Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/68a9d485-4b07-3e52-8c52-574733e856cb.roa
File:                     68a9d485-4b07-3e52-8c52-574733e856cb.roa (raw, json)
Hash identifier:          G3qCX3gaN0yJYxW15aq1Kkf/uNnpSQJoLv2bBgIcy1M=
Subject key identifier:   C3:A3:C3:95:F0:0A:27:1E:6D:2B:2E:77:E9:2B:41:34:0B:21:75:43
Certificate issuer:       /CN=4e0f128f-0758-4b15-87a4-5bba9de24312
Certificate serial:       010D0C9F4328584784567B5C5F104A3179670660
Authority key identifier: EB:33:8C:B8:C4:DB:54:C8:E2:EB:D6:66:5C:C6:BA:14:1E:9E:CD:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/68a9d485-4b07-3e52-8c52-574733e856cb.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     40676
IP address blocks:        23.152.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/4e0f128f-0758-4b15-87a4-5bba9de24312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/4e0f128f-0758-4b15-87a4-5bba9de24312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:7b:5c:5f:10:4a:31:79:67:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0f128f-0758-4b15-87a4-5bba9de24312
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=f69ecb47-a984-4e59-a747-bcee0a97fe67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:2b:59:6c:f8:51:14:69:c4:0e:68:de:54:
                    b7:cc:7d:07:5c:4f:90:a3:b7:09:0d:3e:8c:54:9e:
                    4c:12:e4:85:ef:04:9f:ae:ac:2d:28:fa:32:6f:2a:
                    70:91:87:a1:5a:f1:77:c0:97:4c:68:7c:f1:cb:c9:
                    1b:0c:05:15:2f:df:1c:35:de:d9:f6:db:57:a7:4f:
                    a9:b8:92:98:4d:02:fc:97:87:d0:e5:1b:ce:ee:72:
                    d9:55:4d:c3:c9:4b:3d:f8:2f:27:f1:1f:97:d0:f3:
                    f2:34:b6:5b:49:5b:b1:85:6a:cd:4a:74:49:ac:57:
                    d5:bb:2d:ad:16:cf:6d:38:a3:1f:a5:e4:c5:a9:15:
                    76:44:74:e9:40:38:40:18:c6:ec:16:ba:fe:68:7f:
                    04:b3:09:cc:c8:4e:f5:70:13:9c:4d:af:df:d2:7e:
                    a7:8c:fc:64:b6:75:c7:23:14:79:fb:a5:29:71:28:
                    6b:55:7c:a1:b9:7b:36:6a:c2:17:d4:b2:63:a0:98:
                    59:6a:06:7b:f2:7d:70:17:8a:67:80:a1:8a:89:17:
                    a8:0f:1d:48:c5:d6:58:92:15:e5:75:1f:e4:ad:c3:
                    ae:ab:22:7b:1b:ef:c5:12:68:dc:58:01:74:dd:17:
                    d5:cd:31:a8:90:fc:39:37:eb:9f:29:cc:63:b6:84:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A3:C3:95:F0:0A:27:1E:6D:2B:2E:77:E9:2B:41:34:0B:21:75:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/68a9d485-4b07-3e52-8c52-574733e856cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/4e0f128f-0758-4b15-87a4-5bba9de24312.crl

            X509v3 Authority Key Identifier:
