Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa
File:                     a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa (raw, json)
Hash identifier:          G/sWcWh+lwkAAgqqOUcQwEh9pwboxmCfEgT9k26RTe4=
Subject key identifier:   F5:97:67:3F:D9:79:1E:33:50:3D:F8:40:5E:7B:B0:3D:14:0F:2A:D2
Certificate issuer:       /CN=23b53d83-5e68-43e6-b5fe-78a2c4546546
Certificate serial:       010D0C9F43285847DC18159A0F1B1007E7E5E1E0
Authority key identifier: FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa
Signing time:             Tue 12 Nov 2024 23:26:19 +0000
ROA not before:           Tue 12 Nov 2024 23:26:19 +0000
ROA not after:            Mon 10 Feb 2025 23:26:19 +0000
asID:                     13737
IP address blocks:        23.129.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:18:15:9a:0f:1b:10:07:e7:e5:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b53d83-5e68-43e6-b5fe-78a2c4546546
        Validity
            Not Before: Nov 12 23:26:19 2024 GMT
            Not After : Feb 10 23:26:19 2025 GMT
        Subject: CN=72b7bae6-1a68-40ae-8175-a2226b38c42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d2:9c:14:9d:b3:20:fc:f0:80:b0:6c:f1:69:
                    8e:60:c7:2e:c3:3a:03:6c:43:5e:a5:d3:24:bd:23:
                    0c:73:f1:97:98:43:db:c4:e2:e6:ce:95:c5:bc:20:
                    0f:5c:18:e3:67:3e:21:8b:52:ce:44:61:b9:65:f1:
                    12:65:4d:55:37:66:fb:62:04:cf:8d:3f:f2:c5:cd:
                    68:e8:d5:74:b6:ad:0b:32:50:50:9e:ed:53:11:34:
                    d4:50:4b:e5:88:71:84:a0:a0:bc:2b:71:59:4b:90:
                    66:74:33:f5:bd:ae:45:32:1f:01:6f:c8:9b:6b:40:
                    af:dd:3c:d6:73:b0:81:ca:27:84:72:47:04:1d:f0:
                    22:a6:67:26:13:2f:61:cf:b1:37:9a:57:ad:74:b1:
                    6b:f4:87:15:35:19:91:43:f2:01:0a:a8:e9:b3:23:
                    ef:50:28:f7:1a:4a:b8:23:6b:03:6c:0a:42:40:8c:
                    18:22:44:61:60:9c:7b:15:e0:6d:4e:8d:81:d2:36:
                    9d:f6:48:32:a0:88:e1:69:0b:e7:01:2e:ba:bd:86:
                    4f:5f:34:25:54:a3:86:ac:0a:55:72:75:3b:42:f2:
                    17:58:ea:11:aa:68:ab:88:9d:0e:c4:ed:18:c1:08:
                    37:a6:d5:ce:f5:3a:5b:70:2f:ab:ed:56:14:54:0e:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:97:67:3F:D9:79:1E:33:50:3D:F8:40:5E:7B:B0:3D:14:0F:2A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/a6cd363a-959a-3a6b-99fa-8aa2aca71dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546/23b53d83-5e68-43e6-b5fe-78a2c4546546.crl

            X509v3 Authority Key Identifier:
