Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/0841a164-eb24-3e16-b26c-b6097229b9c6.roa
File:                     0841a164-eb24-3e16-b26c-b6097229b9c6.roa (raw, json)
Hash identifier:          zFDA4J84dv8O8ZIEs8hvr+K+0XnjpLqAkBL4HC7evvQ=
Subject key identifier:   27:6E:A4:95:E5:00:5D:C6:1A:52:90:F4:F3:4F:78:C1:F5:AE:99:6C
Certificate issuer:       /CN=4329caf6-7e2a-4a02-a21f-b6259ecf6b9d
Certificate serial:       010D0C9F4328584700BA25058B664BC17008AF00
Authority key identifier: 53:3D:C8:D5:05:9E:04:3E:F8:66:08:B5:AC:3B:BA:95:6F:E6:DB:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/0841a164-eb24-3e16-b26c-b6097229b9c6.roa
Signing time:             Mon 26 Aug 2024 09:35:00 +0000
ROA not before:           Mon 26 Aug 2024 09:35:00 +0000
ROA not after:            Sun 24 Nov 2024 10:35:00 +0000
asID:                     396982
IP address blocks:        192.207.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:00:ba:25:05:8b:66:4b:c1:70:08:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329caf6-7e2a-4a02-a21f-b6259ecf6b9d
        Validity
            Not Before: Aug 26 09:35:00 2024 GMT
            Not After : Nov 24 10:35:00 2024 GMT
        Subject: CN=a50c398d-ba42-4b9f-9ee8-9caf3d693b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:33:2b:e6:c6:a8:c9:4e:b1:f3:dc:25:68:c9:
                    2f:66:46:a0:b3:6a:48:80:ee:d4:1c:0a:41:23:46:
                    5e:7e:c4:b5:dc:7d:46:ab:ba:c2:09:18:5d:d1:2a:
                    a5:6a:36:11:e9:bc:4f:90:fd:90:5c:e1:dd:0b:63:
                    0d:50:6e:c1:4c:fa:dd:c8:7c:61:6e:37:5d:8d:fd:
                    ff:29:79:84:73:69:23:8c:f3:28:7a:67:b0:13:22:
                    64:4c:ea:b1:a7:c1:8e:6c:96:0d:40:61:67:f2:39:
                    e8:c6:33:40:53:4a:49:91:32:1e:d7:b4:91:b4:3e:
                    02:31:ee:ec:55:39:ff:e9:3b:3b:11:40:fd:d5:0f:
                    2d:5f:65:10:ab:85:c0:51:da:64:e2:1a:87:4a:7b:
                    9c:52:44:6c:dc:34:33:10:7f:6a:31:70:50:1c:58:
                    bb:f0:4b:83:78:f4:e4:d7:01:da:0e:40:ef:15:83:
                    87:84:03:12:77:fc:06:b8:ed:c6:16:b2:27:76:8e:
                    79:63:c0:9a:20:c9:8e:63:d4:b6:5e:28:c0:26:3e:
                    32:28:e9:29:00:3e:8f:a1:64:19:c3:e3:d6:b7:fd:
                    ea:71:c1:47:83:65:cb:de:be:ee:84:df:51:2a:d5:
                    15:7f:30:8a:05:95:ac:e5:99:ff:55:ca:19:ed:88:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6E:A4:95:E5:00:5D:C6:1A:52:90:F4:F3:4F:78:C1:F5:AE:99:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/0841a164-eb24-3e16-b26c-b6097229b9c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.crl

            X509v3 Authority Key Identifier:
