Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/d7d4a38a-727e-3485-b505-a9b01ade3929.roa
File:                     d7d4a38a-727e-3485-b505-a9b01ade3929.roa (raw, json)
Hash identifier:          EAAfy/fayBUIYlBC4rlmPaQqlQ5VsibJlAhoPi1rLR8=
Subject key identifier:   32:CA:39:1A:38:6F:7A:51:7C:88:1C:98:80:A4:DF:25:D1:6A:C9:AA
Certificate issuer:       /CN=0059f687-be1d-4396-97d0-dbe0841392ac
Certificate serial:       010D0C9F432858475910D0EE28E9757DFCA30F00
Authority key identifier: 91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/d7d4a38a-727e-3485-b505-a9b01ade3929.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     23121
IP address blocks:        23.175.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:d0:ee:28:e9:75:7d:fc:a3:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059f687-be1d-4396-97d0-dbe0841392ac
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=47c5b5a5-c17e-493a-9190-ea63a570fad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:df:d1:44:b2:6a:dc:39:4f:67:8f:6e:ca:
                    d8:c8:c3:19:66:1f:12:18:0a:2e:bd:26:e8:aa:62:
                    47:89:5c:3e:7e:6a:f9:25:ab:64:4b:28:ba:05:b8:
                    d7:d7:73:46:f2:dc:7b:1a:ca:f2:5b:ef:75:19:07:
                    fb:a2:11:7f:4b:53:94:3c:e0:ec:6f:18:81:d7:fa:
                    3a:b2:6b:05:b5:67:65:13:71:01:58:a7:36:9b:cf:
                    89:c6:99:a9:82:af:c1:8e:01:1c:95:30:d9:4f:2e:
                    8b:db:1a:97:61:d8:88:98:ae:6f:ee:ae:4b:6b:cf:
                    d8:ea:f6:f4:2c:19:14:5b:b2:76:28:db:8a:f6:ed:
                    b1:73:dd:86:d1:23:c2:4a:a9:79:e8:51:9d:86:a9:
                    fb:a5:d0:24:13:d6:77:1b:78:98:9e:85:ea:24:3b:
                    ea:5f:12:b7:14:8a:24:ba:28:27:df:23:72:25:ee:
                    43:e2:58:35:ef:8d:8e:43:c6:68:24:aa:32:e5:cf:
                    27:7c:0e:05:75:d6:0a:69:ca:42:fa:b7:3c:b7:56:
                    a0:46:fd:58:5e:eb:de:b9:85:19:b3:68:fc:89:ec:
                    5d:9c:a3:5a:9a:33:52:39:67:74:ef:15:9a:b2:98:
                    25:33:fa:99:f6:42:12:3a:ce:99:86:0c:0e:35:9b:
                    4b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CA:39:1A:38:6F:7A:51:7C:88:1C:98:80:A4:DF:25:D1:6A:C9:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/d7d4a38a-727e-3485-b505-a9b01ade3929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl

            X509v3 Authority Key Identifier:
                keyid:91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:91:44:02:92:48:05:f8:5c:72:38:61:cf:05:5c:ae:cd:
         6a:2f:b2:fb:b8:bc:28:29:22:4f:f1:0f:91:b7:73:1e:4e:c7:
         0e:3e:ab:35:fb:1e:0a:8c:22:dd:dd:29:f7:a9:43:a4:81:60:
         a1:ad:fe:8a:14:8a:55:3f:8d:7d:65:0e:96:44:50:33:6d:df:
         3f:40:e2:86:20:d2:88:b0:5e:80:d0:d0:c4:d3:6b:59:56:b3:
         b1:29:3a:4d:5a:c4:d7:df:49:28:21:31:0a:ea:8d:ec:fe:a1:
         a4:0a:3d:f2:f1:d8:f7:f5:91:3e:f0:d9:db:e0:42:a9:28:5d:
         47:c8:c3:2f:ef:97:e6:b5:3a:d9:91:31:01:88:19:5b:3d:fb:
         7d:e0:40:e1:81:89:41:34:7c:e7:c1:c0:51:00:2e:dc:2c:5a:
         11:00:51:5f:85:2d:25:6f:3a:48:da:c9:5d:a3:bc:bf:1d:5e:
         1e:e6:dd:3a:d5:b2:e3:e3:56:42:90:f1:8c:5e:ed:fc:6e:ac:
         ad:fb:98:b9:77:f4:22:55:97:3b:de:4a:aa:4c:16:ff:0c:66:
         7e:af:23:6c:60:b9:d4:4e:13:4f:4a:eb:d0:92:94:ca:a6:b0:
         3a:61:29:19:2d:e7:2a:5f:b6:40:5c:45:8a:59:be:7f:92:91:
         02:4a:ee:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZENDuKOl1ffyjDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA1OWY2ODctYmUxZC00Mzk2LTk3ZDAtZGJlMDg0MTM5
MmFjMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NDdjNWI1YTUtYzE3ZS00OTNhLTkxOTAtZWE2M2E1NzBmYWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxHf0USyatw5T2ePbsrYyMMZZh8SGAouvSbo
qmJHiVw+fmr5JatkSyi6BbjX13NG8tx7GsryW+91GQf7ohF/S1OUPODsbxiB1/o6
smsFtWdlE3EBWKc2m8+Jxpmpgq/BjgEclTDZTy6L2xqXYdiImK5v7q5La8/Y6vb0
LBkUW7J2KNuK9u2xc92G0SPCSql56FGdhqn7pdAkE9Z3G3iYnoXqJDvqXxK3FIok
uign3yNyJe5D4lg1742OQ8ZoJKoy5c8nfA4FddYKacpC+rc8t1agRv1YXuveuYUZ
s2j8iexdnKNamjNSOWd07xWaspglM/qZ9kISOs6ZhgwONZtLkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLKORo4b3pRfIgcmICk3yXRasmqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMDU5
ZjY4Ny1iZTFkLTQzOTYtOTdkMC1kYmUwODQxMzkyYWMvZDdkNGEzOGEtNzI3ZS0z
NDg1LWI1MDUtYTliMDFhZGUzOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDA1OWY2ODctYmUxZC00Mzk2LTk3
ZDAtZGJlMDg0MTM5MmFjLzAwNTlmNjg3LWJlMWQtNDM5Ni05N2QwLWRiZTA4NDEz
OTJhYy5jcmwwHwYDVR0jBBgwFoAUkVonvf1P+rpcN/mERp3I2RR6zoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMDU5ZjY4Ny1iZTFkLTQzOTYtOTdkMC1kYmUw
ODQxMzkyYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6/YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACErkUQCkkgF+FxyOGHPBVyuzWovsvu4vCgpIk/xD5G3cx5Oxw4+qzX7
HgqMIt3dKfepQ6SBYKGt/ooUilU/jX1lDpZEUDNt3z9A4oYg0oiwXoDQ0MTTa1lW
s7EpOk1axNffSSghMQrqjez+oaQKPfLx2Pf1kT7w2dvgQqkoXUfIwy/vl+a1OtmR
MQGIGVs9+33gQOGBiUE0fOfBwFEALtwsWhEAUV+FLSVvOkjayV2jvL8dXh7m3TrV
suPjVkKQ8Yxe7fxurK37mLl39CJVlzveSqpMFv8MZn6vI2xgudROE09K69CSlMqm
sDphKRkt5ypftkBcRYpZvn+SkQJK7ho=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:34 2024 by rpki-client on console-fra.rpki-client.org