Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/77ee7f56-a297-3785-93db-92928596c81d.roa
File:                     77ee7f56-a297-3785-93db-92928596c81d.roa (raw, json)
Hash identifier:          pRlYg5Std8aDCoUFspgrw9R+aswp4Y+xN7mYzIZXHiA=
Subject key identifier:   34:01:D7:0F:9B:C9:96:80:27:1F:E5:E2:CE:1B:3A:9D:3A:79:17:D3
Certificate issuer:       /CN=adb27434-5f58-4360-84a6-000e6e9c7d04
Certificate serial:       010D0C9F4328584748509EE6B205C1703BD93840
Authority key identifier: 56:01:2F:59:4F:2A:8D:00:B8:13:0E:D9:ED:BF:80:8D:16:CA:B8:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/77ee7f56-a297-3785-93db-92928596c81d.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     19684
IP address blocks:        23.174.152.0/24 maxlen: 24
                          162.254.224.0/21 maxlen: 24
                          2607:9540::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/adb27434-5f58-4360-84a6-000e6e9c7d04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/adb27434-5f58-4360-84a6-000e6e9c7d04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:9e:e6:b2:05:c1:70:3b:d9:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adb27434-5f58-4360-84a6-000e6e9c7d04
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=8410b931-04c1-498f-a118-57f246f6ad93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:af:58:80:1a:26:04:18:f2:02:ba:7a:a8:
                    86:d4:2a:11:f5:20:e8:ad:ee:12:1e:4a:ec:a5:52:
                    79:4a:58:7a:9f:0f:52:23:77:a0:4b:54:26:24:23:
                    f8:3c:e5:63:78:e2:6e:75:12:94:22:a6:f1:0a:50:
                    1f:95:92:fd:91:b9:ba:5f:55:2e:55:a3:59:e6:87:
                    5e:27:5f:71:7e:3d:16:3f:cb:b3:19:8f:e6:7f:f4:
                    47:b3:bb:3a:f3:2d:66:c3:d2:14:c4:89:b7:c5:9a:
                    e5:66:a7:05:d4:e1:38:cb:4d:15:36:7f:34:15:60:
                    f7:51:ca:15:c5:e0:a0:a0:8e:6b:70:e8:7a:9b:c0:
                    94:96:b3:a1:99:b4:a1:90:e0:a9:ae:21:0c:45:ed:
                    02:06:d2:f7:d4:2d:2a:9f:fb:d5:20:67:52:42:69:
                    ef:4f:fd:86:04:6d:61:af:2a:85:c1:68:95:76:74:
                    22:8f:b4:38:3c:a1:c8:fe:af:6a:83:82:7e:e6:ed:
                    e4:b1:33:d0:2b:9c:53:9a:16:02:e3:21:99:7e:b2:
                    b5:77:8d:54:33:12:c4:e8:e7:d1:b5:15:d5:85:ec:
                    72:c3:3d:5b:af:c7:18:1b:57:cd:5b:5e:5d:86:5f:
                    e1:cd:53:79:69:ab:15:3c:3b:a5:bc:00:80:76:be:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:01:D7:0F:9B:C9:96:80:27:1F:E5:E2:CE:1B:3A:9D:3A:79:17:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/77ee7f56-a297-3785-93db-92928596c81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04/adb27434-5f58-4360-84a6-000e6e9c7d04.crl

            X509v3 Authority Key Identifier:
                keyid:56:01:2F:59:4F:2A:8D:00:B8:13:0E:D9:ED:BF:80:8D:16:CA:B8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adb27434-5f58-4360-84a6-000e6e9c7d04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.152.0/24
