Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cf3f77c9-b2fd-3d47-8e65-ed3f855ab4f5.roa
File:                     cf3f77c9-b2fd-3d47-8e65-ed3f855ab4f5.roa (raw, json)
Hash identifier:          23JxMgXYQpDDUGwa75D+WhETVs+gonqaq7HejcwK2Bw=
Subject key identifier:   2C:D3:1C:3F:A5:00:58:54:D9:C7:D4:D5:5A:1C:44:67:00:DD:32:5A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847EFEF937A51390CF72587E180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cf3f77c9-b2fd-3d47-8e65-ed3f855ab4f5.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     44477
IP address blocks:        23.27.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:93:7a:51:39:0c:f7:25:87:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=f2ee40be-8c69-4668-b02e-719532337bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:d1:f6:6c:67:8d:ea:13:44:ce:15:f2:df:
                    2b:43:1a:31:a1:e2:6e:de:e7:b1:12:f4:3c:16:05:
                    f4:84:8a:23:ba:96:b9:8a:4c:23:4e:f4:f1:0e:9b:
                    58:19:51:ea:1e:3d:ee:38:89:3f:ba:02:7e:30:04:
                    a1:47:21:d5:88:5c:36:af:d1:b0:27:4b:cd:d5:cf:
                    94:07:a5:dc:20:e9:30:c9:30:0b:e5:88:cc:5c:6e:
                    dc:67:60:75:79:c5:5f:ea:65:9b:9a:11:7c:e4:bd:
                    69:06:c6:d8:01:1e:5f:b6:04:40:7a:17:37:b3:32:
                    7a:0d:ec:72:e2:36:99:ab:ce:4b:af:22:0b:43:11:
                    ff:2e:36:3d:18:d3:f9:42:d6:f1:7d:e7:b4:f2:47:
                    b1:38:a6:45:f0:07:0c:09:91:c5:41:e8:ce:09:43:
                    03:ae:ee:a6:18:08:0b:12:ce:f0:31:b1:13:76:81:
                    9c:81:08:e2:1f:2d:cd:ea:65:7d:52:21:cf:7f:26:
                    2c:95:83:42:32:e1:01:78:db:6e:b1:40:b1:64:ae:
                    6d:a6:90:22:b8:b2:61:c8:f7:8a:35:f7:16:9e:7e:
                    3c:31:13:60:c0:35:37:2b:99:54:a7:39:57:a4:83:
                    60:5a:77:93:07:59:bc:18:3c:3f:fa:74:b0:27:e8:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D3:1C:3F:A5:00:58:54:D9:C7:D4:D5:5A:1C:44:67:00:DD:32:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cf3f77c9-b2fd-3d47-8e65-ed3f855ab4f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:8e:e7:d1:4d:a9:0e:9c:1e:81:77:8e:f0:21:35:48:b1:
         62:c2:2c:ce:2b:8c:04:b8:5b:d5:89:f7:c0:91:a7:58:31:4d:
         e3:40:bc:76:47:e2:79:48:2f:8f:a0:bf:eb:22:2e:af:3b:68:
         3f:65:1b:0f:2f:ff:bc:27:88:a7:e0:28:a2:20:c7:9a:3a:a4:
         8f:87:a7:f9:d9:21:4d:f2:c1:9c:4c:68:c8:8e:44:c2:21:af:
         55:d6:58:27:ef:d7:5e:ab:69:c8:0b:34:25:7c:28:83:5e:a9:
         43:9f:81:5e:4c:61:01:94:58:e0:fc:72:bc:b3:3e:6d:a9:e3:
         24:17:d1:c0:1f:cc:8a:ae:f4:4d:1b:2e:fe:80:05:9a:89:4c:
         7d:8d:16:ce:fb:d7:bd:de:58:48:96:e0:3f:c2:c2:ff:d5:6d:
         64:1d:c3:a3:ca:85:aa:83:50:c5:6a:7e:5a:85:0f:d1:cd:1e:
         65:fb:e3:34:0d:66:cc:d1:57:27:36:0f:ca:05:b1:6d:4d:ed:
         47:c7:3e:b5:bb:8c:e7:b4:f9:4d:c7:e2:00:fb:7a:4f:a6:fa:
         eb:18:9d:4b:71:bc:8b:c4:d3:e2:29:d3:72:00:e5:2f:b6:bd:
         60:1e:cd:90:35:4f:f1:34:d2:ba:4f:45:21:9c:4b:c7:6e:87:
         d2:cd:34:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv75N6UTkM9yWH4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk
ZjJlZTQwYmUtOGM2OS00NjY4LWIwMmUtNzE5NTMyMzM3YmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdbR9mxnjeoTRM4V8t8rQxoxoeJu3uexEvQ8
FgX0hIojupa5ikwjTvTxDptYGVHqHj3uOIk/ugJ+MAShRyHViFw2r9GwJ0vN1c+U
B6XcIOkwyTAL5YjMXG7cZ2B1ecVf6mWbmhF85L1pBsbYAR5ftgRAehc3szJ6Dexy
4jaZq85LryILQxH/LjY9GNP5Qtbxfee08kexOKZF8AcMCZHFQejOCUMDru6mGAgL
Es7wMbETdoGcgQjiHy3N6mV9UiHPfyYslYNCMuEBeNtusUCxZK5tppAiuLJhyPeK
NfcWnn48MRNgwDU3K5lUpzlXpINgWneTB1m8GDw/+nSwJ+g3rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzTHD+lAFhU2cfU1VocRGcA3TJaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2YzZjc3YzktYjJmZC0z
ZDQ3LThlNjUtZWQzZjg1NWFiNGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxveMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5QjufRTakOnB6Bd47wITVIsWLCLM4rjAS4W9WJ98CRp1gxTeNAvHZH
4nlIL4+gv+siLq87aD9lGw8v/7wniKfgKKIgx5o6pI+Hp/nZIU3ywZxMaMiORMIh
r1XWWCfv116racgLNCV8KINeqUOfgV5MYQGUWOD8cryzPm2p4yQX0cAfzIqu9E0b
Lv6ABZqJTH2NFs77173eWEiW4D/Cwv/VbWQdw6PKhaqDUMVqflqFD9HNHmX74zQN
ZszRVyc2D8oFsW1N7UfHPrW7jOe0+U3H4gD7ek+m+usYnUtxvIvE0+Ip03IA5S+2
vWAezZA1T/E00rpPRSGcS8duh9LNNEE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:38 2024 by rpki-client on console-ams.rpki-client.org