Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa
File:                     99e77285-3c2b-3fae-96c0-463d87b57b40.roa (raw, json)
Hash identifier:          CQo03TeeRoLtu1b1AQjw7eLDhtjJ+yvBlYHqyUUr8kY=
Subject key identifier:   69:12:E8:22:7D:9F:3F:75:2A:A3:26:A9:E1:EB:0E:80:89:BA:B6:DD
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F43285847A04147518C98FD85E382C3A0
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     399214
IP address blocks:        23.141.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:47:51:8c:98:fd:85:e3:82:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=2fa166b2-ee10-4d05-95e9-2e26ff4fe0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:44:7c:ab:35:3f:b5:52:07:39:a4:45:3b:
                    8f:3a:8b:29:60:6b:0d:96:90:33:aa:b7:f6:6a:46:
                    9f:26:6d:06:7c:80:a8:55:87:d2:04:60:5d:dd:3b:
                    f4:4c:a1:fa:79:e5:ba:30:35:47:d8:08:d1:41:fc:
                    29:be:dd:a9:73:46:60:19:2c:c6:92:46:cb:cb:d9:
                    16:96:ac:d9:39:c9:1f:a6:e3:24:45:d7:e3:4d:83:
                    e7:9b:b2:8e:cb:a5:06:ab:42:2d:28:eb:ed:74:b5:
                    70:9a:98:db:6d:05:72:dc:0f:02:db:8c:7c:b3:78:
                    27:26:2c:15:8e:b2:bd:71:51:31:d5:46:4f:2b:ef:
                    7d:a1:b1:e5:02:36:e2:3d:ce:2b:32:f9:9b:b1:2d:
                    73:19:87:11:44:48:b8:9b:ef:44:c3:26:81:f4:12:
                    e1:32:a8:7c:a0:ec:95:ff:19:2c:90:62:e9:7b:3e:
                    3d:50:e0:96:eb:18:46:f9:cd:55:89:61:00:21:2d:
                    69:23:6d:f2:50:a9:14:99:79:f6:67:60:95:6c:5a:
                    d9:fc:b5:c0:75:29:95:fd:85:e3:f8:a9:5a:1a:0d:
                    40:9c:71:e7:bf:35:8d:18:78:1f:0f:df:50:4f:73:
                    83:a1:44:ca:e4:0e:81:ea:81:70:f7:ae:46:b1:04:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:12:E8:22:7D:9F:3F:75:2A:A3:26:A9:E1:EB:0E:80:89:BA:B6:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:29:fa:53:c6:69:b4:df:de:26:f4:c4:37:0d:fc:64:a9:
         25:ac:c1:88:d6:30:e8:a4:d2:68:ce:15:88:a9:0b:a2:06:bd:
         d4:7d:ed:04:50:2b:ea:67:ec:37:96:b1:ba:16:e0:e4:6f:90:
         ba:2f:4d:ef:35:e7:67:28:9e:87:ba:b3:48:e0:7e:f0:93:c4:
         14:34:bc:b4:e8:71:76:a1:5e:76:4a:0a:4e:70:4a:10:78:b6:
         8d:13:09:dd:8f:02:58:8d:c6:53:ff:83:f4:1a:99:96:d4:21:
         18:72:10:1c:c5:f0:0f:1d:e8:b2:1b:0c:98:1e:92:15:6a:b8:
         0f:e4:48:d6:1c:3c:a9:ff:f1:41:0f:21:40:4f:01:cf:2c:06:
         d5:30:ac:5d:0a:62:7f:8c:3d:35:b6:c1:d7:05:97:b5:a6:41:
         05:7b:31:e7:f2:7c:b6:00:ee:3b:5e:06:c9:95:41:28:8b:da:
         f7:87:7b:b2:41:98:77:e0:68:07:90:12:05:f8:86:0f:cb:d5:
         24:06:7f:3b:47:de:7d:55:0f:5c:86:bd:9f:5d:d6:c6:b3:b8:
         83:a5:0a:6c:5c:b7:b3:65:59:56:c7:54:63:82:19:cd:a7:25:
         99:3b:8d:d6:16:b6:21:a3:64:c5:fa:e0:81:9c:26:48:74:4b:
         ed:57:af:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQUdRjJj9heOCw6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk
ZmQxMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
MmZhMTY2YjItZWUxMC00ZDA1LTk1ZTktMmUyNmZmNGZlMGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDFEfKs1P7VSBzmkRTuPOospYGsNlpAzqrf2
akafJm0GfICoVYfSBGBd3Tv0TKH6eeW6MDVH2AjRQfwpvt2pc0ZgGSzGkkbLy9kW
lqzZOckfpuMkRdfjTYPnm7KOy6UGq0ItKOvtdLVwmpjbbQVy3A8C24x8s3gnJiwV
jrK9cVEx1UZPK+99obHlAjbiPc4rMvmbsS1zGYcRREi4m+9EwyaB9BLhMqh8oOyV
/xkskGLpez49UOCW6xhG+c1ViWEAIS1pI23yUKkUmXn2Z2CVbFrZ/LXAdSmV/YXj
+KlaGg1AnHHnvzWNGHgfD99QT3ODoUTK5A6B6oFw965GsQTyhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkS6CJ9nz91KqMmqeHrDoCJurbdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl
N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvOTllNzcyODUtM2MyYi0z
ZmFlLTk2YzAtNDYzZDg3YjU3YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4
OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy
ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh
ODlmMmRmZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF41oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjoKfpTxmm0394m9MQ3DfxkqSWswYjWMOik0mjOFYipC6IGvdR97QRQ
K+pn7DeWsboW4ORvkLovTe8152conoe6s0jgfvCTxBQ0vLTocXahXnZKCk5wShB4
to0TCd2PAliNxlP/g/QamZbUIRhyEBzF8A8d6LIbDJgekhVquA/kSNYcPKn/8UEP
IUBPAc8sBtUwrF0KYn+MPTW2wdcFl7WmQQV7MefyfLYA7jteBsmVQSiL2veHe7JB
mHfgaAeQEgX4hg/L1SQGfztH3n1VD1yGvZ9d1sazuIOlCmxct7NlWVbHVGOCGc2n
JZk7jdYWtiGjZMX64IGcJkh0S+1Xr6U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:55 2024 by rpki-client on console-fra.rpki-client.org