Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa
File:                     86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa (raw, json)
Hash identifier:          5aM+frnkihLalSXbDJfWHkfTma9/CzKVtwN0SdAXRRw=
Subject key identifier:   70:F8:31:4D:9F:A8:73:2A:A3:56:10:80:5F:46:75:08:82:63:91:36
Certificate issuer:       /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0
Certificate serial:       010D0C9F43285847C34483516B128975DFF78700
Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     396423
IP address blocks:        23.132.8.0/24 maxlen: 24
                          198.62.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:83:51:6b:12:89:75:df:f7:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=9d73237d-0fe1-4ea7-8854-274e701df907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:b0:66:7b:21:94:5c:8c:79:19:71:63:e6:
                    59:29:d2:c6:ee:85:b8:e4:61:2a:74:e1:8e:77:02:
                    45:8f:5e:d2:09:b2:0c:ec:0b:19:4f:44:67:9a:27:
                    ef:fe:f9:ff:28:68:2d:65:1b:0f:26:f6:3e:10:94:
                    30:0c:c1:98:c4:50:da:48:6b:b6:a6:72:38:19:7c:
                    fe:04:1b:b1:1e:d3:c5:fe:75:c3:6f:a0:f3:3d:c5:
                    a3:36:da:f6:5a:a6:50:a9:fc:f4:64:d7:dc:f2:3e:
                    0e:d1:6d:53:2d:f8:2c:18:e9:b3:4b:1c:6e:a4:60:
                    af:c1:29:0b:ab:28:6c:68:6c:0a:9b:3e:eb:ee:cb:
                    14:c7:7d:e2:18:ca:d8:84:45:ff:bc:68:ff:e1:d6:
                    47:78:47:8b:21:af:ef:3c:bf:11:0c:b3:d4:4b:c1:
                    ba:f3:ab:c5:80:32:6c:87:aa:bd:90:ff:fe:f0:e0:
                    41:2c:11:79:3d:6b:67:8b:fa:e5:f7:27:d8:6e:26:
                    de:18:c7:69:bc:51:b4:1a:15:b2:c0:ef:ea:92:0b:
                    13:a6:27:c5:2f:45:9f:7d:b6:6d:1d:6a:03:c9:06:
                    9a:79:2a:98:93:10:a3:42:81:9d:81:64:3b:65:f3:
                    1d:29:e1:36:c4:38:ec:59:be:c9:3a:f7:4a:93:3a:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F8:31:4D:9F:A8:73:2A:A3:56:10:80:5F:46:75:08:82:63:91:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl

            X509v3 Authority Key Identifier:
                keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.8.0/24
                  198.62.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:37:62:f1:de:7a:13:f0:d7:b9:b8:de:e2:fd:be:fa:29:3f:
         06:57:2b:1f:c1:4f:c2:93:9e:9f:15:5c:76:8c:ea:42:8c:ce:
         b9:7c:b2:15:0c:df:81:8a:4f:bd:17:c4:5c:04:16:3b:87:0a:
         04:6d:53:c8:59:f9:43:c1:e9:6b:d7:61:2d:6b:3d:42:0d:f8:
         12:60:dd:64:ed:3b:4f:6b:bd:4d:26:54:c6:cc:f5:2a:56:ed:
         02:37:13:ea:4b:14:6e:17:5f:5a:93:17:59:53:35:5f:5a:64:
         6f:53:31:ce:84:f8:9f:c0:cd:94:61:f9:a9:b9:bc:4d:f2:ea:
         f6:5c:8f:06:1a:ee:ca:d7:18:4f:f5:44:70:a2:3e:82:96:e6:
         e8:63:11:5a:30:d5:76:7c:a0:58:d1:b4:7a:ee:70:03:52:41:
         09:cc:e7:eb:2d:ec:3a:10:e9:78:56:45:64:04:9e:02:50:37:
         cc:a6:8a:ef:db:b3:60:f5:44:e4:a5:a3:c0:b7:f6:6f:bb:15:
         90:10:2f:db:a8:04:5e:25:1b:81:0e:f8:67:4f:b2:30:b4:4c:
         11:f0:0b:40:c2:92:79:a1:52:3a:df:b4:35:03:9f:ce:75:10:
         d5:3e:57:63:c9:60:8f:5a:4d:31:14:06:8c:8a:dc:a2:6e:21:
         f8:5e:81:15
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEfDRINRaxKJdd/3hwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0
NmEwMB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk
OWQ3MzIzN2QtMGZlMS00ZWE3LTg4NTQtMjc0ZTcwMWRmOTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpuwZnshlFyMeRlxY+ZZKdLG7oW45GEqdOGO
dwJFj17SCbIM7AsZT0Rnmifv/vn/KGgtZRsPJvY+EJQwDMGYxFDaSGu2pnI4GXz+
BBuxHtPF/nXDb6DzPcWjNtr2WqZQqfz0ZNfc8j4O0W1TLfgsGOmzSxxupGCvwSkL
qyhsaGwKmz7r7ssUx33iGMrYhEX/vGj/4dZHeEeLIa/vPL8RDLPUS8G686vFgDJs
h6q9kP/+8OBBLBF5PWtni/rl9yfYbibeGMdpvFG0GhWywO/qkgsTpifFL0WffbZt
HWoDyQaaeSqYkxCjQoGdgWQ7ZfMdKeE2xDjsWb7JOvdKkzqolwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHD4MU2fqHMqo1YQgF9GdQiCY5E2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3
ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvODZkOWM1NTAtZWU1Ny0z
ZWE1LTg5ZTMtYmNiMDA3ZjY2NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1
YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm
NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi
MDhiZjQ2YTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4QIAwQA
xj6IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADI3YvHeehPw17m43uL9vvopPwZXKx/BT8KTnp8VXHaM6kKM
zrl8shUM34GKT70XxFwEFjuHCgRtU8hZ+UPB6WvXYS1rPUIN+BJg3WTtO09rvU0m
VMbM9SpW7QI3E+pLFG4XX1qTF1lTNV9aZG9TMc6E+J/AzZRh+am5vE3y6vZcjwYa
7srXGE/1RHCiPoKW5uhjEVow1XZ8oFjRtHrucANSQQnM5+st7DoQ6XhWRWQEngJQ
N8ymiu/bs2D1ROSlo8C39m+7FZAQL9uoBF4lG4EO+GdPsjC0TBHwC0DCknmhUjrf
tDUDn851ENU+V2PJYI9aTTEUBoyK3KJuIfhegRU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:20 2024 by rpki-client on console-fra.rpki-client.org