Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/09476bae-0a86-3a52-a955-9f66d55d1b8c.roa
File:                     09476bae-0a86-3a52-a955-9f66d55d1b8c.roa (raw, json)
Hash identifier:          wMawv3kAc0+NZ3OF4zDEo3Ki8zyWuvA+HdLG0o4FHrk=
Subject key identifier:   FC:CB:86:45:D7:18:B4:01:7B:48:40:C4:5B:3F:57:02:AD:6E:E9:AC
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584582A891A01954F230656AB680
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/09476bae-0a86-3a52-a955-9f66d55d1b8c.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     397423
IP address blocks:        23.144.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:91:a0:19:54:f2:30:65:6a:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=7e8eb4bf-a29f-41d6-9d1f-2b44b960a4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:9f:d2:98:6e:42:53:2d:46:24:31:b8:94:
                    85:a4:88:7a:f7:76:df:93:73:a1:54:59:e5:09:72:
                    cf:17:0e:bb:59:af:3b:97:40:17:15:a5:33:67:19:
                    4f:f3:41:1d:d9:30:37:8c:1f:20:82:18:98:ea:79:
                    16:c5:f7:5b:3a:8e:45:4d:20:09:e9:20:e5:3c:a8:
                    fe:dd:a0:76:a9:8f:7c:3c:3f:78:2e:97:85:f2:f3:
                    9f:34:9b:02:0c:d5:26:82:0c:39:3d:c7:5b:0b:c9:
                    77:6b:cc:60:9a:69:a5:96:7b:44:28:92:7e:5e:79:
                    94:20:17:e0:ff:f1:4a:4d:f2:7c:f2:d8:1e:63:36:
                    e7:80:ff:e6:b8:b5:d4:23:de:4d:1e:f2:a8:97:1a:
                    5b:fa:15:e7:f7:a0:ab:2c:2f:cd:ac:3f:cd:78:3a:
                    fc:8f:9d:0f:d6:30:03:e9:65:69:d9:2c:03:76:ee:
                    80:ee:a0:ad:d0:f6:70:0b:0c:87:90:43:30:96:4d:
                    79:a2:fe:2b:d5:59:70:24:86:cb:83:8f:ac:5b:0c:
                    dd:3a:a3:0b:73:77:92:3f:0e:65:a0:16:72:e2:ea:
                    84:60:b4:80:55:2d:09:c7:6d:ec:ea:65:a5:fb:4d:
                    7a:1b:e8:61:00:73:d7:24:f1:0a:4f:d5:f6:0e:5a:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CB:86:45:D7:18:B4:01:7B:48:40:C4:5B:3F:57:02:AD:6E:E9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/09476bae-0a86-3a52-a955-9f66d55d1b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:e0:01:fc:d9:40:cb:51:45:e2:d4:08:f3:6b:28:b0:22:
         92:aa:e1:ab:59:14:39:41:b8:4b:6e:2b:f8:2d:3d:f5:a5:04:
         d7:4a:96:9a:da:7c:37:1a:36:2d:07:f9:88:e6:1c:ca:c6:d2:
         9a:16:20:df:d7:91:e7:2a:7b:4e:37:2a:9a:ef:b5:de:b0:36:
         b3:e4:c3:de:cc:8e:0c:67:5f:02:89:7f:2c:58:88:26:10:59:
         3e:d3:03:29:fb:b9:6e:de:ca:62:39:a1:66:c5:69:7d:40:f6:
         1a:28:3f:d1:6f:9f:e1:0a:5a:ee:65:42:17:54:9e:54:fa:18:
         21:3b:81:f1:65:89:45:2a:a7:c2:b0:dc:d0:5c:7d:5e:77:84:
         8e:0e:0c:e4:3c:26:bc:b7:7f:be:07:4e:d5:12:ed:f5:c2:e2:
         2c:0c:56:57:15:16:7d:ff:eb:29:c0:56:d2:0c:89:a6:e5:81:
         3b:32:00:34:1e:3e:86:54:f6:52:63:fe:1f:6c:90:af:60:ae:
         46:e4:0d:62:80:a1:ad:1c:06:d1:1c:a7:13:32:22:83:f3:a1:
         3f:6b:1e:ac:4c:89:96:8b:50:70:56:42:b9:fa:17:b9:b1:f1:
         98:68:26:1b:05:07:fa:36:6e:98:c1:66:cb:45:c1:00:80:73:
         fe:f6:f5:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqJGgGVTyMGVqtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIyZmRiMjctZTRmZS00ZDgxLTliZjQtZTEzYjFkYWY3
ZjUxMB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
N2U4ZWI0YmYtYTI5Zi00MWQ2LTlkMWYtMmI0NGI5NjBhNGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+ef0phuQlMtRiQxuJSFpIh693bfk3OhVFnl
CXLPFw67Wa87l0AXFaUzZxlP80Ed2TA3jB8gghiY6nkWxfdbOo5FTSAJ6SDlPKj+
3aB2qY98PD94LpeF8vOfNJsCDNUmggw5PcdbC8l3a8xgmmmllntEKJJ+XnmUIBfg
//FKTfJ88tgeYzbngP/muLXUI95NHvKolxpb+hXn96CrLC/NrD/NeDr8j50P1jAD
6WVp2SwDdu6A7qCt0PZwCwyHkEMwlk15ov4r1VlwJIbLg4+sWwzdOqMLc3eSPw5l
oBZy4uqEYLSAVS0Jx23s6mWl+016G+hhAHPXJPEKT9X2DloQ4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPzLhkXXGLQBe0hAxFs/VwKtbumsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJm
ZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNiMWRhZjdmNTEvMDk0NzZiYWUtMGE4Ni0z
YTUyLWE5NTUtOWY2NmQ1NWQxYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIyZmRiMjctZTRmZS00ZDgxLTli
ZjQtZTEzYjFkYWY3ZjUxL2EyMmZkYjI3LWU0ZmUtNGQ4MS05YmY0LWUxM2IxZGFm
N2Y1MS5jcmwwHwYDVR0jBBgwFoAUt1cVv4naXOAxdOzv9stZsvi4OkAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJmZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNi
MWRhZjdmNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5A4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqZ4AH82UDLUUXi1AjzayiwIpKq4atZFDlBuEtuK/gtPfWlBNdKlpra
fDcaNi0H+YjmHMrG0poWIN/Xkecqe043Kprvtd6wNrPkw97MjgxnXwKJfyxYiCYQ
WT7TAyn7uW7eymI5oWbFaX1A9hooP9Fvn+EKWu5lQhdUnlT6GCE7gfFliUUqp8Kw
3NBcfV53hI4ODOQ8Jry3f74HTtUS7fXC4iwMVlcVFn3/6ynAVtIMiablgTsyADQe
PoZU9lJj/h9skK9grkbkDWKAoa0cBtEcpxMyIoPzoT9rHqxMiZaLUHBWQrn6F7mx
8ZhoJhsFB/o2bpjBZstFwQCAc/729fY=
-----END CERTIFICATE-----
Generated at Sat May 4 12:54:19 2024 by rpki-client on console-fra.rpki-client.org