Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/27425216-be67-30e5-9322-17c3838b73ab.roa
File:                     27425216-be67-30e5-9322-17c3838b73ab.roa (raw, json)
Hash identifier:          Nrr3qiNrVn5r9zVOja4RrTRpBVyJVPOtNF2dhkc/ozc=
Subject key identifier:   40:8C:3D:58:E8:70:A2:E8:7D:EC:4B:B0:6B:32:8E:4F:9E:20:3B:5F
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F43285845CA8ACD91C3B38D04376D3080
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/27425216-be67-30e5-9322-17c3838b73ab.roa
Signing time:             Tue 07 May 2024 06:59:02 +0000
ROA not before:           Tue 07 May 2024 06:59:02 +0000
ROA not after:            Mon 05 Aug 2024 06:59:02 +0000
asID:                     11870
IP address blocks:        167.23.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ca:8a:cd:91:c3:b3:8d:04:37:6d:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: May  7 06:59:02 2024 GMT
            Not After : Aug  5 06:59:02 2024 GMT
        Subject: CN=942a1f15-fcc1-41c3-88a1-7e957428d4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:3d:31:12:97:3b:69:42:d6:4c:5b:da:32:
                    cb:5c:b7:77:da:5a:4e:6e:45:bb:c7:f4:6d:19:fc:
                    5e:4f:0a:e9:47:d7:6b:c8:dd:b3:d7:ce:bb:53:51:
                    e6:c8:bc:55:87:5a:52:70:d3:c2:6a:90:ba:1d:ae:
                    4c:96:e8:4f:9a:52:4d:df:13:d6:c3:86:c3:30:c8:
                    d6:a2:43:55:62:80:78:f1:af:d3:71:fc:1d:ee:8c:
                    dd:7c:28:c8:d4:af:73:17:d5:6c:04:5d:5e:9d:d7:
                    34:61:b7:31:55:d9:97:84:63:f6:97:7a:a2:97:7a:
                    2b:b7:d0:8f:16:7a:49:ea:fe:c0:6d:41:67:1e:52:
                    8e:a1:c1:b7:9c:a4:cb:fe:80:58:3f:90:ec:dd:7c:
                    d5:87:e0:01:e0:7d:31:bd:f0:8c:ac:0a:21:88:c5:
                    f4:72:08:ac:52:c6:e8:a9:b2:65:29:27:00:85:07:
                    91:b1:1d:30:35:00:f6:cb:6d:16:70:0c:a2:49:f9:
                    25:e8:03:fb:01:8f:db:62:80:c3:de:64:f2:6b:99:
                    f4:67:51:32:bc:74:5d:11:9a:23:ab:9b:78:58:9e:
                    4d:6a:c4:33:1a:80:9b:ac:4b:1a:23:be:10:bd:0b:
                    15:71:21:9d:c0:9e:99:51:86:3f:72:99:27:75:49:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8C:3D:58:E8:70:A2:E8:7D:EC:4B:B0:6B:32:8E:4F:9E:20:3B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/27425216-be67-30e5-9322-17c3838b73ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:fa:0d:62:57:c3:cf:01:52:ee:51:da:a4:c4:bf:78:67:
         85:9f:89:ce:10:83:89:75:f7:52:d6:86:13:dd:8b:59:d6:f3:
         6a:30:1c:1f:64:9a:b2:53:03:fd:6d:f3:35:13:60:21:17:bf:
         41:c3:08:1f:91:0c:a1:62:4c:04:8c:82:9d:e3:f7:23:18:4b:
         31:3d:06:ec:38:4a:cf:56:68:67:fc:dd:41:31:7c:38:4f:1b:
         6e:05:3f:ec:1d:f5:83:94:1e:e5:7e:5c:ac:1f:ed:87:fa:81:
         34:af:c1:94:d0:41:0e:d8:e0:69:03:35:4f:cd:23:a8:42:a3:
         02:63:92:6e:03:c6:41:4a:ce:e7:fc:d2:d5:1f:87:50:70:4c:
         96:44:f0:49:cc:1e:56:2b:dc:53:8b:fc:e4:1a:f0:7d:4f:66:
         ce:bb:05:d9:5c:21:f1:99:7f:a8:41:ae:bf:d1:8d:27:41:19:
         80:e9:a3:9d:77:26:99:bc:87:04:98:bd:f3:d0:49:79:12:ec:
         9e:a9:6e:b4:77:b8:54:49:b7:ae:45:2a:e6:f0:4c:e3:b8:6a:
         7e:f9:66:40:7c:55:1a:e9:9a:19:60:98:c6:d6:a3:60:f8:83:
         e0:fe:d2:d2:b7:24:85:e5:d6:28:85:b6:88:9b:dd:01:5b:fb:
         dd:66:db:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXKis2Rw7ONBDdtMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm
OGM0MB4XDTI0MDUwNzA2NTkwMloXDTI0MDgwNTA2NTkwMlowLzEtMCsGA1UEAxMk
OTQyYTFmMTUtZmNjMS00MWMzLTg4YTEtN2U5NTc0MjhkNGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRQ9MRKXO2lC1kxb2jLLXLd32lpObkW7x/Rt
GfxeTwrpR9dryN2z1867U1HmyLxVh1pScNPCapC6Ha5MluhPmlJN3xPWw4bDMMjW
okNVYoB48a/Tcfwd7ozdfCjI1K9zF9VsBF1endc0YbcxVdmXhGP2l3qil3ort9CP
FnpJ6v7AbUFnHlKOocG3nKTL/oBYP5Ds3XzVh+AB4H0xvfCMrAohiMX0cgisUsbo
qbJlKScAhQeRsR0wNQD2y20WcAyiSfkl6AP7AY/bYoDD3mTya5n0Z1EyvHRdEZoj
q5t4WJ5NasQzGoCbrEsaI74QvQsVcSGdwJ6ZUYY/cpkndUk5uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECMPVjocKLofexLsGsyjk+eIDtfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1
OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvMjc0MjUyMTYtYmU2Ny0z
MGU1LTkzMjItMTdjMzgzOGI3M2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5
NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz
ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw
YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxdZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKya+g1iV8PPAVLuUdqkxL94Z4Wfic4Qg4l191LWhhPdi1nW82owHB9k
mrJTA/1t8zUTYCEXv0HDCB+RDKFiTASMgp3j9yMYSzE9Buw4Ss9WaGf83UExfDhP
G24FP+wd9YOUHuV+XKwf7Yf6gTSvwZTQQQ7Y4GkDNU/NI6hCowJjkm4DxkFKzuf8
0tUfh1BwTJZE8EnMHlYr3FOL/OQa8H1PZs67BdlcIfGZf6hBrr/RjSdBGYDpo513
Jpm8hwSYvfPQSXkS7J6pbrR3uFRJt65FKubwTOO4an75ZkB8VRrpmhlgmMbWo2D4
g+D+0tK3JIXl1iiFtoib3QFb+91m26Q=
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:48:52 2024 by rpki-client on console-ams.rpki-client.org