Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d736fe43-2d2f-3395-aa13-2247794e89d4.roa
File:                     d736fe43-2d2f-3395-aa13-2247794e89d4.roa (raw, json)
Hash identifier:          hUm3Vali5ovIjDPhfXBzflsqG3OpqYTkkvZCrK1qJYQ=
Subject key identifier:   E7:02:76:11:9C:E3:45:2A:CF:CA:4F:4A:51:81:6D:72:CB:D2:FF:CF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5DFA2AABCBBF66ED28780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d736fe43-2d2f-3395-aa13-2247794e89d4.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     19157
IP address blocks:        23.86.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:df:a2:aa:bc:bb:f6:6e:d2:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=f6c5f41b-1d76-43d0-afbe-8b3c741ed7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:f7:93:28:f5:7b:1e:af:eb:ef:50:6e:83:
                    62:ab:d7:a8:95:74:97:7b:66:6d:cb:88:97:3e:fb:
                    73:4c:70:3b:c3:92:7a:ba:bb:79:e4:16:c6:21:fe:
                    8f:23:c2:ad:54:09:0d:a7:33:f1:77:be:a1:3f:c1:
                    53:43:71:75:0e:56:30:61:db:d3:13:f9:f4:bc:61:
                    e0:4d:03:b9:51:19:fd:ba:c7:a6:06:52:6b:ae:da:
                    94:c3:9d:50:9d:d5:39:a3:b1:dd:8b:02:87:f4:f4:
                    ca:58:76:3a:55:02:9f:c9:6e:f8:56:17:d5:d4:99:
                    55:95:c2:a1:64:6e:da:3a:d5:36:01:ca:50:58:00:
                    c5:8f:d7:ea:b8:61:68:2b:4e:2a:7d:48:87:95:d1:
                    e9:ce:48:92:cf:c0:72:fe:ad:81:fc:04:70:57:5c:
                    8d:01:64:cc:da:cb:60:e6:ea:03:97:46:2f:04:58:
                    62:12:ba:c4:70:28:93:69:88:df:b5:2a:a5:e3:3b:
                    d2:ba:50:c7:91:d5:54:5a:a1:17:52:1d:3b:1b:e9:
                    8b:fa:a5:16:ea:17:4c:94:e1:94:00:9b:6a:f8:f7:
                    d3:53:9a:66:47:5e:d7:fe:d4:00:f8:53:7a:d4:49:
                    71:12:cd:03:0b:1a:c0:13:44:28:e2:ba:44:18:01:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:76:11:9C:E3:45:2A:CF:CA:4F:4A:51:81:6D:72:CB:D2:FF:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d736fe43-2d2f-3395-aa13-2247794e89d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:67:b9:65:99:3d:b8:3a:58:8a:bc:c1:96:df:de:3e:e1:9c:
         df:ce:d8:4f:f9:3b:bb:fc:66:c3:18:2f:7a:2a:ca:2f:0f:c5:
         fc:06:05:25:7e:50:67:c9:63:89:da:d7:1f:ee:9d:9a:6f:3d:
         1c:08:d7:ba:b7:84:3f:60:04:38:ae:ad:11:f0:35:14:9a:49:
         7f:5e:db:2e:25:25:f5:59:52:09:79:a1:7d:c4:26:08:ee:1e:
         f8:e9:bd:b2:7b:35:0d:3b:96:df:96:61:c4:19:72:32:9b:eb:
         64:1c:b0:1d:75:94:f1:14:89:22:3d:c6:06:f5:57:ce:03:b2:
         d8:b7:e8:cd:05:c6:23:b1:91:8c:c5:25:00:ec:47:97:6e:75:
         8f:25:69:aa:d3:86:4b:f3:9a:d7:21:26:0e:b9:0d:2c:c0:c9:
         31:f4:f7:80:86:92:3c:8c:42:da:9c:e1:68:ee:f3:f3:af:29:
         be:bc:af:63:4c:4f:a5:7a:1a:4a:3f:99:f8:31:99:63:52:13:
         d1:ee:20:30:8d:a3:19:02:57:f6:54:7b:32:ab:c3:5b:62:2b:
         7f:d7:4e:1d:5e:69:8c:2c:ba:94:9f:e0:8c:bd:83:e6:89:03:
         b5:2a:3c:17:36:6b:26:1a:8a:a4:20:d2:1a:a7:dc:9b:a9:a6:
         f4:c8:d2:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1d+iqry79m7Sh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZjZjNWY0MWItMWQ3Ni00M2QwLWFmYmUtOGIzYzc0MWVkN2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCP3kyj1ex6v6+9QboNiq9eolXSXe2Zty4iX
PvtzTHA7w5J6urt55BbGIf6PI8KtVAkNpzPxd76hP8FTQ3F1DlYwYdvTE/n0vGHg
TQO5URn9usemBlJrrtqUw51QndU5o7HdiwKH9PTKWHY6VQKfyW74VhfV1JlVlcKh
ZG7aOtU2AcpQWADFj9fquGFoK04qfUiHldHpzkiSz8By/q2B/ARwV1yNAWTM2stg
5uoDl0YvBFhiErrEcCiTaYjftSql4zvSulDHkdVUWqEXUh07G+mL+qUW6hdMlOGU
AJtq+PfTU5pmR17X/tQA+FN61ElxEs0DCxrAE0Qo4rpEGAGhPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcCdhGc40Uqz8pPSlGBbXLL0v/PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDczNmZlNDMtMmQyZi0z
Mzk1LWFhMTMtMjI0Nzc5NGU4OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1YwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApnuWWZPbg6WIq8wZbf3j7hnN/O2E/5O7v8ZsMYL3oqyi8PxfwGBSV+
UGfJY4na1x/unZpvPRwI17q3hD9gBDiurRHwNRSaSX9e2y4lJfVZUgl5oX3EJgju
HvjpvbJ7NQ07lt+WYcQZcjKb62QcsB11lPEUiSI9xgb1V84Dsti36M0FxiOxkYzF
JQDsR5dudY8laarThkvzmtchJg65DSzAyTH094CGkjyMQtqc4Wju8/OvKb68r2NM
T6V6Gko/mfgxmWNSE9HuIDCNoxkCV/ZUezKrw1tiK3/XTh1eaYwsupSf4Iy9g+aJ
A7UqPBc2ayYaiqQg0hqn3JuppvTI0qc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org