Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa
File:                     bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa (raw, json)
Hash identifier:          zq0ZoR2ipfH8FdTO+9KkB1DVSIzGqJ881IGw8PxzXAk=
Subject key identifier:   1F:49:38:3A:2A:1C:8B:A2:0C:00:C4:D2:78:27:BE:51:6F:3C:FF:D7
Certificate issuer:       /CN=687d1923-22fe-4744-9984-8ca387a57cf3
Certificate serial:       010D0C9F43285844D01A703A55158472E5CD2D80
Authority key identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa
Signing time:             Wed 07 Feb 2024 14:00:29 +0000
ROA not before:           Wed 07 Feb 2024 14:00:29 +0000
ROA not after:            Tue 07 May 2024 13:00:29 +0000
asID:                     400495
IP address blocks:        23.133.104.0/24 maxlen: 24
                          2602:fbae::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d0:1a:70:3a:55:15:84:72:e5:cd:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687d1923-22fe-4744-9984-8ca387a57cf3
        Validity
            Not Before: Feb  7 14:00:29 2024 GMT
            Not After : May  7 13:00:29 2024 GMT
        Subject: CN=3bfc4598-8cb7-4e52-972c-9b29c20e2055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:95:56:9d:62:90:87:48:0a:32:64:bd:1b:
                    6a:4c:b7:75:44:7c:db:e0:64:1b:fb:66:02:53:6b:
                    b6:1f:12:43:92:21:f7:f4:b5:a1:66:57:12:2f:cc:
                    c0:ec:02:5c:7f:22:3c:0c:0e:0f:a8:eb:7f:a3:79:
                    ca:58:fd:35:5c:46:06:03:17:79:53:46:a8:7f:55:
                    cc:68:bf:38:71:18:41:75:3f:02:90:27:55:8a:5f:
                    da:c1:9e:2a:50:73:d8:99:a8:ad:29:13:f6:f3:62:
                    1f:b1:73:b9:3a:fd:21:5c:6b:ed:62:31:03:0c:22:
                    19:51:1f:c8:37:c1:a7:95:53:8e:27:9d:a8:af:af:
                    f2:50:48:f9:67:41:bd:73:30:16:0b:2a:6b:6e:c7:
                    66:24:05:c3:95:83:a5:b9:e6:ac:ec:03:77:cc:72:
                    86:f6:6f:c8:d1:a0:d6:c8:ac:35:55:56:6f:ad:c6:
                    b3:9d:ff:8c:f6:44:ab:78:d4:ec:77:fc:92:10:04:
                    66:4f:14:19:b4:8a:12:ef:b1:69:f3:2a:7e:97:33:
                    88:4a:42:ec:e0:29:10:83:79:b7:f0:1f:c6:59:7e:
                    48:65:fd:81:51:91:30:75:b7:47:11:ec:c7:b1:00:
                    34:af:74:77:2e:72:5e:1a:5e:7d:bc:92:9e:9a:ae:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:49:38:3A:2A:1C:8B:A2:0C:00:C4:D2:78:27:BE:51:6F:3C:FF:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl

            X509v3 Authority Key Identifier:
                keyid:BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.104.0/24
                IPv6:
                  2602:fbae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:99:e5:d9:09:d0:97:b3:11:14:c5:14:4f:05:f7:84:c4:89:
