Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/e96efe91-68e4-352f-9fcd-f40615a19479.roa
File:                     e96efe91-68e4-352f-9fcd-f40615a19479.roa (raw, json)
Hash identifier:          +/SVlIqLiewdXR+B+1/DXDLq3tykJ7fJwJqoqJ2Fvvw=
Subject key identifier:   C0:87:15:3C:69:A9:9E:5A:58:0B:15:AF:3E:01:EB:3E:B6:10:BB:14
Certificate issuer:       /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
Certificate serial:       010D0C9F432858479879D814D97B2E570903AE00
Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/e96efe91-68e4-352f-9fcd-f40615a19479.roa
Signing time:             Sat 19 Oct 2024 18:08:19 +0000
ROA not before:           Sat 19 Oct 2024 18:08:19 +0000
ROA not after:            Fri 17 Jan 2025 19:08:19 +0000
asID:                     400789
IP address blocks:        23.140.152.0/24 maxlen: 24
                          130.51.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:98:79:d8:14:d9:7b:2e:57:09:03:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
        Validity
            Not Before: Oct 19 18:08:19 2024 GMT
            Not After : Jan 17 19:08:19 2025 GMT
        Subject: CN=3d0df707-3113-4dce-b0eb-f28c9bc2b26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:ac:08:1d:10:60:90:20:88:67:03:21:0d:
                    28:25:97:61:c2:9c:a2:f3:a6:ef:15:62:89:7d:70:
                    02:92:54:f6:09:a3:3e:c5:32:09:3a:2f:56:83:2b:
                    6d:95:76:04:81:b1:8d:ce:78:8c:ac:eb:5e:c0:0f:
                    7b:8b:17:a1:99:5e:72:76:85:6c:ef:d3:0a:c6:59:
                    b3:20:47:a4:e2:a4:7b:cb:9e:07:25:dc:84:8d:f6:
                    21:6d:1a:c1:3e:75:ca:9b:e6:ac:10:36:83:25:6d:
                    f6:ed:3c:33:8a:88:7c:e4:1c:6a:ad:8b:95:95:94:
                    0a:b4:29:ab:1a:9d:75:66:4d:5f:4b:a3:36:f8:5a:
                    3f:fe:f5:14:36:a3:52:1a:55:f7:a2:ea:0a:26:44:
                    57:ea:d4:ca:3f:20:37:6f:0c:47:db:f2:0a:58:a4:
                    af:a5:c4:1e:83:1a:5b:6a:ba:4c:67:c9:5c:77:d4:
                    94:92:c8:6d:f3:cf:d1:e4:3e:b5:c5:77:d9:65:7e:
                    84:c1:96:2d:cd:f2:ba:03:de:62:e6:9e:98:9a:ec:
                    e6:a4:e9:bb:7e:2e:71:1a:e0:25:c7:19:3a:60:53:
                    70:4a:5a:a0:58:8d:4a:aa:ef:f1:27:c9:a7:5e:70:
                    c3:18:5d:de:ad:86:ab:b7:7e:db:99:0a:ba:e5:5b:
                    aa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:87:15:3C:69:A9:9E:5A:58:0B:15:AF:3E:01:EB:3E:B6:10:BB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/e96efe91-68e4-352f-9fcd-f40615a19479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl

            X509v3 Authority Key Identifier:
                keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.152.0/24
