:0c:22:ea:
                    a0:cc:9a:02:b0:17:bd:56:92:85:f8:48:98:22:6f:
                    72:f8:e8:b2:2e:00:7f:7f:6b:7e:6a:b9:1e:e2:83:
                    92:b3:1e:d4:45:e8:3c:12:1c:55:0a:2c:de:cc:44:
                    a9:52:97:3c:25:e5:03:52:e0:c4:bf:8a:a8:3d:5b:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8B:DC:0E:10:E5:57:D2:8B:0B:FB:B1:66:15:DA:35:6E:BB:FD:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/9b3bf823-9516-388f-b46f-d9d250001541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713/e8c42b27-ff84-461c-86a9-f001dd639713.crl

            X509v3 Authority Key Identifier:
                keyid:EA:A3:EE:F6:98:43:43:D7:D2:28:CD:D6:27:14:52:6C:A9:42:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8c42b27-ff84-461c-86a9-f001dd639713.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:df:f5:4d:de:32:d2:79:3e:8e:e4:ea:d5:af:b7:c6:c7:ea:
         01:c0:b2:16:5e:12:39:cc:b3:7b:c4:40:af:3c:3e:b1:4c:56:
         05:12:a3:7b:fc:3f:2a:bf:b3:c3:e7:69:2e:d6:1a:11:fa:3d:
         19:5a:34:ad:e5:cf:89:0e:3c:82:a1:3e:df:a9:8c:03:08:bf:
         45:2e:2a:bd:71:68:53:15:07:13:e4:bc:75:69:d3:dc:8c:df:
         1e:d5:75:30:08:52:43:05:ac:62:f9:7a:0e:f0:90:55:fe:f5:
         cb:78:95:bb:4f:ac:25:43:13:a9:f4:ef:ca:78:c7:2c:16:35:
         5b:88:51:5d:21:27:f2:21:16:94:e5:5b:66:55:3a:f5:d3:54:
         7f:52:26:18:bb:9c:8f:6c:77:71:99:35:ff:6f:6e:0a:2d:30:
         58:75:ed:85:78:9d:81:38:9f:0d:eb:ac:04:6e:53:d6:58:60:
         18:84:d3:10:af:fb:29:56:14:84:89:07:a9:41:f6:71:a6:5e:
         a7:dd:f8:82:82:08:80:74:3c:07:08:be:05:86:25:36:7f:02:
         6d:23:95:e6:a2:f6:8f:96:3a:c2:b5:7e:60:82:2f:ac:a8:b5:
         19:b7:d8:3b:c9:43:7c:3e:b6:31:b8:f7:01:9c:9d:2d:7d:21:
         6a:4e:64:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBveffIf9CpVz1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThjNDJiMjctZmY4NC00NjFjLTg2YTktZjAwMWRkNjM5
NzEzMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NWU5MmYyN2EtODQ0MS00MjAwLTlkMjUtYmVlYzA3ZTY1MDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncGPk7zyIwcIYuPUldfpQkhUgXMP6VF1n7J8
lSjM6n/JP0KxhxRxJE9PumXgaplz5vOlHK9mTJyzp52ZbuvH8oi02yd27AWdC2MG
ydlHr/5q2TI5Sm34Nu1BwfgaafK/wxB2Z8bxYznut6hZ/8QTf7OAb1/wjX1wT2vy
D6JtEwsC87vPrli01RtNgnTQRpgBL+J8NIAy5/wVTDLlxt8Ohz55YrtjZoBNYQiq
Kcq0Es4OWa7R9k2929re3gxyPkgMIuqgzJoCsBe9VpKF+EiYIm9y+OiyLgB/f2t+
arke4oOSsx7UReg8EhxVCizezESpUpc8JeUDUuDEv4qoPVsp2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH2L3A4Q5VfSiwv7sWYV2jVuu/2OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOGM0
MmIyNy1mZjg0LTQ2MWMtODZhOS1mMDAxZGQ2Mzk3MTMvOWIzYmY4MjMtOTUxNi0z
ODhmLWI0NmYtZDlkMjUwMDAxNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZThjNDJiMjctZmY4NC00NjFjLTg2
YTktZjAwMWRkNjM5NzEzL2U4YzQyYjI3LWZmODQtNDYxYy04NmE5LWYwMDFkZDYz
OTcxMy5jcmwwHwYDVR0jBBgwFoAU6qPu9phDQ9fSKM3WJxRSbKlCkqQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOGM0MmIyNy1mZjg0LTQ2MWMtODZhOS1mMDAx
ZGQ2Mzk3MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5MwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/f9U3eMtJ5Po7k6tWvt8bH6gHAshZeEjnMs3vEQK88PrFMVgUSo3v8
Pyq/s8PnaS7WGhH6PRlaNK3lz4kOPIKhPt+pjAMIv0UuKr1xaFMVBxPkvHVp09yM
3x7VdTAIUkMFrGL5eg7wkFX+9ct4lbtPrCVDE6n078p4xywWNVuIUV0hJ/IhFpTl
W2ZVOvXTVH9SJhi7nI9sd3GZNf9vbgotMFh17YV4nYE4nw3rrARuU9ZYYBiE0xCv
+ylWFISJB6lB9nGmXqfd+IKCCIB0PAcIvgWGJTZ/Am0jleai9o+WOsK1fmCCL6yo
tRm32DvJQ3w+tjG49wGcnS19IWpOZKQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:33 2025 by rpki-client