Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/656c7730-08e3-30b0-9c36-04d1b6bd9d87.roa
File:                     656c7730-08e3-30b0-9c36-04d1b6bd9d87.roa (raw, json)
Hash identifier:          htIBL9IwHGBek2ttXp5IdzWTstRW57ydoE244ljgaEU=
Subject key identifier:   20:65:78:C9:E6:BC:7A:83:7A:1E:C7:8D:E7:00:A7:2C:81:79:BA:82
Certificate issuer:       /CN=4ea462c4-d76d-40b1-a18e-da445cbec96b
Certificate serial:       010D0C9F432858477BF6679C0C3A6A6E933C8920
Authority key identifier: 90:20:0F:9D:10:76:DA:9B:60:32:1A:E8:12:63:2B:37:B2:88:6F:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/656c7730-08e3-30b0-9c36-04d1b6bd9d87.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     40896
IP address blocks:        23.155.200.0/24 maxlen: 24
                          2607:53c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/4ea462c4-d76d-40b1-a18e-da445cbec96b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/4ea462c4-d76d-40b1-a18e-da445cbec96b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:67:9c:0c:3a:6a:6e:93:3c:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea462c4-d76d-40b1-a18e-da445cbec96b
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=e7806825-2d42-4f12-a53d-e9d5cd8e44b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:39:29:24:83:11:8b:03:ba:98:dd:c8:99:
                    7b:52:60:fd:31:07:b5:31:c4:c9:ce:26:6c:20:61:
                    ec:1b:d2:4d:95:c7:c6:63:20:34:d5:07:34:2f:23:
                    41:90:6a:cf:14:0e:3d:96:38:00:ab:b5:8e:58:29:
                    aa:59:db:71:14:47:c0:af:5d:b8:17:2c:7c:55:b1:
                    b3:a8:c0:8b:27:81:a7:22:7f:a3:fb:bb:6e:41:ff:
                    2a:ea:e3:6e:b8:21:9e:0f:f1:20:52:71:e3:98:9c:
                    91:4c:49:25:e7:30:1e:33:8c:85:ce:63:96:4e:4a:
                    77:c2:d2:2f:93:34:64:b7:11:95:f6:c7:97:0b:6c:
                    85:88:f1:a6:b5:4f:02:4f:24:23:ac:2d:55:ca:cf:
                    b5:0e:cd:4c:80:53:45:b1:65:18:c0:6d:e9:be:71:
                    55:81:24:cc:5c:c4:9a:39:43:24:3b:75:4f:f0:cc:
                    a5:3c:7c:1c:af:6a:c7:34:49:0f:2f:74:38:ec:9f:
                    95:0b:09:19:88:72:8b:10:96:2a:64:e0:11:99:94:
                    b2:35:28:02:59:33:fa:55:78:da:49:e7:bf:4c:41:
                    09:6d:06:90:93:93:6d:d7:3e:1d:7f:d7:8d:5e:1b:
                    24:39:db:62:3d:c5:13:21:07:7d:47:71:ee:c0:3d:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:65:78:C9:E6:BC:7A:83:7A:1E:C7:8D:E7:00:A7:2C:81:79:BA:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/656c7730-08e3-30b0-9c36-04d1b6bd9d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b/4ea462c4-d76d-40b1-a18e-da445cbec96b.crl

            X509v3 Authority Key Identifier:
                keyid:90:20:0F:9D:10:76:DA:9B:60:32:1A:E8:12:63:2B:37:B2:88:6F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ea462c4-d76d-40b1-a18e-da445cbec96b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.200.0/24
