Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1e32b471-1528-3ecf-b436-e5b4c0a808ed.roa
File:                     1e32b471-1528-3ecf-b436-e5b4c0a808ed.roa (raw, json)
Hash identifier:          pEOXZ8f4iBwFX5AxhyQuuAwGsr1myTOVZVyvoyUHRvM=
Subject key identifier:   37:D6:61:7E:D6:C9:BA:55:05:EB:90:B2:90:A9:40:C8:B6:A4:8A:0A
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F43285845BD48D98D0FD9379A88608C80
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1e32b471-1528-3ecf-b436-e5b4c0a808ed.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     16552
IP address blocks:        23.128.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:d9:8d:0f:d9:37:9a:88:60:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=5717adfa-abe0-4bb9-ad41-7b02897a072c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5f:4e:ba:e5:0c:15:1e:b5:ac:25:aa:6c:82:
                    34:db:8e:94:31:8c:4c:ee:30:47:a6:eb:3f:d9:65:
                    ff:79:1d:d1:f0:8c:a3:4e:75:32:f4:ed:4f:ee:2f:
                    be:ec:37:bc:b5:75:3d:57:4c:25:ec:46:62:58:c9:
                    85:16:16:b4:3b:bb:e0:11:0f:fa:32:20:5f:fd:bd:
                    93:aa:7c:ac:b6:db:63:81:1b:44:11:cd:6f:91:0c:
                    29:f7:03:66:c4:02:8f:1f:28:35:2f:bc:56:f2:f1:
                    3a:ff:5b:5e:44:e8:78:8b:8d:a0:50:fc:b3:d9:a7:
                    16:d8:3f:87:64:8a:b8:85:f4:c8:d8:ef:c0:8b:14:
                    2f:17:37:bc:45:b5:50:67:53:52:66:7e:98:6d:90:
                    bd:b0:88:33:e4:0c:8e:e1:73:2c:77:32:b9:6f:ed:
                    41:9f:2f:99:2f:52:e6:71:d2:aa:e8:fc:43:68:78:
                    8e:cb:91:b6:cf:4d:97:06:d6:b0:25:fc:bd:53:46:
                    85:d2:52:14:c8:99:ec:70:d1:ee:da:82:f9:ce:2b:
                    41:0e:6e:8d:16:2b:9f:4f:c0:ca:d5:7f:89:b5:c4:
                    76:6a:2f:95:7f:a3:1a:c5:a2:b9:ef:86:03:5e:63:
                    81:5d:5c:43:bd:55:32:e2:9e:c4:98:a2:5a:b3:34:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:61:7E:D6:C9:BA:55:05:EB:90:B2:90:A9:40:C8:B6:A4:8A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1e32b471-1528-3ecf-b436-e5b4c0a808ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:a3:51:da:51:e5:41:46:a1:6b:e4:60:a3:28:01:eb:b9:
         3a:f2:3a:f5:f8:78:8a:c2:76:70:79:39:0d:0d:c9:86:6d:71:
         66:21:2a:de:71:05:b0:a7:08:bc:c5:ac:d9:09:bd:bd:33:0a:
         43:9b:21:3c:5e:b3:f1:98:46:4e:55:c0:36:9c:16:bd:b5:c2:
         be:d8:db:ac:f1:5d:24:d6:27:a9:33:58:c4:ce:28:43:d8:bf:
         cd:c2:fa:aa:b0:06:55:9d:1c:20:bb:65:af:be:53:5b:b1:ff:
         8b:d8:94:c5:84:eb:eb:4a:d2:62:38:25:d5:fb:c0:2e:db:d9:
         2e:20:f2:ee:da:ee:3f:6e:45:cb:b0:d8:49:b5:2d:81:a6:2f:
         9c:47:e4:ea:07:96:1c:13:40:60:01:a8:c3:d8:83:a2:82:6d:
         09:22:95:6e:b3:a8:e4:90:2f:de:47:53:be:76:1e:e2:ea:47:
         fb:e1:36:5f:c9:ce:70:4c:b8:85:7e:b7:70:d4:50:a6:f4:52:
         2f:85:87:51:bf:dd:60:34:1b:06:9d:b5:7d:44:db:3a:a1:77:
         da:60:b9:02:1a:9d:b1:34:6e:d7:4d:49:af:d1:a8:74:9b:1a:
         91:58:41:31:fb:ae:4f:10:8a:90:13:c6:3c:e3:84:64:34:cd:
         3f:8c:49:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW9SNmND9k3mohgjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3
ZjU0MB4XDTI0MDUwMjEzMDAzNFoXDTI0MDczMTEzMDAzNFowLzEtMCsGA1UEAxMk
NTcxN2FkZmEtYWJlMC00YmI5LWFkNDEtN2IwMjg5N2EwNzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj19OuuUMFR61rCWqbII0246UMYxM7jBHpus/
2WX/eR3R8IyjTnUy9O1P7i++7De8tXU9V0wl7EZiWMmFFha0O7vgEQ/6MiBf/b2T
qnystttjgRtEEc1vkQwp9wNmxAKPHyg1L7xW8vE6/1teROh4i42gUPyz2acW2D+H
ZIq4hfTI2O/AixQvFze8RbVQZ1NSZn6YbZC9sIgz5AyO4XMsdzK5b+1Bny+ZL1Lm
cdKq6PxDaHiOy5G2z02XBtawJfy9U0aF0lIUyJnscNHu2oL5zitBDm6NFiufT8DK
1X+JtcR2ai+Vf6MaxaK574YDXmOBXVxDvVUy4p7EmKJaszRyMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfWYX7WybpVBeuQspCpQMi2pIoKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2
ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMWUzMmI0NzEtMTUyOC0z
ZWNmLWI0MzYtZTViNGMwYTgwOGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw
YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3
N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk
NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4B6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjSo1HaUeVBRqFr5GCjKAHruTryOvX4eIrCdnB5OQ0NyYZtcWYhKt5x
BbCnCLzFrNkJvb0zCkObITxes/GYRk5VwDacFr21wr7Y26zxXSTWJ6kzWMTOKEPY
v83C+qqwBlWdHCC7Za++U1ux/4vYlMWE6+tK0mI4JdX7wC7b2S4g8u7a7j9uRcuw
2Em1LYGmL5xH5OoHlhwTQGABqMPYg6KCbQkilW6zqOSQL95HU752HuLqR/vhNl/J
znBMuIV+t3DUUKb0Ui+Fh1G/3WA0GwadtX1E2zqhd9pguQIanbE0btdNSa/RqHSb
GpFYQTH7rk8QipATxjzjhGQ0zT+MSW8=
-----END CERTIFICATE-----
Generated at Sat May 25 07:24:00 2024 by rpki-client on console-ams.rpki-client.org