Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa
File:                     340b93af-d882-36e8-acb4-1af84b9fcca3.roa (raw, json)
Hash identifier:          MA4IZvphEJo/zrwMIyDNGVi2YyW9s3mhu/QAK38qabY=
Subject key identifier:   BC:79:69:47:8A:63:1B:1D:03:26:1E:EC:90:C8:9F:8E:6A:5F:7D:FA
Certificate issuer:       /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
Certificate serial:       010D0C9F43285846D04D0B6A397D2C7FCA162A40
Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa
Signing time:             Fri 09 Aug 2024 01:16:23 +0000
ROA not before:           Fri 09 Aug 2024 01:16:23 +0000
ROA not after:            Thu 07 Nov 2024 02:16:23 +0000
asID:                     395886
IP address blocks:        23.185.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d0:4d:0b:6a:39:7d:2c:7f:ca:16:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
        Validity
            Not Before: Aug  9 01:16:23 2024 GMT
            Not After : Nov  7 02:16:23 2024 GMT
        Subject: CN=97de88f8-2ce4-4029-af52-8b1184a01e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:db:4f:83:ce:ba:60:7b:f6:f2:d5:df:96:
                    88:c7:28:a0:1b:0d:3b:2b:e1:d5:d4:87:14:95:98:
                    c6:fa:73:4c:a3:35:b2:b3:9c:a9:e3:27:23:f2:9c:
                    fa:9b:3f:9a:e1:23:c2:99:3f:56:a2:bf:04:35:97:
                    ea:a9:a1:75:19:c6:67:f1:88:39:13:6e:ed:f8:05:
                    26:68:b7:f7:15:d2:a4:4c:fd:21:25:9d:01:ce:3f:
                    9b:0f:cb:4a:c9:0d:cd:1a:51:1a:4e:81:aa:9d:9f:
                    1c:39:e3:e8:84:c1:78:08:68:d9:a0:48:d8:f4:8f:
                    5b:71:eb:3d:2d:b9:a3:41:db:6c:09:85:c7:28:b5:
                    be:b9:83:3f:f6:ce:28:be:9a:12:73:bf:0c:0a:48:
                    0f:c4:b7:ef:1c:a2:54:6a:42:49:b7:4d:3a:28:12:
                    a9:bd:ac:cc:6f:50:09:50:0d:35:2a:23:b7:13:ec:
                    74:fb:72:43:ae:0d:90:e3:30:42:fe:54:39:d9:d1:
                    34:d3:3f:b1:f7:8e:a7:e3:df:a4:a0:4a:50:81:d6:
                    8b:8f:ec:c6:9d:d1:4c:2a:e7:39:21:8a:63:ba:e2:
                    5e:dc:86:d9:44:ba:f3:6b:62:2c:8e:ee:67:31:ff:
                    14:13:43:85:86:66:4e:60:67:a8:7b:fa:05:75:47:
                    3a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:79:69:47:8A:63:1B:1D:03:26:1E:EC:90:C8:9F:8E:6A:5F:7D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl

            X509v3 Authority Key Identifier:
                keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:50:64:0a:69:0a:75:e1:32:c8:ba:11:0a:d1:f1:6f:14:
         4a:b0:66:59:b9:ba:3b:43:b9:ea:bb:c1:7c:ce:0c:b3:1e:e9:
         76:c5:fd:1f:27:30:dd:7d:c4:64:49:b2:80:db:67:85:27:66:
         5a:64:73:6a:80:35:b0:ff:42:86:1b:3c:de:17:da:21:f2:68:
         ce:da:bb:8d:f7:54:b8:0f:a0:67:b5:6e:a4:56:0c:38:97:2f:
         43:51:f3:f5:ed:50:29:e4:0c:bb:f1:4a:0f:2c:3f:87:dd:f5:
         12:e8:1d:51:06:f5:4d:9d:db:97:f9:a1:21:19:06:aa:41:3d:
         66:e3:64:12:27:78:c8:ca:6b:4c:d1:f2:de:79:06:1b:26:44:
         45:27:12:62:2d:4f:48:96:6a:c3:6f:72:23:7f:c8:b0:38:01:
         3d:03:43:1f:0c:68:66:43:d6:df:93:bd:3d:8c:b4:5b:83:a1:
         29:83:b1:a4:a2:2c:90:ae:e8:46:41:77:35:10:ef:35:23:fc:
         f9:02:98:03:1a:18:49:e1:6d:73:2f:b0:3e:09:7d:92:72:5a:
         ff:b3:d7:ca:e2:68:1a:6c:d3:2c:43:03:2f:c9:5d:a3:0e:7a:
         f0:dc:7a:f6:f0:70:cf:43:d0:81:4c:46:43:52:91:29:14:cc:
         0a:4f:2f:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbQTQtqOX0sf8oWKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkxZDlhZTctNGZhZC00YTQ5LWE5YjItOWNmMWU0YzE5
MTY5MB4XDTI0MDgwOTAxMTYyM1oXDTI0MTEwNzAyMTYyM1owLzEtMCsGA1UEAxMk
OTdkZTg4ZjgtMmNlNC00MDI5LWFmNTItOGIxMTg0YTAxZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmHbT4POumB79vLV35aIxyigGw07K+HV1IcU
lZjG+nNMozWys5yp4ycj8pz6mz+a4SPCmT9Wor8ENZfqqaF1GcZn8Yg5E27t+AUm
aLf3FdKkTP0hJZ0Bzj+bD8tKyQ3NGlEaToGqnZ8cOePohMF4CGjZoEjY9I9bces9
LbmjQdtsCYXHKLW+uYM/9s4ovpoSc78MCkgPxLfvHKJUakJJt006KBKpvazMb1AJ
UA01KiO3E+x0+3JDrg2Q4zBC/lQ52dE00z+x946n49+koEpQgdaLj+zGndFMKuc5
IYpjuuJe3IbZRLrza2Isju5nMf8UE0OFhmZOYGeoe/oFdUc6bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLx5aUeKYxsdAyYe7JDIn45qX336MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80OTFk
OWFlNy00ZmFkLTRhNDktYTliMi05Y2YxZTRjMTkxNjkvMzQwYjkzYWYtZDg4Mi0z
NmU4LWFjYjQtMWFmODRiOWZjY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDkxZDlhZTctNGZhZC00YTQ5LWE5
YjItOWNmMWU0YzE5MTY5LzQ5MWQ5YWU3LTRmYWQtNGE0OS1hOWIyLTljZjFlNGMx
OTE2OS5jcmwwHwYDVR0jBBgwFoAU2Qx290Iwvei74XRBifL+f+cYKMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80OTFkOWFlNy00ZmFkLTRhNDktYTliMi05Y2Yx
ZTRjMTkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7nIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNsUGQKaQp14TLIuhEK0fFvFEqwZlm5ujtDueq7wXzODLMe6XbF/R8n
MN19xGRJsoDbZ4UnZlpkc2qANbD/QoYbPN4X2iHyaM7au433VLgPoGe1bqRWDDiX
L0NR8/XtUCnkDLvxSg8sP4fd9RLoHVEG9U2d25f5oSEZBqpBPWbjZBIneMjKa0zR
8t55BhsmREUnEmItT0iWasNvciN/yLA4AT0DQx8MaGZD1t+TvT2MtFuDoSmDsaSi
LJCu6EZBdzUQ7zUj/PkCmAMaGEnhbXMvsD4JfZJyWv+z18riaBps0yxDAy/JXaMO
evDcevbwcM9D0IFMRkNSkSkUzApPL8k=
-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org