                keyid:FA:FF:BC:ED:DD:AF:93:9B:52:8D:1C:1F:A7:27:FC:DD:92:90:DE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/23b53d83-5e68-43e6-b5fe-78a2c4546546.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:af:b2:03:d5:b7:36:91:85:25:ca:22:7e:a6:67:fe:cc:
         7e:89:79:96:26:b8:86:f9:9d:16:4e:99:a5:87:10:15:97:bf:
         16:e2:70:7b:df:aa:4c:57:16:16:2e:be:b2:92:59:5a:3d:67:
         a1:5c:8a:6f:2a:df:f3:68:08:f2:ce:fc:b0:3b:84:dd:49:d6:
         53:29:8f:66:bf:75:5f:22:be:f4:95:12:5f:61:f4:22:98:54:
         2e:16:b3:21:08:98:bb:7d:1e:04:95:03:b7:e1:49:46:74:50:
         1b:2d:0f:73:d3:bd:a0:1b:ed:fd:80:77:c1:4a:88:7c:bb:a7:
         6d:3c:b6:cd:0d:3a:d0:35:30:0f:be:19:bc:30:e2:5d:3d:de:
         c9:a2:65:5c:b5:35:75:3a:a2:8e:9c:38:d9:e7:54:93:d3:5d:
         de:1e:5a:30:fb:0f:5f:d6:ad:f4:89:3e:87:34:0e:84:f5:4b:
         fa:9e:28:fb:71:68:a2:4a:d5:27:9e:1e:f2:ee:11:e2:e5:dd:
         02:84:57:27:91:86:9e:af:12:11:32:87:1d:69:cc:ab:b1:b7:
         f7:3d:5f:66:1a:41:e0:2f:e3:01:74:98:99:04:4d:23:65:8b:
         14:55:f7:c1:b7:6a:fc:ce:fa:cd:62:ca:e4:bf:54:c0:88:45:
         27:5a:0a:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcGBWaDxsQB+fl4eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNiNTNkODMtNWU2OC00M2U2LWI1ZmUtNzhhMmM0NTQ2
NTQ2MB4XDTI0MTExMjIzMjYxOVoXDTI1MDIxMDIzMjYxOVowLzEtMCsGA1UEAxMk
NzJiN2JhZTYtMWE2OC00MGFlLTgxNzUtYTIyMjZiMzhjNDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tKcFJ2zIPzwgLBs8WmOYMcuwzoDbENepdMk
vSMMc/GXmEPbxOLmzpXFvCAPXBjjZz4hi1LORGG5ZfESZU1VN2b7YgTPjT/yxc1o
6NV0tq0LMlBQnu1TETTUUEvliHGEoKC8K3FZS5BmdDP1va5FMh8Bb8iba0Cv3TzW
c7CByieEckcEHfAipmcmEy9hz7E3mletdLFr9IcVNRmRQ/IBCqjpsyPvUCj3Gkq4
I2sDbApCQIwYIkRhYJx7FeBtTo2B0jad9kgyoIjhaQvnAS66vYZPXzQlVKOGrApV
cnU7QvIXWOoRqmiriJ0OxO0YwQg3ptXO9TpbcC+r7VYUVA7hvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWXZz/ZeR4zUD34QF57sD0UDyrSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1
M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEyYzQ1NDY1NDYvYTZjZDM2M2EtOTU5YS0z
YTZiLTk5ZmEtOGFhMmFjYTcxZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjNiNTNkODMtNWU2OC00M2U2LWI1
ZmUtNzhhMmM0NTQ2NTQ2LzIzYjUzZDgzLTVlNjgtNDNlNi1iNWZlLTc4YTJjNDU0
NjU0Ni5jcmwwHwYDVR0jBBgwFoAU+v+87d2vk5tSjRwfpyf83ZKQ3iswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yM2I1M2Q4My01ZTY4LTQzZTYtYjVmZS03OGEy
YzQ1NDY1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALkr7ID1bc2kYUlyiJ+pmf+zH6JeZYmuIb5nRZOmaWHEBWXvxbicHvf
qkxXFhYuvrKSWVo9Z6Fcim8q3/NoCPLO/LA7hN1J1lMpj2a/dV8ivvSVEl9h9CKY
VC4WsyEImLt9HgSVA7fhSUZ0UBstD3PTvaAb7f2Ad8FKiHy7p208ts0NOtA1MA++
Gbww4l093smiZVy1NXU6oo6cONnnVJPTXd4eWjD7D1/WrfSJPoc0DoT1S/qeKPtx
aKJK1SeeHvLuEeLl3QKEVyeRhp6vEhEyhx1pzKuxt/c9X2YaQeAv4wF0mJkETSNl
ixRV98G3avzO+s1iyuS/VMCIRSdaCpg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:16 2024 by rpki-client on console-ams.rpki-client.org