                  130.51.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:bd:06:01:51:05:94:55:31:62:16:e6:11:29:f4:fb:05:7f:
         1a:11:bd:3e:3a:6e:10:84:7b:8f:9b:a4:7f:39:28:99:62:2c:
         b8:19:28:55:45:e3:02:f5:89:ce:fc:84:43:49:e1:65:2c:0c:
         d6:6a:76:1a:e6:18:bb:cc:45:12:15:09:6b:42:bb:c2:bd:03:
         18:67:75:56:40:c6:e5:29:94:0a:91:98:dc:09:63:17:bb:ad:
         5a:96:f3:3a:dc:d8:f5:04:f0:2a:27:33:21:38:a6:4c:21:99:
         40:de:f2:9a:67:54:c3:e7:ad:00:26:0e:65:7e:ae:91:f2:53:
         62:cf:6a:b1:cd:49:d4:45:b6:f9:22:cf:c8:d0:f5:bf:e0:24:
         5c:1c:06:f5:8f:c2:b4:a9:53:43:db:9b:5f:f7:42:4d:49:13:
         c1:e2:92:ab:81:5d:2b:c0:21:2b:fe:54:4f:f0:d3:3b:50:01:
         b4:8a:51:4f:fd:20:85:66:85:a5:90:44:8e:84:30:92:ea:43:
         95:23:62:5c:4d:7c:36:19:4b:21:93:64:55:2b:17:84:cf:b6:
         7d:78:24:bc:d5:1e:73:69:2a:ca:d2:18:90:b4:43:8a:83:a2:
         5b:68:81:ff:bd:9a:ea:d7:8c:a6:40:15:74:22:38:76:bd:ff:
         8e:2f:ba:b3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEeYedgU2XsuVwkDrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzExZTAwMzktNmI3Yy00MmYyLWE3NmUtMzk1YjUxZDll
Yzk3MB4XDTI0MTAxOTE4MDgxOVoXDTI1MDExNzE5MDgxOVowLzEtMCsGA1UEAxMk
M2QwZGY3MDctMzExMy00ZGNlLWIwZWItZjI4YzliYzJiMjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2WsCB0QYJAgiGcDIQ0oJZdhwpyi86bvFWKJ
fXACklT2CaM+xTIJOi9WgyttlXYEgbGNzniMrOtewA97ixehmV5ydoVs79MKxlmz
IEek4qR7y54HJdyEjfYhbRrBPnXKm+asEDaDJW327Twzioh85BxqrYuVlZQKtCmr
Gp11Zk1fS6M2+Fo//vUUNqNSGlX3ouoKJkRX6tTKPyA3bwxH2/IKWKSvpcQegxpb
arpMZ8lcd9SUksht88/R5D61xXfZZX6EwZYtzfK6A95i5p6YmuzmpOm7fi5xGuAl
xxk6YFNwSlqgWI1Kqu/xJ8mnXnDDGF3erYart37bmQq65VuqfwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMCHFTxpqZ5aWAsVrz4B6z62ELsUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFl
MDAzOS02YjdjLTQyZjItYTc2ZS0zOTViNTFkOWVjOTcvZTk2ZWZlOTEtNjhlNC0z
NTJmLTlmY2QtZjQwNjE1YTE5NDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzExZTAwMzktNmI3Yy00MmYyLWE3
NmUtMzk1YjUxZDllYzk3LzMxMWUwMDM5LTZiN2MtNDJmMi1hNzZlLTM5NWI1MWQ5
ZWM5Ny5jcmwwHwYDVR0jBBgwFoAUmpCZekdKmKShJIlBVZC+fLdUNXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFlMDAzOS02YjdjLTQyZjItYTc2ZS0zOTVi
NTFkOWVjOTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4yYAwQB
gjN8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJS9BgFRBZRVMWIW5hEp9PsFfxoRvT46bhCEe4+bpH85KJli
LLgZKFVF4wL1ic78hENJ4WUsDNZqdhrmGLvMRRIVCWtCu8K9AxhndVZAxuUplAqR
mNwJYxe7rVqW8zrc2PUE8ConMyE4pkwhmUDe8ppnVMPnrQAmDmV+rpHyU2LParHN
SdRFtvkiz8jQ9b/gJFwcBvWPwrSpU0Pbm1/3Qk1JE8HikquBXSvAISv+VE/w0ztQ
AbSKUU/9IIVmhaWQRI6EMJLqQ5UjYlxNfDYZSyGTZFUrF4TPtn14JLzVHnNpKsrS
GJC0Q4qDoltogf+9murXjKZAFXQiOHa9/44vurM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:15 2024 by rpki-client on console-fra.rpki-client.org