Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
File:                     8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa (raw, json)
Hash identifier:          Kgy5apS6U+XpLlY5bDM9BTKcbYi2lnQxroS65yiOQyg=
Subject key identifier:   71:22:04:39:8B:92:AC:13:2C:70:EB:FA:D3:8F:5C:85:E0:5E:6E:5F
Certificate issuer:       /CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
Certificate serial:       010D0C9F43285845A428D65CBBBF4DAA158B95C0
Authority key identifier: 2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     20277
IP address blocks:        23.155.40.0/24 maxlen: 24
                          2602:2eb::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d6:5c:bb:bf:4d:aa:15:8b:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=f82bc1a5-9618-44d4-94df-2d47d4f44c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:29:9a:0a:1f:62:c8:56:13:6e:35:1c:b9:8e:
                    ca:df:20:43:97:aa:51:23:98:67:58:b1:50:c3:55:
                    46:de:ae:70:4f:2a:a9:a4:2e:0c:e4:44:8e:73:a1:
                    60:90:73:18:b5:ad:93:da:de:63:9a:d3:b6:2f:d2:
                    da:64:25:4a:a6:04:ad:e1:da:9e:94:56:e1:19:b2:
                    78:49:7a:b8:2b:d0:03:71:bf:c0:fc:7b:c3:67:6f:
                    8f:e4:fd:ac:c6:e8:10:c5:e1:87:01:8f:31:e5:2c:
                    b9:c3:f6:55:04:bc:e7:63:44:7f:8a:a6:1e:b0:92:
                    ec:1d:b0:0e:9a:dd:a5:01:87:b7:44:e4:6c:23:89:
                    de:eb:27:d7:a1:19:dd:92:84:9f:6e:e9:b2:8e:62:
                    fd:82:54:b2:b5:c8:9f:fb:94:86:91:dd:38:ec:a1:
                    a9:87:24:ca:97:94:d9:6f:d0:f3:56:59:e5:d9:88:
                    88:04:57:6b:93:31:69:83:e4:29:d6:69:f9:f1:54:
                    45:05:21:e4:5b:60:8b:81:61:9e:60:c9:d5:0f:bb:
                    6a:0f:60:40:7e:33:3a:4e:d6:8b:ce:74:bf:5f:26:
                    8a:12:b5:f4:ee:71:4e:b6:68:07:0d:d6:df:be:bf:
                    9b:30:95:46:ea:f1:16:20:5b:a8:2d:39:38:9b:83:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:22:04:39:8B:92:AC:13:2C:70:EB:FA:D3:8F:5C:85:E0:5E:6E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.40.0/24
                IPv6:
                  2602:2eb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:96:c2:db:3a:22:b8:73:e6:86:3e:6c:b6:1f:96:12:f8:f4:
         c3:30:9c:a6:08:e4:ff:04:53:7f:85:85:e8:06:9d:df:c3:93:
         91:45:94:c2:56:de:d4:a1:44:80:62:f5:69:03:06:05:e2:47:
         1d:9e:f6:ca:85:e2:0a:0d:d8:2e:a1:33:69:d7:6b:d2:79:d3:
         89:35:dd:20:56:f9:23:23:d6:c8:a8:08:2b:d3:34:a7:d0:1e:
         51:e6:f8:53:51:33:b8:b9:87:39:c2:35:7c:09:c7:64:b0:78:
         76:82:9d:07:ce:eb:84:27:c6:ab:9a:c0:c5:c8:73:d5:98:34:
         22:56:45:65:6c:53:3f:6e:35:cd:f0:31:13:2e:89:40:08:a4:
         e8:62:78:60:16:fb:a8:33:e6:98:41:56:9d:34:d0:ba:c1:bb:
         2e:47:e4:96:4d:58:e9:de:70:e7:6d:fa:5d:e4:63:cb:f6:d3:
         a7:d0:a9:0c:f6:a7:f0:ee:36:df:a4:f5:54:21:a9:cf:2a:43:
         e2:2b:76:70:fd:35:6d:b4:54:74:70:b1:82:e6:dd:89:f2:45:
         5f:9e:6f:44:10:4d:f4:ea:b2:f8:33:d5:5d:1d:f0:54:58:42:
         a7:c9:a0:49:b1:55:24:d4:a7:de:b1:23:8d:a9:1b:05:ce:9f:
         08:11:a7:44
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEWkKNZcu79NqhWLlcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQ2YmJlZjMtZWU5ZS00N2UxLTg4NjUtYjBiODYxYWUx
ZDgwMB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk
ZjgyYmMxYTUtOTYxOC00NGQ0LTk0ZGYtMmQ0N2Q0ZjQ0YzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhymaCh9iyFYTbjUcuY7K3yBDl6pRI5hnWLFQ
w1VG3q5wTyqppC4M5ESOc6FgkHMYta2T2t5jmtO2L9LaZCVKpgSt4dqelFbhGbJ4
SXq4K9ADcb/A/HvDZ2+P5P2sxugQxeGHAY8x5Sy5w/ZVBLznY0R/iqYesJLsHbAO
mt2lAYe3RORsI4ne6yfXoRndkoSfbumyjmL9glSytcif+5SGkd047KGphyTKl5TZ
b9DzVlnl2YiIBFdrkzFpg+Qp1mn58VRFBSHkW2CLgWGeYMnVD7tqD2BAfjM6TtaL
znS/XyaKErX07nFOtmgHDdbfvr+bMJVG6vEWIFuoLTk4m4NX0wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFHEiBDmLkqwTLHDr+tOPXIXgXm5fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZDZi
YmVmMy1lZTllLTQ3ZTEtODg2NS1iMGI4NjFhZTFkODAvOGZiYTNiNDYtMjU1NS0z
ZjllLWFhZTktZjgzY2EzYTVmNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWQ2YmJlZjMtZWU5ZS00N2UxLTg4
NjUtYjBiODYxYWUxZDgwLzlkNmJiZWYzLWVlOWUtNDdlMS04ODY1LWIwYjg2MWFl
MWQ4MC5jcmwwHwYDVR0jBBgwFoAULFpfynAq96ut7mZzGiYLZhFsvsUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZDZiYmVmMy1lZTllLTQ3ZTEtODg2NS1iMGI4
NjFhZTFkODAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5soMA4E
AgACMAgDBgAmAgLrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAClsLbOiK4c+aGPmy2H5YS+PTDMJymCOT/
BFN/hYXoBp3fw5ORRZTCVt7UoUSAYvVpAwYF4kcdnvbKheIKDdguoTNp12vSedOJ
Nd0gVvkjI9bIqAgr0zSn0B5R5vhTUTO4uYc5wjV8CcdksHh2gp0HzuuEJ8armsDF
yHPVmDQiVkVlbFM/bjXN8DETLolACKToYnhgFvuoM+aYQVadNNC6wbsuR+SWTVjp
3nDnbfpd5GPL9tOn0KkM9qfw7jbfpPVUIanPKkPiK3Zw/TVttFR0cLGC5t2J8kVf
nm9EEE306rL4M9VdHfBUWEKnyaBJsVUk1KfesSONqRsFzp8IEadE
-----END CERTIFICATE-----
Generated at Sat Jun 1 19:27:47 2024 by rpki-client on console-fra.rpki-client.org