Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ad23cf3e-bbe9-39d7-8093-04fae440dba4.roa
File:                     ad23cf3e-bbe9-39d7-8093-04fae440dba4.roa (raw, json)
Hash identifier:          WYGGDWRFKFEj0fnnvz9QK0/+TCaiHqkucDr/VJ8SaB0=
Subject key identifier:   E3:2B:A1:EF:39:E9:27:DD:48:53:3E:69:29:07:9A:D2:69:70:25:5C
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F432858456C93E764BADA8EEDED492100
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ad23cf3e-bbe9-39d7-8093-04fae440dba4.roa
Signing time:             Wed 03 Apr 2024 15:11:23 +0000
ROA not before:           Wed 03 Apr 2024 15:11:23 +0000
ROA not after:            Tue 02 Jul 2024 15:11:23 +0000
asID:                     265753
IP address blocks:        23.226.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:93:e7:64:ba:da:8e:ed:ed:49:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Apr  3 15:11:23 2024 GMT
            Not After : Jul  2 15:11:23 2024 GMT
        Subject: CN=07b966a6-0c6f-420c-b3e4-7d1c1ee931bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:05:1e:81:b6:13:2c:70:40:60:03:ae:2b:
                    eb:2b:56:03:36:32:ef:46:40:3e:e7:ea:a9:0f:e3:
                    ab:cb:a5:e3:5d:05:e5:6f:c2:0e:7f:7e:48:1e:4d:
                    b3:9d:43:2a:02:6a:6c:8c:72:1e:1a:d6:f6:86:4e:
                    a2:cb:3c:0a:f6:4e:69:ac:82:c9:dc:9e:c9:6c:eb:
                    d5:55:32:9a:50:d7:95:53:4f:92:b5:d7:e5:66:f1:
                    e7:15:c6:bf:80:ba:40:0e:f8:49:65:ab:83:fa:0a:
                    57:86:87:b6:dc:45:c2:d5:e9:50:4e:2c:b8:52:99:
                    15:7d:ee:87:3b:fe:b1:10:22:67:1e:46:85:3d:61:
                    aa:45:67:73:79:b9:f9:d7:5d:05:2a:98:84:2f:12:
                    f1:c4:94:63:0d:f5:ec:17:7f:9a:9b:10:76:62:eb:
                    90:62:ec:7c:96:c3:50:31:2f:76:8b:29:07:ca:7e:
                    28:49:1f:db:1f:cd:bf:b2:4e:f8:4a:5e:dc:60:34:
                    70:f4:4d:d0:72:29:3f:64:8e:09:2e:8d:95:9a:46:
                    5e:d6:e8:c5:16:f9:5a:a9:fd:38:29:cf:bc:fc:97:
                    60:b7:88:a4:e3:50:90:cc:b0:d2:d7:d3:6d:e2:01:
                    92:34:2b:e9:86:cb:5d:76:94:fa:29:82:93:49:e6:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:A1:EF:39:E9:27:DD:48:53:3E:69:29:07:9A:D2:69:70:25:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ad23cf3e-bbe9-39d7-8093-04fae440dba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:58:c8:b7:a1:3c:94:b2:8f:5c:cd:d3:ec:54:8a:bd:87:2e:
         ce:45:9e:c8:9b:7a:64:2e:0b:0c:f1:cb:18:a5:a8:1f:3c:32:
         c9:04:d4:9a:c5:0c:62:aa:e3:47:a3:c9:99:52:67:f6:d8:35:
         c4:f0:a1:f7:1b:77:80:57:16:85:01:f5:f2:cf:2e:11:6f:e5:
         cf:c5:e5:04:a2:5d:07:f5:3f:09:dd:fe:fb:30:27:89:5e:64:
         4e:fd:cb:99:1f:ba:73:11:0b:55:98:1c:86:d0:d7:88:3d:fd:
         d8:21:76:57:9f:ec:ff:49:25:70:c4:ab:61:86:a5:ca:0a:df:
         8c:f2:08:71:40:e9:a7:7e:30:e4:0b:0d:10:f3:d4:23:66:30:
         c2:b6:72:75:6d:39:e3:50:79:98:66:5f:9e:76:ca:1a:14:18:
         b1:75:45:17:78:33:df:02:09:5b:63:e4:02:07:e7:1b:c5:51:
         f1:31:6b:c7:2b:3e:5e:c1:75:0e:56:da:78:0c:57:9f:3b:22:
         ba:8b:7d:44:63:69:1b:16:8e:02:a2:00:98:73:b4:08:79:2f:
         d5:f9:99:ea:d7:c1:03:3a:d9:ea:6b:de:ae:1a:32:46:69:12:
         c8:46:70:03:09:8f:09:3b:5d:39:79:9c:2d:94:84:f2:e5:5f:
         72:fe:e9:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsk+dkutqO7e1JIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi
MDRkMB4XDTI0MDQwMzE1MTEyM1oXDTI0MDcwMjE1MTEyM1owLzEtMCsGA1UEAxMk
MDdiOTY2YTYtMGM2Zi00MjBjLWIzZTQtN2QxYzFlZTkzMWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpYFHoG2EyxwQGADrivrK1YDNjLvRkA+5+qp
D+Ory6XjXQXlb8IOf35IHk2znUMqAmpsjHIeGtb2hk6iyzwK9k5prILJ3J7JbOvV
VTKaUNeVU0+StdflZvHnFca/gLpADvhJZauD+gpXhoe23EXC1elQTiy4UpkVfe6H
O/6xECJnHkaFPWGqRWdzebn5110FKpiELxLxxJRjDfXsF3+amxB2YuuQYux8lsNQ
MS92iykHyn4oSR/bH82/sk74Sl7cYDRw9E3Qcik/ZI4JLo2VmkZe1ujFFvlaqf04
Kc+8/Jdgt4ik41CQzLDS19Nt4gGSNCvphstddpT6KYKTSeb2OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMroe856SfdSFM+aSkHmtJpcCVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3
YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvYWQyM2NmM2UtYmJlOS0z
OWQ3LTgwOTMtMDRmYWU0NDBkYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi
ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw
YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2
N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+IUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1YyLehPJSyj1zN0+xUir2HLs5FnsibemQuCwzxyxilqB88MskE1JrF
DGKq40ejyZlSZ/bYNcTwofcbd4BXFoUB9fLPLhFv5c/F5QSiXQf1Pwnd/vswJ4le
ZE79y5kfunMRC1WYHIbQ14g9/dghdlef7P9JJXDEq2GGpcoK34zyCHFA6ad+MOQL
DRDz1CNmMMK2cnVtOeNQeZhmX552yhoUGLF1RRd4M98CCVtj5AIH5xvFUfExa8cr
Pl7BdQ5W2ngMV587IrqLfURjaRsWjgKiAJhztAh5L9X5merXwQM62epr3q4aMkZp
EshGcAMJjwk7XTl5nC2UhPLlX3L+6QI=
-----END CERTIFICATE-----
Generated at Mon May 6 02:00:51 2024 by rpki-client on console-fra.rpki-client.org