Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/79da47f5-63db-35f7-b4e8-a03ea8ee4655.roa
File:                     79da47f5-63db-35f7-b4e8-a03ea8ee4655.roa (raw, json)
Hash identifier:          82iHKAZm9hXfuG6bniYVKRly70iGPP2fDgmmbm0uXME=
Subject key identifier:   FE:55:69:42:21:82:C9:EC:54:A0:2F:A4:49:50:1D:46:92:D9:50:05
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D6CF44651E8FD67091AE4E00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/79da47f5-63db-35f7-b4e8-a03ea8ee4655.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        23.16.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:44:65:1e:8f:d6:70:91:ae:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=c785f57f-143b-4f55-83a0-aad4039abb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:fe:55:a3:43:f1:ee:32:61:24:9a:a1:a2:
                    74:b5:a3:e5:d8:12:e5:91:5f:27:b7:d3:2d:95:ee:
                    34:af:f8:59:1b:a1:d3:b2:dd:a8:0c:70:1b:df:9a:
                    35:dd:10:72:88:87:fe:d0:f9:df:0d:98:fd:e8:43:
                    1b:7a:c8:ad:90:0d:24:12:ed:15:fd:db:9f:ad:05:
                    71:c7:42:e5:84:7a:c0:18:dd:5f:de:68:79:ea:6e:
                    95:e6:b3:e5:8e:7b:5c:0e:c3:08:96:c7:15:cd:7c:
                    7e:30:c6:77:b0:f1:b1:be:29:88:15:25:aa:26:70:
                    3b:40:e8:6e:8c:5c:5c:ca:2b:a6:57:8f:7e:cd:da:
                    ab:55:f5:d5:34:d9:e7:60:d7:90:a9:38:7b:a0:d7:
                    12:d3:87:6d:b7:55:75:c0:92:24:d9:a6:ef:65:e0:
                    65:2d:66:54:26:bd:e1:b3:7b:b1:24:78:27:0f:a6:
                    93:7f:69:95:33:07:19:c2:22:10:8f:92:2f:dc:96:
                    c1:ef:56:b0:d8:d6:15:90:93:ba:24:b6:eb:3a:a2:
                    0f:35:dd:17:be:c7:2d:bd:c2:8b:80:27:55:8c:db:
                    e0:66:99:28:1c:5b:d5:d3:b3:28:21:18:35:bb:ea:
                    cb:13:c4:fc:e0:f3:13:d8:e1:2f:7b:be:69:15:f7:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:55:69:42:21:82:C9:EC:54:A0:2F:A4:49:50:1D:46:92:D9:50:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/79da47f5-63db-35f7-b4e8-a03ea8ee4655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.16.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4a:57:c4:a8:9c:c8:5c:ae:a5:db:d6:8d:8f:61:b1:02:b3:
         1f:6f:0e:ff:7c:3b:39:81:3e:48:68:df:ef:14:90:fe:94:4b:
         7a:12:a0:18:d1:f3:f4:6a:d7:32:85:f8:7b:36:6b:a2:52:fe:
         7c:37:a2:09:9b:e7:0c:f4:e2:f9:45:db:64:72:06:bb:40:46:
         ce:2a:da:d3:3a:06:e7:42:60:5f:2c:c8:d7:48:04:bc:d3:8c:
         40:0b:d5:93:7b:fa:86:a0:61:6c:b6:42:4f:69:94:67:de:9d:
         aa:98:f9:bb:8d:be:af:a8:e5:a4:0e:62:9c:76:7f:c9:a5:22:
         14:e2:4b:7b:83:86:b4:34:d2:b9:da:6a:56:4a:4e:8a:f9:af:
         a8:f6:73:69:5d:59:16:a7:03:9c:ab:22:c3:8d:82:fa:f2:a6:
         17:d4:10:39:95:c8:c1:45:c8:43:d6:6c:df:ee:d2:30:89:e7:
         3b:f9:5d:b2:0d:a7:9b:2c:ba:01:c7:41:f2:fe:57:83:73:a8:
         97:4b:c0:81:86:78:01:cf:a8:29:47:74:98:f7:ce:a1:3e:21:
         db:30:5d:0e:7f:fa:78:c4:09:03:68:47:29:cf:33:64:5f:43:
         7a:32:3c:f2:ff:e8:e2:cb:72:f8:96:22:2a:02:a6:44:00:93:
         52:3b:34:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0RlHo/WcJGuTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk
Yzc4NWY1N2YtMTQzYi00ZjU1LTgzYTAtYWFkNDAzOWFiYjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz3+VaND8e4yYSSaoaJ0taPl2BLlkV8nt9Mt
le40r/hZG6HTst2oDHAb35o13RByiIf+0PnfDZj96EMbesitkA0kEu0V/dufrQVx
x0LlhHrAGN1f3mh56m6V5rPljntcDsMIlscVzXx+MMZ3sPGxvimIFSWqJnA7QOhu
jFxcyiumV49+zdqrVfXVNNnnYNeQqTh7oNcS04dtt1V1wJIk2abvZeBlLWZUJr3h
s3uxJHgnD6aTf2mVMwcZwiIQj5Iv3JbB71aw2NYVkJO6JLbrOqIPNd0XvsctvcKL
gCdVjNvgZpkoHFvV07MoIRg1u+rLE8T84PMT2OEve75pFfeFvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5VaUIhgsnsVKAvpElQHUaS2VAFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzlkYTQ3ZjUtNjNkYi0z
NWY3LWI0ZTgtYTAzZWE4ZWU0NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxB8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ5KV8SonMhcrqXb1o2PYbECsx9vDv98OzmBPkho3+8UkP6US3oSoBjR
8/Rq1zKF+Hs2a6JS/nw3ogmb5wz04vlF22RyBrtARs4q2tM6BudCYF8syNdIBLzT
jEAL1ZN7+oagYWy2Qk9plGfenaqY+buNvq+o5aQOYpx2f8mlIhTiS3uDhrQ00rna
alZKTor5r6j2c2ldWRanA5yrIsONgvryphfUEDmVyMFFyEPWbN/u0jCJ5zv5XbIN
p5ssugHHQfL+V4NzqJdLwIGGeAHPqClHdJj3zqE+IdswXQ5/+njECQNoRynPM2Rf
Q3oyPPL/6OLLcviWIioCpkQAk1I7NH4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:29:17 2024 by rpki-client on console-ams.rpki-client.org