                IPv6:
                  2607:53c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:5a:f8:bc:2b:4b:76:22:1f:6e:c8:54:34:ff:00:be:7d:
         30:a4:2b:a2:eb:03:cc:26:d2:95:4d:e3:14:df:d5:cc:36:78:
         db:22:93:c4:5b:63:cb:4d:49:3b:31:63:c6:96:1b:2d:cd:24:
         9a:a0:a1:fe:7d:30:6a:7b:f6:3c:f4:77:b8:36:83:c3:f6:3f:
         25:a6:bc:76:2f:65:7b:a4:3c:14:8a:38:d2:96:49:b5:09:7a:
         da:80:58:69:e3:aa:78:49:60:8d:9b:f7:7d:03:3c:8c:42:c7:
         f0:7f:aa:d3:ce:80:b1:d1:b2:44:d1:40:f7:a0:45:95:10:f8:
         ae:3c:cd:db:84:41:89:c9:26:ee:58:49:b2:3f:29:d6:9e:a1:
         44:29:5a:f5:ce:a2:36:1c:ac:20:31:80:28:e1:1b:d9:3f:8a:
         f5:bc:cc:ff:7c:f2:72:c8:7d:09:16:89:17:f9:9d:d0:dd:51:
         ac:20:ad:9b:bf:0c:81:5c:69:a1:e9:cf:23:d2:26:06:42:d9:
         cf:09:eb:d0:02:ff:81:b0:3f:40:23:05:c5:2e:a0:21:2c:4c:
         31:9e:21:64:52:b0:ae:15:5e:fb:17:50:30:b6:6d:c5:d9:ac:
         ac:52:4d:0c:0a:20:54:10:a8:39:a3:df:6c:80:f4:20:1f:5d:
         ab:7e:fe:52
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEd79mecDDpqbpM8iSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhNDYyYzQtZDc2ZC00MGIxLWExOGUtZGE0NDVjYmVj
OTZiMB4XDTI0MTAwOTEzMDA0MloXDTI1MDEwNzE0MDA0MlowLzEtMCsGA1UEAxMk
ZTc4MDY4MjUtMmQ0Mi00ZjEyLWE1M2QtZTlkNWNkOGU0NGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmo5KSSDEYsDupjdyJl7UmD9MQe1McTJziZs
IGHsG9JNlcfGYyA01Qc0LyNBkGrPFA49ljgAq7WOWCmqWdtxFEfAr124Fyx8VbGz
qMCLJ4GnIn+j+7tuQf8q6uNuuCGeD/EgUnHjmJyRTEkl5zAeM4yFzmOWTkp3wtIv
kzRktxGV9seXC2yFiPGmtU8CTyQjrC1Vys+1Ds1MgFNFsWUYwG3pvnFVgSTMXMSa
OUMkO3VP8MylPHwcr2rHNEkPL3Q47J+VCwkZiHKLEJYqZOARmZSyNSgCWTP6VXja
See/TEEJbQaQk5Nt1z4df9eNXhskOdtiPcUTIQd9R3HuwD33XQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFCBleMnmvHqDeh7HjecApyyBebqCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZWE0
NjJjNC1kNzZkLTQwYjEtYTE4ZS1kYTQ0NWNiZWM5NmIvNjU2Yzc3MzAtMDhlMy0z
MGIwLTljMzYtMDRkMWI2YmQ5ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGVhNDYyYzQtZDc2ZC00MGIxLWEx
OGUtZGE0NDVjYmVjOTZiLzRlYTQ2MmM0LWQ3NmQtNDBiMS1hMThlLWRhNDQ1Y2Jl
Yzk2Yi5jcmwwHwYDVR0jBBgwFoAUkCAPnRB22ptgMhroEmMrN7KIb9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZWE0NjJjNC1kNzZkLTQwYjEtYTE4ZS1kYTQ0
NWNiZWM5NmIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5vIMA0E
AgACMAcDBQAmB1PAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAIIaWvi8K0t2Ih9uyFQ0/wC+fTCkK6LrA8wm
0pVN4xTf1cw2eNsik8RbY8tNSTsxY8aWGy3NJJqgof59MGp79jz0d7g2g8P2PyWm
vHYvZXukPBSKONKWSbUJetqAWGnjqnhJYI2b930DPIxCx/B/qtPOgLHRskTRQPeg
RZUQ+K48zduEQYnJJu5YSbI/KdaeoUQpWvXOojYcrCAxgCjhG9k/ivW8zP988nLI
fQkWiRf5ndDdUawgrZu/DIFcaaHpzyPSJgZC2c8J69AC/4GwP0AjBcUuoCEsTDGe
IWRSsK4VXvsXUDC2bcXZrKxSTQwKIFQQqDmj32yA9CAfXat+/lI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org