Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa
File:                     c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa (raw, json)
Hash identifier:          MMZ2NzI/ltFIhYTZZZzo+sbgO52RVc2SENWik35CCzQ=
Subject key identifier:   BC:84:1E:89:8B:05:FF:9C:EB:90:B8:F3:6A:D7:F2:C9:49:89:90:EB
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F43285847C1DF5FE5033EDCC46889C800
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     14618
IP address blocks:        23.161.104.0/24 maxlen: 24
                          2620:be:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:5f:e5:03:3e:dc:c4:68:89:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=af670887-3f75-48d2-8c37-d246266d5830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:7b:fd:5f:61:06:57:ed:1b:c7:ae:76:48:
                    2a:a5:86:54:73:1c:32:c5:d7:a8:9a:15:d3:26:9a:
                    ad:a8:6b:b6:6d:b9:e8:56:22:fb:04:6c:8d:b1:c4:
                    0b:24:06:78:d3:28:95:10:73:a3:b5:05:08:38:6c:
                    4b:7a:71:2c:be:59:0b:f8:09:4d:e1:90:da:47:8f:
                    7c:66:53:a6:ab:de:0a:b6:06:08:6c:c7:21:ae:a0:
                    0b:13:1b:4e:d8:89:e7:78:7a:ef:1a:e6:02:a4:38:
                    cc:af:09:40:4c:63:ad:8a:81:c1:4d:df:60:25:70:
                    08:96:e1:00:83:52:3e:d8:b1:ec:13:1a:d6:b8:f2:
                    b1:6c:b9:a5:95:e8:95:95:8b:6b:55:8e:fa:3e:41:
                    10:93:89:f3:12:13:d1:06:36:f5:be:a4:ef:77:b7:
                    f8:54:c8:a1:bc:0e:ee:bf:17:20:fb:fd:9b:1e:c9:
                    0a:7c:4b:09:2c:83:a9:ea:be:05:39:a7:1f:1d:7a:
                    05:46:be:2c:5a:c3:2b:72:4c:b4:a0:61:02:eb:4f:
                    86:7c:55:21:5b:0d:45:ab:ed:86:ab:43:7f:24:3e:
                    ce:0c:6f:a2:88:c4:9c:08:bd:e5:a5:44:f4:52:29:
                    ec:f2:c2:05:21:a8:ce:bc:8a:97:ae:76:b2:2e:9b:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:84:1E:89:8B:05:FF:9C:EB:90:B8:F3:6A:D7:F2:C9:49:89:90:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c3ae80e4-1ad6-394c-8b18-b6d5d6b643ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.104.0/24
                IPv6:
                  2620:be:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:55:5f:c9:f6:eb:26:1e:1c:37:e8:c3:fb:48:3a:62:d2:
         3d:60:53:e0:e3:ce:92:cd:69:15:58:9d:84:98:b5:34:ec:03:
         4c:ff:60:3e:be:26:6e:54:79:3b:6a:ab:db:84:99:75:09:15:
         f5:3a:78:49:c5:30:c0:4a:ec:06:b1:71:c6:c5:76:a3:7e:09:
         28:3d:77:a8:6d:33:c4:0d:99:d1:7f:fd:a1:a3:db:de:6d:83:
         64:af:7a:27:a8:2b:00:70:fb:0f:6f:51:bd:a1:17:c8:d0:67:
         32:a5:ac:33:c3:83:78:2d:8f:11:4d:d9:35:fc:20:23:58:93:
         08:98:bc:ee:f3:24:c6:66:9c:59:c8:c9:11:f4:09:dd:07:9f:
         51:6c:e3:71:fb:ab:6a:09:b0:72:ce:2f:0f:6a:5a:43:7b:3c:
         ae:cb:22:d7:da:23:6b:05:76:da:50:58:4f:b3:88:e0:28:d7:
         2c:38:7a:05:8f:df:ef:db:3c:ec:a3:2c:60:49:17:c4:49:ff:
         b8:ce:5e:17:55:06:48:d1:9e:fa:a9:7f:1a:a4:07:cb:14:54:
         0d:ea:cf:51:c0:7f:65:54:a9:ba:55:fb:8b:20:41:cd:cd:7a:
         5c:25:0d:f7:3f:a4:31:88:76:cf:fb:45:fd:66:6e:40:04:24:
         7f:63:b5:90
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEfB31/lAz7cxGiJyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQyMGJhYjEtMTFlZi00ZjQyLWE3MTgtYzBiNzI3ZGZj
MmY4MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk
YWY2NzA4ODctM2Y3NS00OGQyLThjMzctZDI0NjI2NmQ1ODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolV7/V9hBlftG8eudkgqpYZUcxwyxdeomhXT
JpqtqGu2bbnoViL7BGyNscQLJAZ40yiVEHOjtQUIOGxLenEsvlkL+AlN4ZDaR498
ZlOmq94KtgYIbMchrqALExtO2InneHrvGuYCpDjMrwlATGOtioHBTd9gJXAIluEA
g1I+2LHsExrWuPKxbLmlleiVlYtrVY76PkEQk4nzEhPRBjb1vqTvd7f4VMihvA7u
vxcg+/2bHskKfEsJLIOp6r4FOacfHXoFRr4sWsMrcky0oGEC60+GfFUhWw1Fq+2G
q0N/JD7ODG+iiMScCL3lpUT0Uins8sIFIajOvIqXrnayLpvGmwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLyEHomLBf+c65C482rX8slJiZDrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDIw
YmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3MjdkZmMyZjgvYzNhZTgwZTQtMWFkNi0z
OTRjLThiMTgtYjZkNWQ2YjY0M2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQyMGJhYjEtMTFlZi00ZjQyLWE3
MTgtYzBiNzI3ZGZjMmY4L2FkMjBiYWIxLTExZWYtNGY0Mi1hNzE4LWMwYjcyN2Rm
YzJmOC5jcmwwHwYDVR0jBBgwFoAUt/Jr1nLOfEAA2aZun6Gx8MAiAHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDIwYmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3
MjdkZmMyZjguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6FoMA8E
AgACMAkDBwAmIAC+oAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg8JVX8n26yYeHDfow/tIOmLSPWBT4OPO
ks1pFVidhJi1NOwDTP9gPr4mblR5O2qr24SZdQkV9Tp4ScUwwErsBrFxxsV2o34J
KD13qG0zxA2Z0X/9oaPb3m2DZK96J6grAHD7D29RvaEXyNBnMqWsM8ODeC2PEU3Z
NfwgI1iTCJi87vMkxmacWcjJEfQJ3QefUWzjcfuragmwcs4vD2paQ3s8rssi19oj
awV22lBYT7OI4CjXLDh6BY/f79s87KMsYEkXxEn/uM5eF1UGSNGe+ql/GqQHyxRU
DerPUcB/ZVSpulX7iyBBzc16XCUN9z+kMYh2z/tF/WZuQAQkf2O1kA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:07 2024 by rpki-client on console-ams.rpki-client.org