         6b:99:36:10:a8:91:43:4b:46:e8:b4:c6:b9:34:9c:40:9c:2a:
         10:b5:d0:8b:c1:58:1b:74:2d:3d:8d:d1:25:3b:18:fe:a2:b3:
         2a:20:75:1a:0a:76:5b:2c:26:79:fa:c7:bf:2d:0c:a1:8c:b0:
         37:93:82:1e:4b:25:d0:3e:f9:1c:b6:fb:db:f9:2b:fa:af:9c:
         e2:ca:37:48:78:df:e3:9e:a7:20:3d:07:6c:43:f4:e0:9a:5e:
         e2:15:a1:52:4a:2d:ee:9d:4e:5f:76:57:cc:ff:26:9c:c2:83:
         8c:cb:65:67:00:ad:57:e4:35:17:bb:b9:1d:a6:c6:f4:27:f8:
         80:a4:f4:bc:dc:35:bd:de:a1:4a:be:e2:eb:94:16:b6:70:85:
         8c:54:b0:8b:81:10:56:0b:21:e9:ed:eb:f4:72:eb:2b:f6:7b:
         bf:13:1d:e9:1e:3c:c8:ac:db:cd:7c:bd:68:9b:21:5d:63:e9:
         2e:ce:6a:8f:af:e1:87:8a:50:20:8a:39:26:0d:a3:90:ce:88:
         74:12:0e:de:3b:e6:52:da:aa:b4:40:72:6b:d8:0e:7b:0b:cb:
         2b:b4:33:4b:f6:f7:fe:56:94:de:e3:24:4c:3a:f3:fc:5c:c0:
         e4:31:80:1a
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWETQGnA6VRWEcuXNLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3ZDE5MjMtMjJmZS00NzQ0LTk5ODQtOGNhMzg3YTU3
Y2YzMB4XDTI0MDIwNzE0MDAyOVoXDTI0MDUwNzEzMDAyOVowLzEtMCsGA1UEAxMk
M2JmYzQ1OTgtOGNiNy00ZTUyLTk3MmMtOWIyOWMyMGUyMDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl2VVp1ikIdICjJkvRtqTLd1RHzb4GQb+2YC
U2u2HxJDkiH39LWhZlcSL8zA7AJcfyI8DA4PqOt/o3nKWP01XEYGAxd5U0aof1XM
aL84cRhBdT8CkCdVil/awZ4qUHPYmaitKRP282IfsXO5Ov0hXGvtYjEDDCIZUR/I
N8GnlVOOJ52or6/yUEj5Z0G9czAWCyprbsdmJAXDlYOlueas7AN3zHKG9m/I0aDW
yKw1VVZvrcaznf+M9kSreNTsd/ySEARmTxQZtIoS77Fp8yp+lzOISkLs4CkQg3m3
8B/GWX5IZf2BUZEwdbdHEezHsQA0r3R3LnJeGl59vJKemq7NdQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFB9JODoqHIuiDADE0ngnvlFvPP/XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODdk
MTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2EzODdhNTdjZjMvYmY2MTgzY2YtMTdjMi0z
YTYzLWI5ZDgtYThjNGU2OWY0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg3ZDE5MjMtMjJmZS00NzQ0LTk5
ODQtOGNhMzg3YTU3Y2YzLzY4N2QxOTIzLTIyZmUtNDc0NC05OTg0LThjYTM4N2E1
N2NmMy5jcmwwHwYDVR0jBBgwFoAUuhD3Zvx04hITn+zVuCQ4jiO2RpEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82ODdkMTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2Ez
ODdhNTdjZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VoMA4E
AgACMAgDBgAmAvuuADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAmeXZCdCXsxEUxRRPBfeExIlrmTYQqJFD
S0botMa5NJxAnCoQtdCLwVgbdC09jdElOxj+orMqIHUaCnZbLCZ5+se/LQyhjLA3
k4IeSyXQPvkctvvb+Sv6r5ziyjdIeN/jnqcgPQdsQ/Tgml7iFaFSSi3unU5fdlfM
/yacwoOMy2VnAK1X5DUXu7kdpsb0J/iApPS83DW93qFKvuLrlBa2cIWMVLCLgRBW
CyHp7ev0cusr9nu/Ex3pHjzIrNvNfL1omyFdY+kuzmqPr+GHilAgijkmDaOQzoh0
Eg7eO+ZS2qq0QHJr2A57C8srtDNL9vf+VpTe4yRMOvP8XMDkMYAa
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:28:13 2024 by rpki-client on console-fra.rpki-client.org