Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3faa7f01-dbb4-3bfa-bd3e-358c8291a989.roa
File:                     3faa7f01-dbb4-3bfa-bd3e-358c8291a989.roa (raw, json)
Hash identifier:          aLy2BZ6PkU78Y6bq2+YgfT7BkA7+fk++6axF1NnH5pw=
Subject key identifier:   88:F1:85:8B:29:92:63:20:25:82:28:FB:C3:D8:AC:BB:3F:C4:93:B9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F1114F8CE7D4BD2D1EE75240
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3faa7f01-dbb4-3bfa-bd3e-358c8291a989.roa
Signing time:             Wed 20 Nov 2024 11:44:38 +0000
ROA not before:           Wed 20 Nov 2024 11:44:38 +0000
ROA not after:            Tue 18 Feb 2025 11:44:38 +0000
asID:                     44477
IP address blocks:        23.230.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:11:4f:8c:e7:d4:bd:2d:1e:e7:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 11:44:38 2024 GMT
            Not After : Feb 18 11:44:38 2025 GMT
        Subject: CN=d8cb8419-1800-487e-a730-55055172ffe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:6e:2e:58:98:02:91:63:22:31:8f:3d:cc:
                    e0:62:9a:91:f6:46:05:c5:62:9e:aa:77:37:d2:8f:
                    41:34:27:c2:f6:fe:eb:a3:e1:e9:03:2b:10:30:43:
                    0d:32:fa:68:8f:79:ee:25:10:64:16:5a:99:ab:33:
                    31:2f:51:e8:60:cc:db:4d:82:32:13:52:41:e4:39:
                    fc:33:97:c7:f7:4f:5b:49:8b:39:2e:74:33:b2:04:
                    12:d5:a6:fe:fe:63:37:22:49:81:63:9e:1c:fa:9d:
                    4e:c1:29:09:bc:8b:56:57:03:d6:0d:5d:a4:e5:c8:
                    ce:70:d6:8c:d8:c7:ee:6c:b7:59:5f:36:bc:42:5a:
                    06:af:a5:c9:05:8e:b5:9b:c6:e4:61:6d:c7:3b:e2:
                    ae:d9:35:22:2d:c5:b8:5c:1b:bc:57:68:40:a2:19:
                    aa:d6:5e:fa:17:13:ef:84:2a:5c:6b:f4:12:58:b2:
                    0c:5c:3f:25:49:43:71:1e:1c:c6:c3:30:68:d5:c4:
                    fe:b9:d7:62:d0:42:3d:1c:6e:15:9c:34:32:f1:09:
                    78:e1:c4:4a:dd:5a:5e:77:ff:4e:13:a6:a2:7f:91:
                    77:85:fa:1f:8a:b5:5b:2e:90:e5:95:f1:80:2d:ef:
                    33:2b:0e:73:55:9a:15:b6:84:ab:c5:e6:af:44:1e:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F1:85:8B:29:92:63:20:25:82:28:FB:C3:D8:AC:BB:3F:C4:93:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3faa7f01-dbb4-3bfa-bd3e-358c8291a989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7c:00:2e:9b:a6:95:30:a8:82:9e:b8:a5:d0:a1:db:de:e6:
         dc:5d:5e:d2:3e:93:91:48:28:f9:eb:34:f2:24:85:3b:31:2b:
         b3:2d:f5:cc:3b:1f:b2:7c:4f:57:b6:ad:7d:b3:ee:57:b1:49:
         af:8f:8e:93:96:9b:d3:16:ec:5b:bb:12:55:0f:73:74:90:27:
         92:4c:07:5f:ac:f5:16:81:f1:8b:9b:f8:60:4d:2f:31:11:4f:
         9f:c9:d0:c2:27:84:bd:40:42:ae:ca:d1:c8:e3:53:b1:13:46:
         db:96:66:86:4b:e3:45:83:78:45:35:0d:44:fb:70:d6:19:81:
         47:57:24:b1:81:b8:b4:f3:fe:85:5e:74:66:a1:d7:f6:14:b5:
         04:db:2a:01:ac:cf:a3:56:87:af:80:92:28:c8:3d:0b:8e:92:
         38:a1:1b:25:60:d6:b0:01:5a:0a:36:f1:f7:da:4a:cd:40:04:
         e2:32:14:59:21:c7:e1:60:35:fb:94:fb:c5:7d:be:fd:fc:4d:
         23:bf:56:cc:ec:d1:7c:a1:74:6e:fb:a8:75:d9:ab:dd:74:dc:
         d9:ad:36:63:3f:5d:da:ba:2e:9d:81:7a:c9:4d:4a:fa:8b:81:
         fe:77:d0:ea:75:66:b1:08:c6:09:f5:60:8e:f7:ee:6b:43:72:
         04:ef:0b:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxEU+M59S9LR7nUkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTEyMDExNDQzOFoXDTI1MDIxODExNDQzOFowLzEtMCsGA1UEAxMk
ZDhjYjg0MTktMTgwMC00ODdlLWE3MzAtNTUwNTUxNzJmZmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr1uLliYApFjIjGPPczgYpqR9kYFxWKeqnc3
0o9BNCfC9v7ro+HpAysQMEMNMvpoj3nuJRBkFlqZqzMxL1HoYMzbTYIyE1JB5Dn8
M5fH909bSYs5LnQzsgQS1ab+/mM3IkmBY54c+p1OwSkJvItWVwPWDV2k5cjOcNaM
2MfubLdZXza8QloGr6XJBY61m8bkYW3HO+Ku2TUiLcW4XBu8V2hAohmq1l76FxPv
hCpca/QSWLIMXD8lSUNxHhzGwzBo1cT+uddi0EI9HG4VnDQy8Ql44cRK3Vped/9O
E6aif5F3hfofirVbLpDllfGALe8zKw5zVZoVtoSrxeavRB5/dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIjxhYspkmMgJYIo+8PYrLs/xJO5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2ZhYTdmMDEtZGJiNC0z
YmZhLWJkM2UtMzU4YzgyOTFhOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+bXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFR8AC6bppUwqIKeuKXQodve5txdXtI+k5FIKPnrNPIkhTsxK7Mt9cw7
H7J8T1e2rX2z7lexSa+PjpOWm9MW7Fu7ElUPc3SQJ5JMB1+s9RaB8Yub+GBNLzER
T5/J0MInhL1AQq7K0cjjU7ETRtuWZoZL40WDeEU1DUT7cNYZgUdXJLGBuLTz/oVe
dGah1/YUtQTbKgGsz6NWh6+AkijIPQuOkjihGyVg1rABWgo28ffaSs1ABOIyFFkh
x+FgNfuU+8V9vv38TSO/Vszs0XyhdG77qHXZq9103NmtNmM/Xdq6Lp2BeslNSvqL
gf530Op1ZrEIxgn1YI737mtDcgTvCy4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:56 2024 by rpki-client on console-fra.rpki-client.org