                keyid:53:3D:C8:D5:05:9E:04:3E:F8:66:08:B5:AC:3B:BA:95:6F:E6:DB:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:df:df:21:79:8b:63:5d:c7:63:c8:8f:34:e8:ed:2d:54:22:
         03:82:51:68:1b:f5:c4:6f:af:f3:6f:30:4d:b1:88:4b:04:04:
         21:bb:62:3e:40:3f:4a:1c:7b:4e:f8:6b:5b:27:e6:14:65:e9:
         90:8c:4d:a8:fb:d6:bd:8c:d7:c8:b8:45:f3:62:9b:bd:0c:c8:
         ca:2f:94:5b:76:b6:3c:1a:8c:73:8a:4d:97:d8:ee:a5:fd:c2:
         5c:85:ee:4c:f2:f0:bb:b1:f9:86:6d:5a:65:b3:43:e0:26:65:
         9f:14:51:df:73:f5:43:a7:7e:0e:17:3d:8c:36:16:8a:43:1f:
         2d:91:5d:7a:04:a5:48:5e:a5:ce:73:7e:76:99:99:27:a8:33:
         fd:96:22:2a:e9:59:03:65:dd:43:52:80:09:33:47:d1:27:57:
         00:fb:ef:aa:69:89:19:2d:e2:f0:75:eb:c7:12:11:aa:c4:4b:
         61:2d:bd:cb:2c:7f:77:cf:03:0e:15:68:54:c3:ad:c0:4b:1d:
         db:b9:31:cc:b0:1f:0b:4f:4e:b6:cb:10:ec:b8:b2:eb:18:49:
         8a:88:a3:3b:1c:a0:7b:00:05:50:fe:5f:3b:9c:7d:9b:e0:c6:
         84:40:64:9b:73:9c:28:33:f5:8b:ad:6e:67:03:33:c9:e4:bb:
         45:bf:c4:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcAuiUFi2ZLwXAIrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMyOWNhZjYtN2UyYS00YTAyLWEyMWYtYjYyNTllY2Y2
YjlkMB4XDTI0MDgyNjA5MzUwMFoXDTI0MTEyNDEwMzUwMFowLzEtMCsGA1UEAxMk
YTUwYzM5OGQtYmE0Mi00YjlmLTllZTgtOWNhZjNkNjkzYjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjMr5saoyU6x89wlaMkvZkags2pIgO7UHApB
I0ZefsS13H1Gq7rCCRhd0SqlajYR6bxPkP2QXOHdC2MNUG7BTPrdyHxhbjddjf3/
KXmEc2kjjPMoemewEyJkTOqxp8GObJYNQGFn8jnoxjNAU0pJkTIe17SRtD4CMe7s
VTn/6Ts7EUD91Q8tX2UQq4XAUdpk4hqHSnucUkRs3DQzEH9qMXBQHFi78EuDePTk
1wHaDkDvFYOHhAMSd/wGuO3GFrIndo55Y8CaIMmOY9S2XijAJj4yKOkpAD6PoWQZ
w+PWt/3qccFHg2XL3r7uhN9RKtUVfzCKBZWs5Zn/VcoZ7YjlAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdupJXlAF3GGlKQ9PNPeMH1rplsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MzI5
Y2FmNi03ZTJhLTRhMDItYTIxZi1iNjI1OWVjZjZiOWQvMDg0MWExNjQtZWIyNC0z
ZTE2LWIyNmMtYjYwOTcyMjliOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDMyOWNhZjYtN2UyYS00YTAyLWEy
MWYtYjYyNTllY2Y2YjlkLzQzMjljYWY2LTdlMmEtNGEwMi1hMjFmLWI2MjU5ZWNm
NmI5ZC5jcmwwHwYDVR0jBBgwFoAUUz3I1QWeBD74Zgi1rDu6lW/m20IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MzI5Y2FmNi03ZTJhLTRhMDItYTIxZi1iNjI1
OWVjZjZiOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM8XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPf3yF5i2Ndx2PIjzTo7S1UIgOCUWgb9cRvr/NvME2xiEsEBCG7Yj5A
P0oce074a1sn5hRl6ZCMTaj71r2M18i4RfNim70MyMovlFt2tjwajHOKTZfY7qX9
wlyF7kzy8Lux+YZtWmWzQ+AmZZ8UUd9z9UOnfg4XPYw2FopDHy2RXXoEpUhepc5z
fnaZmSeoM/2WIirpWQNl3UNSgAkzR9EnVwD776ppiRkt4vB168cSEarES2Etvcss
f3fPAw4VaFTDrcBLHdu5McywHwtPTrbLEOy4susYSYqIozscoHsABVD+XzucfZvg
xoRAZJtznCgz9YutbmcDM8nku0W/xDo=
-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org