Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/77ef46b3-b307-3643-91ed-99067bdd1762.roa
File:                     77ef46b3-b307-3643-91ed-99067bdd1762.roa (raw, json)
Hash identifier:          g5/AeHSh7Aiz46EvZ9qoEIkW7hXy82jx7ndxzPfD2Kg=
Subject key identifier:   EC:A5:46:2D:E0:61:FA:2B:37:E8:55:5E:27:71:1C:C2:69:87:BB:8E
Certificate issuer:       /CN=29dba61f-e904-40c2-8cfb-7736efc12d29
Certificate serial:       010D0C9F43285845B4E8D2308DBF97A47AC85160
Authority key identifier: 64:53:F2:1D:3A:14:91:76:15:5F:A7:79:44:3D:F0:6F:BA:7E:63:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/77ef46b3-b307-3643-91ed-99067bdd1762.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     40278
IP address blocks:        23.184.128.0/24 maxlen: 24
                          2602:fed7::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d2:30:8d:bf:97:a4:7a:c8:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29dba61f-e904-40c2-8cfb-7736efc12d29
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=23cdfaac-3e92-4e93-a34c-27c5c52399c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9b:f2:15:b5:f6:bb:92:e4:a4:39:fa:24:c9:
                    b9:3c:0d:66:3d:a3:f3:93:18:19:c1:c1:dc:0c:fc:
                    ff:52:ae:4e:70:8e:69:c9:ac:b3:8c:f4:04:a9:b3:
                    5f:b2:4f:70:50:78:2c:82:65:38:3b:33:6b:4e:f0:
                    6f:1a:94:02:15:80:8b:43:31:f3:93:64:e3:d7:21:
                    ff:a2:ff:09:c2:09:c9:8a:17:52:16:f3:f4:c0:4a:
                    07:c9:f8:8c:c4:34:3f:85:71:b1:0d:b5:f5:6c:1a:
                    6e:10:c0:85:97:ff:c3:02:30:2f:d0:9b:5b:62:07:
                    ff:80:ee:ed:c6:15:a2:6d:42:5b:87:6b:02:ee:7c:
                    a7:60:5f:4d:92:56:9a:44:87:05:2c:5b:04:f0:90:
                    e7:49:b8:9a:67:1f:6f:0c:3d:8b:8e:c3:2b:b2:8f:
                    c9:be:f7:ea:67:3f:7d:dd:a2:75:8d:23:bf:5e:6c:
                    ce:f5:f7:1e:dc:cf:01:d4:68:69:21:85:0e:24:14:
                    4f:3b:0b:90:45:4d:5a:fb:ca:fc:11:16:7d:91:a9:
                    4c:2f:1e:3e:12:2f:45:72:96:81:87:a7:2b:65:e3:
                    2b:24:d4:3b:3c:31:a9:c4:fe:26:86:7d:dd:eb:2e:
                    db:d7:e0:09:22:a0:4d:80:66:0e:d7:d3:d7:b3:77:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A5:46:2D:E0:61:FA:2B:37:E8:55:5E:27:71:1C:C2:69:87:BB:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/77ef46b3-b307-3643-91ed-99067bdd1762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29/29dba61f-e904-40c2-8cfb-7736efc12d29.crl

            X509v3 Authority Key Identifier:
                keyid:64:53:F2:1D:3A:14:91:76:15:5F:A7:79:44:3D:F0:6F:BA:7E:63:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29dba61f-e904-40c2-8cfb-7736efc12d29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.128.0/24
                IPv6:
                  2602:fed7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f2:f6:b7:c7:c6:77:6c:ce:14:16:af:06:0a:64:a3:36:93:
         fd:26:6b:0f:74:5d:94:6f:13:e4:09:db:b2:d7:56:94:82:09:
         78:69:f0:6b:cb:e2:8e:27:c9:72:be:d8:e5:43:1b:93:a6:1a:
         f8:e8:d5:96:03:27:c2:83:62:37:e7:f8:ac:fa:c8:bc:30:df:
         d0:08:5d:db:4c:9b:09:0e:31:37:fb:ad:5b:31:24:ca:3a:18:
         65:01:a9:10:99:8c:93:4a:4b:54:03:d4:4b:d4:ff:25:e6:b4:
         86:74:d2:6b:7a:8d:50:d0:f6:29:00:03:e5:1f:e6:5e:b3:f5:
         8d:eb:5d:0f:36:68:00:46:e6:21:b2:31:ce:18:a4:f2:f7:97:
         0d:b3:44:83:d6:7e:ac:c6:5c:b5:bc:a6:04:2f:78:3f:27:13:
         41:00:99:53:69:b7:4f:d9:30:9c:d6:4c:60:b5:71:5f:7a:68:
         ce:ff:fc:86:41:f6:ed:22:31:b1:d1:4b:7f:d0:3e:8d:67:eb:
         a0:e1:30:42:ba:8a:4e:24:39:6b:c5:73:a5:eb:01:2b:11:10:
         33:a4:cd:1e:8b:eb:25:f7:ec:f9:2b:03:e1:c6:4e:3f:66:2d:
         06:18:db:15:ea:d7:ce:8f:a5:12:b8:cc:10:04:76:89:55:d4:
         a0:d5:ef:3d
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEW06NIwjb+XpHrIUWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlkYmE2MWYtZTkwNC00MGMyLThjZmItNzczNmVmYzEy
ZDI5MB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
MjNjZGZhYWMtM2U5Mi00ZTkzLWEzNGMtMjdjNWM1MjM5OWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZvyFbX2u5LkpDn6JMm5PA1mPaPzkxgZwcHc
DPz/Uq5OcI5pyayzjPQEqbNfsk9wUHgsgmU4OzNrTvBvGpQCFYCLQzHzk2Tj1yH/
ov8JwgnJihdSFvP0wEoHyfiMxDQ/hXGxDbX1bBpuEMCFl//DAjAv0JtbYgf/gO7t
xhWibUJbh2sC7nynYF9NklaaRIcFLFsE8JDnSbiaZx9vDD2LjsMrso/JvvfqZz99
3aJ1jSO/XmzO9fce3M8B1GhpIYUOJBRPOwuQRU1a+8r8ERZ9kalMLx4+Ei9FcpaB
h6crZeMrJNQ7PDGpxP4mhn3d6y7b1+AJIqBNgGYO19PXs3e5dwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFOylRi3gYforN+hVXidxHMJph7uOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yOWRi
YTYxZi1lOTA0LTQwYzItOGNmYi03NzM2ZWZjMTJkMjkvNzdlZjQ2YjMtYjMwNy0z
NjQzLTkxZWQtOTkwNjdiZGQxNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjlkYmE2MWYtZTkwNC00MGMyLThj
ZmItNzczNmVmYzEyZDI5LzI5ZGJhNjFmLWU5MDQtNDBjMi04Y2ZiLTc3MzZlZmMx
MmQyOS5jcmwwHwYDVR0jBBgwFoAUZFPyHToUkXYVX6d5RD3wb7p+YxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yOWRiYTYxZi1lOTA0LTQwYzItOGNmYi03NzM2
ZWZjMTJkMjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7iAMA4E
AgACMAgDBgQmAv7XADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA98va3x8Z3bM4UFq8GCmSjNpP9JmsPdF2U
bxPkCduy11aUggl4afBry+KOJ8lyvtjlQxuTphr46NWWAyfCg2I35/is+si8MN/Q
CF3bTJsJDjE3+61bMSTKOhhlAakQmYyTSktUA9RL1P8l5rSGdNJreo1Q0PYpAAPl
H+Zes/WN610PNmgARuYhsjHOGKTy95cNs0SD1n6sxly1vKYEL3g/JxNBAJlTabdP
2TCc1kxgtXFfemjO//yGQfbtIjGx0Ut/0D6NZ+ug4TBCuopOJDlrxXOl6wErERAz
pM0ei+sl9+z5KwPhxk4/Zi0GGNsV6tfOj6USuMwQBHaJVdSg1e89
-----END CERTIFICATE-----
Generated at Sat May 18 01:54:24 2024 by rpki-client on console-ams.rpki-client.org