Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa
File:                     6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa (raw, json)
Hash identifier:          1PAujFqUNJUvVafAJk0pcxtIQfgpUX8+1+GEwDuo03Q=
Subject key identifier:   60:F4:0B:85:3E:20:56:0D:7D:F4:86:A0:FE:FB:6F:A5:5E:0E:B5:93
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F43285847E411F2F5A2E26EB174725560
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa
Signing time:             Fri 15 Nov 2024 20:00:25 +0000
ROA not before:           Fri 15 Nov 2024 20:00:25 +0000
ROA not after:            Thu 13 Feb 2025 20:00:25 +0000
asID:                     62553
IP address blocks:        23.129.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:11:f2:f5:a2:e2:6e:b1:74:72:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Nov 15 20:00:25 2024 GMT
            Not After : Feb 13 20:00:25 2025 GMT
        Subject: CN=34ca92be-c862-403d-b4a8-f7b34c6d56d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:ca:e5:3c:92:dd:35:d2:8b:7d:f6:bb:b4:
                    5b:a7:13:50:04:2f:a7:84:30:f3:b5:56:8f:78:44:
                    49:05:6e:31:e9:c0:af:8e:4e:41:dc:94:08:55:3d:
                    33:ec:69:d0:82:e2:d3:b4:e9:ed:81:b8:65:ab:4d:
                    eb:4f:05:d9:d2:4c:3c:c2:81:2d:42:85:e4:96:2d:
                    80:45:56:63:8e:f1:d1:c7:e8:58:53:8d:85:51:4a:
                    85:2c:69:e3:11:e1:41:3c:d1:ce:54:b5:a9:97:7d:
                    ea:51:58:29:48:b9:19:29:55:d8:66:eb:f7:48:1a:
                    a3:9c:0e:af:fb:61:0e:6c:30:11:3d:d3:fe:51:5c:
                    9b:53:c3:b1:9c:bb:c6:79:21:55:eb:78:a6:90:b2:
                    9f:ef:ac:c5:e3:f0:db:23:7b:b1:ed:2d:0d:37:34:
                    92:db:70:25:3b:b2:ca:9c:3d:ee:cf:37:a7:28:5d:
                    66:21:53:49:72:68:87:0b:22:10:93:1c:54:a1:67:
                    ed:f6:69:4a:16:ad:60:44:69:26:9e:86:c1:ee:a8:
                    3c:85:f6:68:c0:e5:25:99:43:27:fc:bb:2f:fe:3a:
                    68:71:6d:be:ef:8b:63:48:9f:7c:bc:3a:c2:4d:6f:
                    be:e0:e9:3e:99:e1:e6:f8:29:d0:65:22:71:57:fd:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F4:0B:85:3E:20:56:0D:7D:F4:86:A0:FE:FB:6F:A5:5E:0E:B5:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b1:81:e2:60:05:46:40:58:a5:0f:35:a7:bc:27:40:2d:38:
         d5:55:19:9b:3e:4a:5a:3b:52:01:0d:41:80:c7:33:a4:37:13:
         ba:90:4b:d8:c7:a9:5d:15:08:4f:ef:06:15:c7:f6:b3:e3:a5:
         e5:87:47:c3:da:df:11:5d:83:57:26:b2:9a:fe:19:02:92:26:
         95:0a:4d:d2:2b:b3:50:00:9c:1f:8e:ff:de:80:7c:23:fb:b5:
         65:46:0e:81:9c:75:a5:55:55:78:d7:68:5a:65:e5:17:bc:19:
         84:32:53:a2:04:2f:e0:70:69:60:c1:30:b7:3b:b9:35:58:34:
         8a:ee:8e:86:c4:e4:42:8d:20:56:06:a0:39:9c:7b:83:77:aa:
         ed:18:3c:1d:0f:31:13:3e:87:29:0b:dc:26:5b:d0:8e:ef:2c:
         1a:05:10:00:9d:64:05:72:40:3f:c1:9f:6d:e2:95:01:bd:7d:
         3c:1b:66:22:bf:61:96:33:33:ba:53:5a:54:6e:64:3c:0a:f7:
         02:e3:63:5e:90:4c:25:09:4f:69:a4:28:e4:d1:3b:15:d8:bc:
         1a:8d:92:f1:bf:17:c4:f5:bc:1c:85:28:5b:61:f2:b3:c7:49:
         ae:b0:0b:01:d3:61:8d:8b:25:4d:c3:2e:40:6b:74:f7:3c:06:
         b7:e8:58:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfkEfL1ouJusXRyVWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4
ZTljMB4XDTI0MTExNTIwMDAyNVoXDTI1MDIxMzIwMDAyNVowLzEtMCsGA1UEAxMk
MzRjYTkyYmUtYzg2Mi00MDNkLWI0YTgtZjdiMzRjNmQ1NmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b3K5TyS3TXSi332u7RbpxNQBC+nhDDztVaP
eERJBW4x6cCvjk5B3JQIVT0z7GnQguLTtOntgbhlq03rTwXZ0kw8woEtQoXkli2A
RVZjjvHRx+hYU42FUUqFLGnjEeFBPNHOVLWpl33qUVgpSLkZKVXYZuv3SBqjnA6v
+2EObDARPdP+UVybU8OxnLvGeSFV63imkLKf76zF4/DbI3ux7S0NNzSS23AlO7LK
nD3uzzenKF1mIVNJcmiHCyIQkxxUoWft9mlKFq1gRGkmnobB7qg8hfZowOUlmUMn
/Lsv/jpocW2+74tjSJ98vDrCTW++4Ok+meHm+CnQZSJxV/0AKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGD0C4U+IFYNffSGoP77b6VeDrWTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3
ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvNmEzYjZlNTMtZWUzOS0z
ZmU4LTgyMjUtZDBkMWU2MTA2N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4
YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw
OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1
YzZmMDhlOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4FkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABexgeJgBUZAWKUPNae8J0AtONVVGZs+Slo7UgENQYDHM6Q3E7qQS9jH
qV0VCE/vBhXH9rPjpeWHR8Pa3xFdg1cmspr+GQKSJpUKTdIrs1AAnB+O/96AfCP7
tWVGDoGcdaVVVXjXaFpl5Re8GYQyU6IEL+BwaWDBMLc7uTVYNIrujobE5EKNIFYG
oDmce4N3qu0YPB0PMRM+hykL3CZb0I7vLBoFEACdZAVyQD/Bn23ilQG9fTwbZiK/
YZYzM7pTWlRuZDwK9wLjY16QTCUJT2mkKOTROxXYvBqNkvG/F8T1vByFKFth8rPH
Sa6wCwHTYY2LJU3DLkBrdPc8BrfoWPY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:27 2024 by rpki-client on console-fra.rpki-client.org