Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa
File:                     ab8aed72-03d9-3336-891c-beaf500c0618.roa (raw, json)
Hash identifier:          wJW/PtX/xUUrSZ3pZSspiH7X5LqVxTQzQZfGhziZXrU=
Subject key identifier:   39:70:3D:B6:C6:6E:94:39:F6:07:C1:FD:4B:1D:97:5D:6C:13:C9:1A
Certificate issuer:       /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46
Certificate serial:       010D0C9F4328584765A0E769547B88F05E8B7580
Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     32524
IP address blocks:        72.21.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:e7:69:54:7b:88:f0:5e:8b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=08cf9718-c3fb-420b-82db-90dca8e9d4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:99:2a:e9:b4:c0:9e:f9:33:6c:7b:2e:d9:5a:
                    c8:32:36:ce:76:eb:bd:59:15:c8:01:e6:f9:50:46:
                    ff:aa:83:d7:54:30:86:33:aa:48:d7:21:b3:6b:0e:
                    65:23:cd:5b:04:c7:d9:e8:83:d9:fd:7d:1b:36:96:
                    e2:fc:1e:c3:38:71:60:ec:20:63:bf:8f:63:bc:b6:
                    57:75:6a:63:5f:b3:3b:e3:8e:d1:4e:e1:9a:73:13:
                    c5:16:60:50:07:83:61:32:65:88:5f:cd:ee:a9:78:
                    e8:13:77:87:59:31:b9:8a:05:3d:72:06:c0:df:45:
                    df:ce:29:35:c2:0c:77:3a:dc:b8:5e:d4:0d:87:e9:
                    11:fd:39:9b:88:90:37:c7:52:fe:6f:be:f4:d0:71:
                    3d:1c:38:2a:69:d4:13:e7:2e:70:d0:c6:9f:1e:67:
                    8e:cd:ab:b7:15:79:80:32:7b:0b:e8:e1:a3:57:9a:
                    4b:db:ae:3c:e7:1e:2d:c1:ee:19:5f:63:86:f0:95:
                    b2:2f:da:6e:19:d5:ca:b0:62:97:77:b4:fb:19:ce:
                    0a:d5:55:a0:86:d0:36:cb:45:ac:7b:17:91:ca:72:
                    46:b7:8c:9c:47:04:3d:51:4b:56:98:22:de:3f:e2:
                    d7:4f:bc:61:f4:ce:3b:59:f5:2b:c5:2f:b8:68:d5:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:70:3D:B6:C6:6E:94:39:F6:07:C1:FD:4B:1D:97:5D:6C:13:C9:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl

            X509v3 Authority Key Identifier:
                keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:6f:ff:76:19:38:e4:63:ab:97:11:82:2f:33:7e:e2:66:
         54:e3:af:7c:f9:c2:87:34:5f:0a:29:fd:36:52:6c:8d:ea:46:
         96:db:57:6a:08:55:d5:5c:ae:53:94:24:b1:b9:c3:f6:08:3e:
         92:97:9e:76:d5:3d:6b:ef:86:4a:83:37:b8:57:74:91:62:63:
         b6:df:eb:1b:0b:dc:eb:a4:56:de:64:b3:c5:0b:66:47:9e:7d:
         4c:45:c1:f1:6b:38:1c:14:4d:5e:70:d1:ea:62:2d:12:3a:ce:
         25:7e:06:cc:3d:5f:2e:65:61:30:d1:a1:c3:ed:7b:3b:2f:b5:
         e5:69:21:f4:20:8d:14:42:4c:f5:3e:48:4e:c2:94:18:ad:f5:
         ae:b9:be:d8:11:d2:ec:d8:90:de:8d:9c:1a:00:3f:b7:44:88:
         fe:1f:77:41:04:28:27:f8:fd:a7:df:86:ad:25:46:cf:06:0f:
         eb:c1:ed:e7:e0:d2:9e:0b:79:f9:99:79:a3:81:09:59:3e:e5:
         07:44:a4:cf:41:74:4c:98:2a:0c:f4:d9:c5:c2:d7:a2:2a:18:
         d6:32:92:7d:a0:b2:47:85:9f:65:81:4e:55:2e:dc:77:d2:be:
         71:74:ee:34:ec:46:d3:88:b3:fc:e9:73:5d:fa:be:eb:7b:5d:
         a8:5e:1b:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloOdpVHuI8F6LdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk
YTQ2MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk
MDhjZjk3MTgtYzNmYi00MjBiLTgyZGItOTBkY2E4ZTlkNGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85kq6bTAnvkzbHsu2VrIMjbOduu9WRXIAeb5
UEb/qoPXVDCGM6pI1yGzaw5lI81bBMfZ6IPZ/X0bNpbi/B7DOHFg7CBjv49jvLZX
dWpjX7M7447RTuGacxPFFmBQB4NhMmWIX83uqXjoE3eHWTG5igU9cgbA30Xfzik1
wgx3Oty4XtQNh+kR/TmbiJA3x1L+b7700HE9HDgqadQT5y5w0MafHmeOzau3FXmA
MnsL6OGjV5pL26485x4twe4ZX2OG8JWyL9puGdXKsGKXd7T7Gc4K1VWghtA2y0Ws
exeRynJGt4ycRwQ9UUtWmCLeP+LXT7xh9M47WfUrxS+4aNUw4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlwPbbGbpQ59gfB/Usdl11sE8kaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz
YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvYWI4YWVkNzItMDNkOS0z
MzM2LTg5MWMtYmVhZjUwMGMwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4
NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx
ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi
MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOdb/92GTjkY6uXEYIvM37iZlTjr3z5woc0Xwop/TZSbI3qRpbbV2oI
VdVcrlOUJLG5w/YIPpKXnnbVPWvvhkqDN7hXdJFiY7bf6xsL3OukVt5ks8ULZkee
fUxFwfFrOBwUTV5w0epiLRI6ziV+Bsw9Xy5lYTDRocPtezsvteVpIfQgjRRCTPU+
SE7ClBit9a65vtgR0uzYkN6NnBoAP7dEiP4fd0EEKCf4/affhq0lRs8GD+vB7efg
0p4LefmZeaOBCVk+5QdEpM9BdEyYKgz02cXC16IqGNYykn2gskeFn2WBTlUu3HfS
vnF07jTsRtOIs/zpc136vut7XaheG8g=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:05 2024 by rpki-client on console-ams.rpki-client.org