                  162.254.224.0/21
                IPv6:
                  2607:9540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5a:59:e2:18:0a:e2:9d:3c:02:fa:47:86:b1:e4:50:cf:9a:
         d3:63:0a:c1:cb:0f:ea:17:3d:68:5f:ae:e0:60:60:3f:6c:b5:
         66:38:ab:6e:24:65:1d:6f:68:b4:1f:80:83:75:a2:ec:f6:ed:
         cc:43:99:f0:1c:15:49:2f:8d:93:84:ea:d0:ed:09:01:cc:26:
         24:c1:b0:3d:74:39:49:3f:8e:9d:78:cf:6c:86:58:5a:e4:a1:
         10:cc:5f:e8:cb:41:af:35:86:89:ba:64:2b:6e:99:52:df:74:
         25:34:d0:b5:74:a4:21:ac:bf:a9:9f:35:d1:75:84:f1:d1:6d:
         71:26:64:ef:0e:f6:3c:c4:49:89:03:62:cb:4d:54:be:64:bc:
         c0:ec:8f:c7:8e:97:8e:a3:7c:d2:84:82:40:63:3e:92:6a:45:
         31:f1:78:5e:b3:49:25:33:be:5a:c8:a4:cc:ec:05:95:f3:c6:
         64:db:40:1a:70:67:73:6a:d2:98:2a:c7:b3:04:52:c1:cc:51:
         f8:2e:24:9a:d7:d1:0e:a3:e8:3a:bd:a0:68:1a:b3:e8:85:f3:
         01:55:4c:ad:b0:14:9a:e0:fe:15:b9:75:1a:ff:84:8a:30:75:
         e9:85:41:3e:5d:c9:6b:74:fe:ee:18:bd:52:a6:24:90:c3:ee:
         cc:8d:70:6d
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEdIUJ7msgXBcDvZOEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRiMjc0MzQtNWY1OC00MzYwLTg0YTYtMDAwZTZlOWM3
ZDA0MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk
ODQxMGI5MzEtMDRjMS00OThmLWExMTgtNTdmMjQ2ZjZhZDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv2vWIAaJgQY8gK6eqiG1CoR9SDore4SHkrs
pVJ5Slh6nw9SI3egS1QmJCP4POVjeOJudRKUIqbxClAflZL9kbm6X1UuVaNZ5ode
J19xfj0WP8uzGY/mf/RHs7s68y1mw9IUxIm3xZrlZqcF1OE4y00VNn80FWD3UcoV
xeCgoI5rcOh6m8CUlrOhmbShkOCpriEMRe0CBtL31C0qn/vVIGdSQmnvT/2GBG1h
ryqFwWiVdnQij7Q4PKHI/q9qg4J+5u3ksTPQK5xTmhYC4yGZfrK1d41UMxLE6OfR
tRXVhexywz1br8cYG1fNW15dhl/hzVN5aasVPDulvACAdr4wowIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFDQB1w+byZaAJx/l4s4bOp06eRfTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZGIy
NzQzNC01ZjU4LTQzNjAtODRhNi0wMDBlNmU5YzdkMDQvNzdlZTdmNTYtYTI5Ny0z
Nzg1LTkzZGItOTI5Mjg1OTZjODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWRiMjc0MzQtNWY1OC00MzYwLTg0
YTYtMDAwZTZlOWM3ZDA0L2FkYjI3NDM0LTVmNTgtNDM2MC04NGE2LTAwMGU2ZTlj
N2QwNC5jcmwwHwYDVR0jBBgwFoAUVgEvWU8qjQC4Ew7Z7b+AjRbKuNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZGIyNzQzNC01ZjU4LTQzNjAtODRhNi0wMDBl
NmU5YzdkMDQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF66YAwQD
ov7gMA0EAgACMAcDBQAmB5VAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE5aWeIYCuKdPAL6R4ax5FDPmtNj
CsHLD+oXPWhfruBgYD9stWY4q24kZR1vaLQfgIN1ouz27cxDmfAcFUkvjZOE6tDt
CQHMJiTBsD10OUk/jp14z2yGWFrkoRDMX+jLQa81hom6ZCtumVLfdCU00LV0pCGs
v6mfNdF1hPHRbXEmZO8O9jzESYkDYstNVL5kvMDsj8eOl46jfNKEgkBjPpJqRTHx
eF6zSSUzvlrIpMzsBZXzxmTbQBpwZ3Nq0pgqx7MEUsHMUfguJJrX0Q6j6Dq9oGga
s+iF8wFVTK2wFJrg/hW5dRr/hIowdemFQT5dyWt0/u4YvVKmJJDD7syNcG0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org