Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa
File:                     faa2ef74-f3ac-358c-9428-0eb061b7e349.roa (raw, json)
Hash identifier:          a6/OfFXiBK8at8Ks3AKDwRyp2co/vy2YFp/W8liOklE=
Subject key identifier:   5F:D4:D7:0E:CC:EA:F6:63:64:A1:E2:F3:35:80:0D:00:03:D4:E6:32
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F4328584526A5ACC5E75AB4B4D7FA5900
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa
Signing time:             Sat 09 Mar 2024 14:00:31 +0000
ROA not before:           Sat 09 Mar 2024 14:00:31 +0000
ROA not after:            Fri 07 Jun 2024 13:00:31 +0000
asID:                     46983
IP address blocks:        23.157.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:26:a5:ac:c5:e7:5a:b4:b4:d7:fa:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: Mar  9 14:00:31 2024 GMT
            Not After : Jun  7 13:00:31 2024 GMT
        Subject: CN=c285bae2-d276-4e56-99ef-eb294d90e7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:5a:a8:66:a0:d1:32:37:71:32:69:f6:07:
                    d2:e8:62:fd:91:47:b3:d1:30:b3:ca:b1:d9:12:4e:
                    24:d2:be:d3:d1:74:31:9c:f0:ef:9d:a8:32:81:92:
                    3f:10:a7:18:b7:b1:db:e9:37:f4:3a:e6:5e:75:c8:
                    49:41:a7:62:d6:bd:19:f0:f7:ea:f2:69:e0:dd:bb:
                    f8:5d:97:da:f8:40:97:bb:8b:5e:e5:14:a4:ea:e3:
                    7b:30:0d:ab:1b:a1:94:aa:6a:0b:28:9a:ad:8d:fb:
                    f8:2a:8a:65:48:8c:ba:9c:a1:a3:84:fe:1c:70:f4:
                    09:62:84:0d:c9:80:b9:93:4d:91:5f:8c:52:3c:18:
                    d1:23:a2:40:29:b5:91:eb:a2:59:82:85:c1:2f:39:
                    b6:d3:83:f2:f7:81:cd:1e:51:91:d7:85:d8:34:fc:
                    63:31:f5:1a:8e:b2:60:5b:30:dc:c0:8a:e5:a7:5e:
                    e6:b4:56:77:88:6b:c1:b3:f9:6d:b9:56:d4:db:20:
                    4c:e2:cd:d2:af:b7:28:c5:09:04:f9:f4:eb:d6:ed:
                    35:87:27:43:da:6f:f3:fa:bf:14:cc:b8:87:95:a5:
                    74:82:5f:dc:7c:6c:6f:fe:26:48:af:ed:a6:35:c2:
                    ad:62:0d:0e:08:dd:1a:35:25:d1:51:5b:2c:95:47:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D4:D7:0E:CC:EA:F6:63:64:A1:E2:F3:35:80:0D:00:03:D4:E6:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:68:d5:44:84:ae:cd:9f:27:54:04:d4:f1:99:ce:80:81:2f:
         58:2f:1d:6d:54:90:21:f0:fc:81:fc:b0:73:db:e6:ad:69:90:
         17:70:f4:bf:c3:3b:22:f7:e7:ae:16:0b:78:90:04:9b:6c:f1:
         42:43:65:8e:3d:01:33:95:8e:1a:dd:b2:f2:88:97:1d:f0:a6:
         09:51:99:ff:20:d2:df:c5:6c:aa:5e:d1:b3:3a:9e:d9:f0:ad:
         a4:9a:d6:68:1e:f8:cd:fb:3e:19:8e:c3:7c:9d:c0:43:3b:13:
         f5:9d:d8:32:9f:1d:7c:27:b0:f1:46:a1:32:27:2c:f0:d4:cb:
         e7:27:5f:00:73:50:78:4d:7a:e8:5d:61:85:75:cb:64:32:89:
         c2:f3:18:21:74:53:b8:f5:cc:b4:fe:c4:ef:36:6b:4c:34:61:
         b7:9a:a5:48:75:10:27:0c:a8:e0:e9:95:68:0a:b1:9a:99:82:
         9d:ea:ae:c1:f3:da:c7:53:7e:df:10:4c:a9:97:b0:06:02:c2:
         6c:fb:a2:2d:23:79:c5:a6:25:bd:af:fb:28:01:e9:e4:ab:f9:
         7d:3e:0e:e0:c7:c4:54:fa:87:0b:aa:b9:59:52:01:4c:90:bc:
         89:0f:e1:e9:95:23:6a:41:06:a0:05:f8:68:80:a2:85:28:6f:
         b3:fb:ee:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUmpazF51q0tNf6WQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWEzMTk0ODYtMDNkNS00ZmIxLTk5N2UtMjI4MzUwMzMw
ODQ3MB4XDTI0MDMwOTE0MDAzMVoXDTI0MDYwNzEzMDAzMVowLzEtMCsGA1UEAxMk
YzI4NWJhZTItZDI3Ni00ZTU2LTk5ZWYtZWIyOTRkOTBlN2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv1aqGag0TI3cTJp9gfS6GL9kUez0TCzyrHZ
Ek4k0r7T0XQxnPDvnagygZI/EKcYt7Hb6Tf0OuZedchJQadi1r0Z8Pfq8mng3bv4
XZfa+ECXu4te5RSk6uN7MA2rG6GUqmoLKJqtjfv4KoplSIy6nKGjhP4ccPQJYoQN
yYC5k02RX4xSPBjRI6JAKbWR66JZgoXBLzm204Py94HNHlGR14XYNPxjMfUajrJg
WzDcwIrlp17mtFZ3iGvBs/ltuVbU2yBM4s3Sr7coxQkE+fTr1u01hydD2m/z+r8U
zLiHlaV0gl/cfGxv/iZIr+2mNcKtYg0OCN0aNSXRUVsslUdOmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/U1w7M6vZjZKHi8zWADQAD1OYyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMx
OTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgzNTAzMzA4NDcvZmFhMmVmNzQtZjNhYy0z
NThjLTk0MjgtMGViMDYxYjdlMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWEzMTk0ODYtMDNkNS00ZmIxLTk5
N2UtMjI4MzUwMzMwODQ3LzFhMzE5NDg2LTAzZDUtNGZiMS05OTdlLTIyODM1MDMz
MDg0Ny5jcmwwHwYDVR0jBBgwFoAUojoUY2Szy8/8gGpP64Xxl3Adxp0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMxOTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgz
NTAzMzA4NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxo1USErs2fJ1QE1PGZzoCBL1gvHW1UkCHw/IH8sHPb5q1pkBdw9L/D
OyL3564WC3iQBJts8UJDZY49ATOVjhrdsvKIlx3wpglRmf8g0t/FbKpe0bM6ntnw
raSa1mge+M37PhmOw3ydwEM7E/Wd2DKfHXwnsPFGoTInLPDUy+cnXwBzUHhNeuhd
YYV1y2QyicLzGCF0U7j1zLT+xO82a0w0YbeapUh1ECcMqODplWgKsZqZgp3qrsHz
2sdTft8QTKmXsAYCwmz7oi0jecWmJb2v+ygB6eSr+X0+DuDHxFT6hwuquVlSAUyQ
vIkP4emVI2pBBqAF+GiAooUob7P77kA=
-----END CERTIFICATE-----
Generated at Sun May 19 15:54:22 2024 by rpki-client on console-fra.rpki-client.org