Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f4fc68d7-4f93-3cdc-a4c6-826042c021bb.roa
File:                     f4fc68d7-4f93-3cdc-a4c6-826042c021bb.roa (raw, json)
Hash identifier:          P/qRxuw3TP1nR0c6xYfyBMfZ8X6AemyOMbGJbP2vvmo=
Subject key identifier:   0B:81:1A:9B:37:DF:94:BE:5B:62:37:C3:A2:7C:7C:8E:FF:05:D0:56
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584511B58F99038825BD47678280
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f4fc68d7-4f93-3cdc-a4c6-826042c021bb.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     396319
IP address blocks:        23.226.208.0/22 maxlen: 22
                          23.239.184.0/22 maxlen: 22
                          23.226.212.0/24 maxlen: 24
                          23.226.218.0/24 maxlen: 24
                          23.226.219.0/24 maxlen: 24
                          23.226.223.0/24 maxlen: 24
                          23.239.168.0/22 maxlen: 22
                          23.226.213.0/24 maxlen: 24
                          23.239.176.0/22 maxlen: 22
                          23.226.40.0/24 maxlen: 24
                          23.239.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:8f:99:03:88:25:bd:47:67:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=cb374bb9-cec3-447a-87d8-b8c97b62811b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f4:7b:bc:c5:cf:eb:1a:e3:ae:2d:fb:d9:9c:
                    38:84:5d:00:f8:ae:4f:7c:f0:6b:d0:20:c0:a6:fd:
                    17:e8:9b:a2:93:1c:ee:eb:32:ec:c7:da:d0:97:d9:
                    14:67:ee:9e:75:f0:dd:5c:c2:dd:83:c8:38:7b:91:
                    15:cd:ef:49:3c:92:b3:fe:69:80:00:38:6a:1e:40:
                    ea:2d:3c:07:4b:ea:cd:85:d6:53:9b:ed:84:e5:e1:
                    b9:22:41:ea:73:e4:bf:b7:43:cc:9c:fa:10:4b:1e:
                    e4:ed:30:e2:7e:fd:13:74:e3:d1:58:81:09:4e:33:
                    84:0a:33:6b:90:d1:6d:ff:4e:ea:e6:2e:b6:47:72:
                    77:35:c0:ca:f5:fb:0e:ef:d9:fb:00:a2:85:df:93:
                    db:d0:4f:d5:16:15:a8:b0:01:d3:5b:74:c5:ba:b1:
                    ef:da:17:fb:de:d7:31:47:e7:d6:03:b5:74:26:92:
                    bf:5a:87:1e:d5:9d:b4:d7:9c:49:08:45:40:00:7a:
                    25:e5:b8:81:c1:2e:dc:06:23:40:18:23:d3:94:96:
                    37:1c:8c:78:9d:4f:51:23:ce:c0:8c:de:6b:a7:a5:
                    24:cf:45:82:4d:b7:ec:b8:92:3e:f4:34:1a:6e:9e:
                    c6:2b:95:10:c4:14:0b:33:2b:0d:74:07:35:23:96:
                    d1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:1A:9B:37:DF:94:BE:5B:62:37:C3:A2:7C:7C:8E:FF:05:D0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f4fc68d7-4f93-3cdc-a4c6-826042c021bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.40.0/24
                  23.226.208.0-23.226.213.255
                  23.226.218.0/23
                  23.226.223.0/24
                  23.239.168.0/22
                  23.239.176.0-23.239.187.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e7:91:6e:89:e8:30:08:fb:8f:3a:e9:54:c9:61:11:09:16:
         12:e4:61:dd:40:39:82:8f:8d:33:f7:a5:10:15:11:d4:e9:58:
         d9:cd:8e:07:0f:94:33:25:df:2e:af:36:66:d1:02:88:bc:e2:
         4e:27:f9:cf:d8:18:ba:a8:66:73:b5:fe:58:b2:71:b6:e5:73:
         2a:d2:8e:af:93:14:d8:ac:27:d4:13:19:b2:cc:84:92:0f:c2:
         98:08:3c:73:52:81:62:34:7b:59:a1:30:0b:8e:c3:53:53:a7:
         72:e6:44:3f:c5:62:7d:80:ff:9a:6d:d2:f2:cd:16:13:4e:0f:
         27:58:15:d3:0f:3a:f4:88:77:72:c8:1d:0a:8a:c2:07:4e:20:
         b7:d2:3e:9d:d3:11:46:d7:c2:54:9d:e7:1e:23:94:33:a5:13:
         1e:ac:69:6c:dd:24:4c:0d:66:e3:92:9a:84:f4:50:00:cb:d6:
         f0:b8:27:17:23:9c:b0:24:49:bb:e8:af:c1:fc:65:52:a7:02:
         64:b3:e0:de:d8:e6:d5:11:e6:11:b5:08:3d:94:dd:ef:ee:41:
         ea:ca:77:f0:05:3f:18:34:64:22:34:11:b1:7e:7b:1c:67:d8:
         d4:bd:5f:c3:9d:1e:53:d5:7c:94:85:36:c4:98:a8:f4:6b:75:
         dd:42:ec:39
-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEURtY+ZA4glvUdngoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0
Mjg3MB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk
Y2IzNzRiYjktY2VjMy00NDdhLTg3ZDgtYjhjOTdiNjI4MTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PR7vMXP6xrjri372Zw4hF0A+K5PfPBr0CDA
pv0X6Juikxzu6zLsx9rQl9kUZ+6edfDdXMLdg8g4e5EVze9JPJKz/mmAADhqHkDq
LTwHS+rNhdZTm+2E5eG5IkHqc+S/t0PMnPoQSx7k7TDifv0TdOPRWIEJTjOECjNr
kNFt/07q5i62R3J3NcDK9fsO79n7AKKF35Pb0E/VFhWosAHTW3TFurHv2hf73tcx
R+fWA7V0JpK/Woce1Z2015xJCEVAAHol5biBwS7cBiNAGCPTlJY3HIx4nU9RI87A
jN5rp6Ukz0WCTbfsuJI+9DQabp7GK5UQxBQLMysNdAc1I5bRtQIDAQABo4IDgzCC
A38wHQYDVR0OBBYEFAuBGps335S+W2I3w6J8fI7/BdBWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4
NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvZjRmYzY4ZDctNGY5My0z
Y2RjLWE0YzYtODI2MDQyYzAyMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx
NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw
NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk
YzJmMDQyODcuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAF+IoMAwD
BAQX4tADBAEX4tQDBAEX4toDBAAX4t8DBAIX76gwDAMEBBfvsAMEAhfvuDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQBU55FuiegwCPuPOulUyWERCRYS5GHdQDmCj40z96UQFRHU6VjZzY4HD5Qz
Jd8urzZm0QKIvOJOJ/nP2Bi6qGZztf5YsnG25XMq0o6vkxTYrCfUExmyzISSD8KY
CDxzUoFiNHtZoTALjsNTU6dy5kQ/xWJ9gP+abdLyzRYTTg8nWBXTDzr0iHdyyB0K
isIHTiC30j6d0xFG18JUneceI5QzpRMerGls3SRMDWbjkpqE9FAAy9bwuCcXI5yw
JEm76K/B/GVSpwJks+De2ObVEeYRtQg9lN3v7kHqynfwBT8YNGQiNBGxfnscZ9jU
vV/DnR5T1XyUhTbEmKj0a3XdQuw5
-----END CERTIFICATE-----
Generated at Wed May 1 22:26:55 2024 by rpki-client on console-fra.rpki-client.org