                keyid:EB:33:8C:B8:C4:DB:54:C8:E2:EB:D6:66:5C:C6:BA:14:1E:9E:CD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:5a:3f:a8:f3:42:92:d5:d1:07:10:d1:43:68:58:65:52:85:
         d4:52:21:d8:82:68:bf:24:d5:35:07:8a:0a:96:d8:3e:c6:c8:
         8d:b2:9a:03:06:8c:b8:5c:81:05:5f:ba:55:2e:c5:4e:3c:a4:
         0a:2e:47:11:22:1c:50:18:ab:ae:c9:c9:66:1f:e8:ec:5c:38:
         f7:a6:9e:b0:e8:e9:ae:59:7d:21:a3:e5:50:89:3d:7d:08:1b:
         9d:99:d5:1b:2a:ac:3e:35:a0:dc:38:da:4c:cf:15:b0:bb:5b:
         55:91:1e:f1:d2:de:4d:6c:2f:90:8e:8f:62:eb:3a:f6:79:87:
         bb:fe:a9:80:67:29:cd:47:6b:4b:1e:50:5f:ab:8e:9d:80:19:
         d4:fd:be:ee:6c:fd:f8:79:07:a8:31:ca:cb:10:c5:5f:0c:51:
         30:ea:92:1a:29:a0:af:bd:51:15:65:2a:e6:0e:ed:b3:89:8f:
         31:21:a3:b2:67:c3:a8:5b:b0:bb:4c:3c:d8:95:c4:74:20:02:
         cc:5f:8c:d6:b2:bd:57:7e:38:35:74:82:a5:26:ba:61:25:af:
         2d:17:c3:4f:4a:04:1d:4b:54:72:80:d8:db:90:a5:b0:31:d5:
         7d:be:de:42:5b:6c:f3:53:7d:9a:13:3e:08:e8:02:e6:f6:fa:
         d8:8b:9d:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVntcXxBKMXlnBmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwZjEyOGYtMDc1OC00YjE1LTg3YTQtNWJiYTlkZTI0
MzEyMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk
ZjY5ZWNiNDctYTk4NC00ZTU5LWE3NDctYmNlZTBhOTdmZTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlowrWWz4URRpxA5o3lS3zH0HXE+Qo7cJDT6M
VJ5MEuSF7wSfrqwtKPoybypwkYehWvF3wJdMaHzxy8kbDAUVL98cNd7Z9ttXp0+p
uJKYTQL8l4fQ5RvO7nLZVU3DyUs9+C8n8R+X0PPyNLZbSVuxhWrNSnRJrFfVuy2t
Fs9tOKMfpeTFqRV2RHTpQDhAGMbsFrr+aH8EswnMyE71cBOcTa/f0n6njPxktnXH
IxR5+6UpcShrVXyhuXs2asIX1LJjoJhZagZ78n1wF4pngKGKiReoDx1IxdZYkhXl
dR/krcOuqyJ7G+/FEmjcWAF03RfVzTGokPw5N+ufKcxjtoQdRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOjw5XwCicebSsud+krQTQLIXVDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZTBm
MTI4Zi0wNzU4LTRiMTUtODdhNC01YmJhOWRlMjQzMTIvNjhhOWQ0ODUtNGIwNy0z
ZTUyLThjNTItNTc0NzMzZTg1NmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGUwZjEyOGYtMDc1OC00YjE1LTg3
YTQtNWJiYTlkZTI0MzEyLzRlMGYxMjhmLTA3NTgtNGIxNS04N2E0LTViYmE5ZGUy
NDMxMi5jcmwwHwYDVR0jBBgwFoAU6zOMuMTbVMji69ZmXMa6FB6ezVYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZTBmMTI4Zi0wNzU4LTRiMTUtODdhNC01YmJh
OWRlMjQzMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5hYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5aP6jzQpLV0QcQ0UNoWGVShdRSIdiCaL8k1TUHigqW2D7GyI2ymgMG
jLhcgQVfulUuxU48pAouRxEiHFAYq67JyWYf6OxcOPemnrDo6a5ZfSGj5VCJPX0I
G52Z1RsqrD41oNw42kzPFbC7W1WRHvHS3k1sL5COj2LrOvZ5h7v+qYBnKc1Ha0se
UF+rjp2AGdT9vu5s/fh5B6gxyssQxV8MUTDqkhopoK+9URVlKuYO7bOJjzEho7Jn
w6hbsLtMPNiVxHQgAsxfjNayvVd+ODV0gqUmumElry0Xw09KBB1LVHKA2NuQpbAx
1X2+3kJbbPNTfZoTPgjoAub2+tiLnVM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org