Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa
File:                     553b08e2-7500-3d55-b607-b218b8a593e2.roa (raw, json)
Hash identifier:          fmUpe0Psnz9F5HA+0MfT0GaCunt7abXM2I/YjfqIOyM=
Subject key identifier:   E2:B5:21:0F:E1:5B:F8:24:28:3D:50:53:40:16:DA:E3:59:96:70:07
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB68F9147BC59CD2D98F400
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        23.88.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8f:91:47:bc:59:cd:2d:98:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=a593a6b1-e140-4be0-9123-ace59df5a875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:51:c9:ce:a9:95:a5:3d:a3:54:18:90:1d:
                    02:0e:37:2a:9d:35:1b:6e:e8:e3:e3:a2:66:ae:d0:
                    7c:47:02:ec:e8:f3:7b:55:e6:82:7a:61:a1:52:11:
                    c8:f3:85:e4:ec:44:8c:84:dd:87:e9:77:97:51:70:
                    d4:9d:7c:9a:fe:e9:11:b5:92:aa:11:6b:07:12:c9:
                    3f:37:97:6f:98:92:4e:e2:2c:46:02:c3:47:23:02:
                    84:fa:8d:4d:2e:ab:0e:40:1e:1d:9d:02:56:e5:30:
                    60:df:f7:ee:e4:3c:4c:91:8c:97:b5:ad:47:f7:06:
                    19:85:a7:4f:22:5b:0f:c3:e6:e4:97:a9:5f:06:6a:
                    43:3b:6b:e2:a5:9f:86:1e:7d:bd:fb:90:89:d6:6e:
                    b3:1d:53:eb:d1:29:f2:83:f5:eb:6f:04:86:2d:57:
                    73:c6:a2:1f:16:81:bb:f8:94:6d:6f:28:77:6c:f2:
                    40:45:dc:78:08:79:03:33:71:18:cd:fc:65:66:2d:
                    5a:e0:64:63:4b:bc:9d:8a:35:06:20:46:df:f6:74:
                    51:dd:54:3f:34:fe:15:83:9f:a5:60:8a:cd:34:04:
                    18:de:bb:27:0c:c8:c1:d6:b5:78:f0:57:24:e3:55:
                    51:3b:cd:54:24:a8:b3:5e:c7:61:bd:c0:85:af:f7:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B5:21:0F:E1:5B:F8:24:28:3D:50:53:40:16:DA:E3:59:96:70:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/553b08e2-7500-3d55-b607-b218b8a593e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6f:f2:2b:12:55:d3:a7:76:df:7c:6e:90:5b:21:f4:ca:95:
         b5:1b:14:fd:a6:7e:5e:c0:52:90:93:7d:80:e7:1c:22:33:be:
         70:14:18:f2:51:d6:ad:9c:bf:00:05:b8:ae:d9:7e:a0:f2:d7:
         69:fc:4d:ec:b8:ca:9b:9c:21:5f:f8:9e:69:26:a5:c7:57:14:
         40:17:13:eb:28:f2:79:6c:e6:6c:a7:78:ad:40:99:f2:ce:bb:
         9d:51:04:9c:ea:67:c9:bf:0b:8e:fd:35:8c:7f:c7:09:39:fd:
         bc:50:d4:17:f9:66:2f:04:13:e8:b7:b7:31:a2:3b:28:ef:eb:
         e0:d9:02:93:42:dc:1b:0a:fd:94:0c:94:c2:15:af:81:cb:f8:
         8d:a3:59:4f:c6:c9:48:c0:10:6f:b2:0e:e8:54:ca:09:47:0b:
         ed:58:f2:85:cf:89:13:a8:f1:ee:76:0b:72:26:30:ed:f9:b4:
         67:be:ef:b0:78:7a:6c:cd:06:8c:be:b7:e0:d5:81:63:45:58:
         ee:90:23:66:3c:f3:00:7c:80:ff:28:f9:3b:0f:36:fb:19:c7:
         b1:85:4d:35:a9:31:94:fe:f3:06:f6:ea:c6:78:65:5b:17:24:
         fc:54:20:06:8c:f3:89:96:99:d1:d4:be:55:75:0c:76:53:23:
         ef:c7:24:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMto+RR7xZzS2Y9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
YTU5M2E2YjEtZTE0MC00YmUwLTkxMjMtYWNlNTlkZjVhODc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcZRyc6plaU9o1QYkB0CDjcqnTUbbujj46Jm
rtB8RwLs6PN7VeaCemGhUhHI84Xk7ESMhN2H6XeXUXDUnXya/ukRtZKqEWsHEsk/
N5dvmJJO4ixGAsNHIwKE+o1NLqsOQB4dnQJW5TBg3/fu5DxMkYyXta1H9wYZhadP
IlsPw+bkl6lfBmpDO2vipZ+GHn29+5CJ1m6zHVPr0Snyg/XrbwSGLVdzxqIfFoG7
+JRtbyh3bPJARdx4CHkDM3EYzfxlZi1a4GRjS7ydijUGIEbf9nRR3VQ/NP4Vg5+l
YIrNNAQY3rsnDMjB1rV48Fck41VRO81UJKizXsdhvcCFr/eDyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOK1IQ/hW/gkKD1QU0AW2uNZlnAHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNTUzYjA4ZTItNzUwMC0z
ZDU1LWI2MDctYjIxOGI4YTU5M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF1iwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdv8isSVdOndt98bpBbIfTKlbUbFP2mfl7AUpCTfYDnHCIzvnAUGPJR
1q2cvwAFuK7ZfqDy12n8Tey4ypucIV/4nmkmpcdXFEAXE+so8nls5myneK1AmfLO
u51RBJzqZ8m/C479NYx/xwk5/bxQ1Bf5Zi8EE+i3tzGiOyjv6+DZApNC3BsK/ZQM
lMIVr4HL+I2jWU/GyUjAEG+yDuhUyglHC+1Y8oXPiROo8e52C3ImMO35tGe+77B4
emzNBoy+t+DVgWNFWO6QI2Y88wB8gP8o+TsPNvsZx7GFTTWpMZT+8wb26sZ4ZVsX
JPxUIAaM84mWmdHUvlV1DHZTI+/HJBc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org