Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa
File:                     032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa (raw, json)
Hash identifier:          Eqxhf8Ou2pvmNRgBf1bVEuoK/+fz2nSc3D41G+u/xsU=
Subject key identifier:   78:07:48:E3:9B:9D:DD:7B:6F:8D:2D:BF:08:90:7F:4E:60:E5:54:B4
Certificate issuer:       /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
Certificate serial:       010D0C9F432858478B510E6358E2FA942CA66940
Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa
Signing time:             Tue 15 Oct 2024 01:00:35 +0000
ROA not before:           Tue 15 Oct 2024 01:00:35 +0000
ROA not after:            Mon 13 Jan 2025 02:00:35 +0000
asID:                     22597
IP address blocks:        23.159.120.0/24 maxlen: 24
                          2607:5fc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:51:0e:63:58:e2:fa:94:2c:a6:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
        Validity
            Not Before: Oct 15 01:00:35 2024 GMT
            Not After : Jan 13 02:00:35 2025 GMT
        Subject: CN=299b3518-43b6-4177-8842-2c31758a2cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:23:f4:f1:45:20:de:68:68:5f:14:c5:4c:
                    60:f1:5e:8a:4a:97:37:49:8a:20:eb:49:04:9d:9f:
                    82:86:91:69:b3:c3:e2:e6:60:3c:ae:b0:a4:fc:b3:
                    ed:31:ad:e2:2e:6d:bd:3a:47:c8:38:2f:af:29:a8:
                    47:8a:18:44:52:78:62:c3:a7:64:d8:38:5e:82:9f:
                    44:e2:7e:49:23:f2:fe:7e:09:8f:0d:d7:f5:ca:2c:
                    34:4d:c9:f5:d0:b9:cc:27:86:29:46:56:5f:55:8f:
                    d8:53:67:92:5f:cb:b7:f3:39:89:67:d8:12:3a:c7:
                    c5:56:d3:b6:54:93:d3:dc:1b:a1:e0:80:ba:70:83:
                    f1:2d:9c:3e:ea:71:18:c8:7e:22:09:b3:b6:08:ec:
                    c9:98:4f:99:7b:57:fa:e0:7e:57:07:10:11:cf:f8:
                    d7:61:c4:a9:6d:c0:88:61:a5:98:94:ae:14:f0:40:
                    13:8b:2d:ff:50:88:92:8c:bf:2e:4e:0c:aa:9a:38:
                    d5:9a:98:98:cf:5c:b7:b3:c7:3f:55:f7:78:a6:ad:
                    c1:bf:b1:3c:15:50:97:27:f1:e4:59:d3:53:27:1b:
                    70:5d:2c:91:26:f8:ed:75:4e:95:3f:8d:08:65:e6:
                    d5:94:fd:b5:9f:e6:db:c5:9a:8b:89:7f:30:89:20:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:07:48:E3:9B:9D:DD:7B:6F:8D:2D:BF:08:90:7F:4E:60:E5:54:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl

            X509v3 Authority Key Identifier:
                keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.120.0/24
                IPv6:
                  2607:5fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:44:e6:46:ea:e0:eb:19:8e:6f:3d:be:62:6c:63:3b:e6:8a:
         1f:85:76:ee:f6:9d:21:7a:20:69:37:ca:a1:e9:5f:87:e9:c2:
         e0:4b:b1:3d:4b:41:83:cf:13:0e:f2:57:07:b6:4d:af:e9:1f:
         55:50:a0:b4:66:9f:4d:0b:4e:a0:83:cc:30:70:e6:3a:35:66:
         4b:a8:68:1c:52:56:92:c4:93:b4:43:b0:ea:b9:1e:fc:ad:98:
         01:22:f5:5e:23:e9:98:ff:f2:c2:d6:3a:fd:80:b8:83:dc:5b:
         d9:ed:f0:4c:27:62:38:54:f9:2e:b7:0e:cb:db:8f:a1:bf:5c:
         c1:3b:b7:91:01:b9:b9:ae:1f:21:3d:b4:5f:c3:d4:e2:a4:98:
         de:f1:2c:ec:75:e4:0e:b1:a7:1d:6e:db:bc:a7:68:e8:9b:1b:
         02:ff:8a:be:6d:5e:5b:4a:97:8b:a1:6a:14:9e:ba:c8:76:3f:
         a7:87:26:48:ef:e0:b3:2e:3f:44:3f:30:72:db:72:d1:43:47:
         fa:a3:2c:5e:cd:9a:49:4a:e8:9b:28:3c:a8:da:d7:9f:26:a0:
         1d:cf:b5:7f:2d:0d:3e:d3:c2:22:67:0e:18:16:08:be:72:c5:
         81:39:41:75:c4:3b:ac:44:2c:d5:42:6a:30:49:db:df:0a:a1:
         81:bb:76:f2
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEeLUQ5jWOL6lCymaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFmZDg4OTUtMTFlOS00M2Q0LWJiOWYtNjQwNDJiMWQy
OGY2MB4XDTI0MTAxNTAxMDAzNVoXDTI1MDExMzAyMDAzNVowLzEtMCsGA1UEAxMk
Mjk5YjM1MTgtNDNiNi00MTc3LTg4NDItMmMzMTc1OGEyY2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUgj9PFFIN5oaF8UxUxg8V6KSpc3SYog60kE
nZ+ChpFps8Pi5mA8rrCk/LPtMa3iLm29OkfIOC+vKahHihhEUnhiw6dk2Dhegp9E
4n5JI/L+fgmPDdf1yiw0Tcn10LnMJ4YpRlZfVY/YU2eSX8u38zmJZ9gSOsfFVtO2
VJPT3Buh4IC6cIPxLZw+6nEYyH4iCbO2COzJmE+Ze1f64H5XBxARz/jXYcSpbcCI
YaWYlK4U8EATiy3/UIiSjL8uTgyqmjjVmpiYz1y3s8c/Vfd4pq3Bv7E8FVCXJ/Hk
WdNTJxtwXSyRJvjtdU6VP40IZebVlP21n+bbxZqLiX8wiSBz+QIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFHgHSOObnd17b40tvwiQf05g5VS0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YWZk
ODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIxZDI4ZjYvMDMyZmMxYjAtYjlhYy0z
YzU0LWE2Y2ItYmRiNjQyYWMwMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGFmZDg4OTUtMTFlOS00M2Q0LWJi
OWYtNjQwNDJiMWQyOGY2LzhhZmQ4ODk1LTExZTktNDNkNC1iYjlmLTY0MDQyYjFk
MjhmNi5jcmwwHwYDVR0jBBgwFoAUGJWuJgDr5qBg6hkQe1mWeu7iWBcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0
MmIxZDI4ZjYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF594MA0E
AgACMAcDBQAmB1/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBABhE5kbq4OsZjm89vmJsYzvmih+Fdu72nSF6
IGk3yqHpX4fpwuBLsT1LQYPPEw7yVwe2Ta/pH1VQoLRmn00LTqCDzDBw5jo1Zkuo
aBxSVpLEk7RDsOq5HvytmAEi9V4j6Zj/8sLWOv2AuIPcW9nt8EwnYjhU+S63Dsvb
j6G/XME7t5EBubmuHyE9tF/D1OKkmN7xLOx15A6xpx1u27ynaOibGwL/ir5tXltK
l4uhahSeush2P6eHJkjv4LMuP0Q/MHLbctFDR/qjLF7NmklK6JsoPKja158moB3P
tX8tDT7TwiJnDhgWCL5yxYE5QXXEO6xELNVCajBJ298KoYG7dvI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:46 2024 by rpki-client on console-ams.rpki-client.org