Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa
File:                     4bff34b6-57f0-332c-8398-4fb31b240aa0.roa (raw, json)
Hash identifier:          6lbSgrgZMsEqMZyHL09DEZbGGBFzrNuhXNYdMw3Mmi4=
Subject key identifier:   27:57:C2:DB:C5:6D:0B:B6:9F:EC:BC:A7:E0:0E:A2:43:05:B7:12:5E
Certificate issuer:       /CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
Certificate serial:       010D0C9F432858471D42536C46EFE9D203171A00
Authority key identifier: 80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa
Signing time:             Thu 05 Sep 2024 14:52:02 +0000
ROA not before:           Thu 05 Sep 2024 14:52:02 +0000
ROA not after:            Wed 04 Dec 2024 15:52:02 +0000
asID:                     401339
IP address blocks:        23.188.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:42:53:6c:46:ef:e9:d2:03:17:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
        Validity
            Not Before: Sep  5 14:52:02 2024 GMT
            Not After : Dec  4 15:52:02 2024 GMT
        Subject: CN=aba8db1d-0b2f-45d1-8847-f77cae29ea94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:39:ad:7e:d5:cb:d1:2c:4b:1f:c2:d1:79:fa:
                    12:8f:a7:b8:7a:f7:34:05:f9:66:b2:de:25:40:7b:
                    b2:f4:ab:34:51:77:d6:30:ca:f8:e2:9c:57:c9:dd:
                    71:8b:83:f5:47:1b:cd:86:d9:c3:ba:ed:ac:9d:c0:
                    a8:e1:a1:12:65:ee:f7:ff:1f:4a:6d:24:02:1a:fc:
                    b8:92:ce:c9:7a:90:48:a0:dc:ba:5f:45:cf:52:ac:
                    ec:27:c8:91:2b:e9:68:50:68:04:e7:a9:90:fb:c6:
                    ac:51:e5:f9:54:85:19:a7:6f:56:55:ce:a0:4e:ff:
                    df:ae:a2:f1:ec:1e:f3:9f:76:61:fb:ff:a9:e3:43:
                    fe:71:1e:21:d7:58:31:e0:71:6e:6b:c1:87:64:0f:
                    22:8b:c3:a9:f6:e8:a0:14:9e:55:6a:ed:41:cd:b3:
                    90:53:06:3c:d3:fd:52:f6:e5:1a:c5:69:f6:c8:e6:
                    24:ef:62:ab:c9:e7:b6:f3:01:16:45:65:0c:1a:bc:
                    08:e3:6b:44:46:23:e6:0c:b8:e1:38:d3:a6:ed:e2:
                    53:75:f0:e2:4a:ce:3f:93:d6:a9:b5:be:cd:3a:10:
                    cb:c9:38:cb:b3:dd:ce:49:b4:7b:f7:ac:fb:bb:7b:
                    6b:bc:3a:68:a7:82:9c:43:a6:47:1e:90:aa:09:ee:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:57:C2:DB:C5:6D:0B:B6:9F:EC:BC:A7:E0:0E:A2:43:05:B7:12:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl

            X509v3 Authority Key Identifier:
                keyid:80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:8c:38:64:89:42:96:4e:73:ed:33:c5:6f:1d:26:2c:ef:
         e8:42:ae:2e:4a:33:fb:9d:4e:bd:90:1b:aa:9d:58:85:b7:af:
         c9:c6:3d:62:75:e2:f2:49:16:7f:34:39:99:ed:4e:78:79:f4:
         35:e9:01:9d:3b:18:cf:4f:b8:86:5b:f8:1e:ba:ef:d7:94:d7:
         6e:a5:08:d1:9a:e9:8e:d4:bd:7b:e0:24:2b:75:5d:89:21:97:
         d2:2b:4e:d2:c6:5b:1c:07:0d:bc:cd:cd:5a:64:1c:be:e6:0d:
         de:7b:87:d3:a1:ca:e3:bb:02:6d:b5:99:6e:95:a1:f5:39:b5:
         28:35:e0:0d:93:98:62:ef:7e:2d:54:96:cb:52:b1:77:d4:15:
         65:4b:65:78:b6:72:6c:fa:45:67:b0:ac:82:41:16:da:9e:99:
         d3:1d:ac:98:55:bd:d2:35:96:06:42:a1:7e:c0:51:59:db:a9:
         98:d3:04:3e:a5:f6:d6:e7:30:94:6d:f6:f8:ea:7f:89:46:8d:
         e3:ef:f8:36:14:19:b2:24:c2:3f:c9:29:4f:44:9a:92:bb:c2:
         26:08:8b:5d:96:fa:3a:e0:2b:1a:d3:79:c6:bf:3a:6b:99:0e:
         be:4b:00:02:b2:d6:d6:5e:03:39:06:f8:83:b2:c6:ec:43:e3:
         89:2e:d7:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcdQlNsRu/p0gMXGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk0ZmNjYTgtZmNkNy00MzVlLWE0ZDEtYmQ5MjFkOTdj
NTFkMB4XDTI0MDkwNTE0NTIwMloXDTI0MTIwNDE1NTIwMlowLzEtMCsGA1UEAxMk
YWJhOGRiMWQtMGIyZi00NWQxLTg4NDctZjc3Y2FlMjllYTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjmtftXL0SxLH8LRefoSj6e4evc0Bflmst4l
QHuy9Ks0UXfWMMr44pxXyd1xi4P1RxvNhtnDuu2sncCo4aESZe73/x9KbSQCGvy4
ks7JepBIoNy6X0XPUqzsJ8iRK+loUGgE56mQ+8asUeX5VIUZp29WVc6gTv/frqLx
7B7zn3Zh+/+p40P+cR4h11gx4HFua8GHZA8ii8Op9uigFJ5Vau1BzbOQUwY80/1S
9uUaxWn2yOYk72Kryee28wEWRWUMGrwI42tERiPmDLjhONOm7eJTdfDiSs4/k9ap
tb7NOhDLyTjLs93OSbR796z7u3trvDpop4KcQ6ZHHpCqCe5EHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdXwtvFbQu2n+y8p+AOokMFtxJeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OTRm
Y2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDkyMWQ5N2M1MWQvNGJmZjM0YjYtNTdmMC0z
MzJjLTgzOTgtNGZiMzFiMjQwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjk0ZmNjYTgtZmNkNy00MzVlLWE0
ZDEtYmQ5MjFkOTdjNTFkLzY5NGZjY2E4LWZjZDctNDM1ZS1hNGQxLWJkOTIxZDk3
YzUxZC5jcmwwHwYDVR0jBBgwFoAUgBVYnoVuXIAP+jk8xrIGqdJM65owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82OTRmY2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDky
MWQ5N2M1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7xIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4NjDhkiUKWTnPtM8VvHSYs7+hCri5KM/udTr2QG6qdWIW3r8nGPWJ1
4vJJFn80OZntTnh59DXpAZ07GM9PuIZb+B6679eU126lCNGa6Y7UvXvgJCt1XYkh
l9IrTtLGWxwHDbzNzVpkHL7mDd57h9OhyuO7Am21mW6VofU5tSg14A2TmGLvfi1U
lstSsXfUFWVLZXi2cmz6RWewrIJBFtqemdMdrJhVvdI1lgZCoX7AUVnbqZjTBD6l
9tbnMJRt9vjqf4lGjePv+DYUGbIkwj/JKU9EmpK7wiYIi12W+jrgKxrTeca/OmuZ
Dr5LAAKy1tZeAzkG+IOyxuxD44ku12g=
-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org