Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa
File:                     fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa (raw, json)
Hash identifier:          I6FLQWnFHMcpoW4wziJRNR9j0SC6KndB4MgcmxbmIOM=
Subject key identifier:   5B:6C:8C:AA:68:24:41:98:2B:EB:F0:07:60:70:AC:E0:CA:D1:3A:C2
Certificate issuer:       /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial:       010D0C9F43285847F584F2133EE86101B0D50C00
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     15020
IP address blocks:        23.188.17.0/24 maxlen: 24
                          23.188.18.0/24 maxlen: 24
                          23.188.19.0/24 maxlen: 24
                          23.188.20.0/24 maxlen: 24
                          23.188.21.0/24 maxlen: 24
                          23.188.22.0/24 maxlen: 24
                          23.188.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:f2:13:3e:e8:61:01:b0:d5:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=4870ef7a-aa8e-431f-85ac-708d654a247e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ce:4c:2e:9d:97:78:bf:fa:00:08:29:78:d9:
                    b4:a2:6d:db:6f:63:8c:df:8b:e1:a2:86:7d:70:4f:
                    9b:d7:44:05:72:e7:c9:de:4b:c5:19:90:fb:3d:92:
                    71:39:89:d0:7e:7b:4a:59:24:8b:71:ba:3b:fc:97:
                    c1:f7:c3:c1:fb:08:32:27:de:ae:6e:2a:82:28:4a:
                    73:1b:8c:a0:ab:87:66:85:30:43:ec:cd:2f:01:43:
                    2e:6c:b1:bd:e1:f2:8a:ef:11:8f:2d:f6:28:76:1a:
                    6a:37:91:2c:0d:a0:93:51:d2:57:ed:98:88:80:d8:
                    f4:b5:e5:0b:85:11:2b:01:74:ef:f2:5e:82:70:e3:
                    fb:96:a9:e3:25:5d:cd:da:4b:4e:80:33:f6:4d:a5:
                    47:c4:da:98:20:bf:41:02:1a:f6:01:40:7c:44:1b:
                    94:bf:1b:d8:8a:dd:07:f4:b5:4e:f3:33:d7:c5:a5:
                    15:33:bf:ba:3b:43:60:16:11:3e:27:c4:09:05:21:
                    b9:cd:45:00:73:fa:81:8d:62:04:15:1b:32:4b:50:
                    a3:97:90:98:7c:c8:8a:eb:e4:c4:6a:a9:d0:d2:ee:
                    29:85:47:06:59:25:fe:bb:ae:80:3a:fd:50:21:33:
                    d4:70:c4:9a:d6:00:31:f3:2c:fb:cf:a3:60:78:9d:
                    d6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6C:8C:AA:68:24:41:98:2B:EB:F0:07:60:70:AC:E0:CA:D1:3A:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl

            X509v3 Authority Key Identifier:
                keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.17.0-23.188.23.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2f:9a:8c:c1:40:f7:d6:16:92:c6:58:49:8b:d3:1d:4c:33:
         78:dc:da:0d:39:4e:87:91:b1:7c:0c:4e:1d:bd:60:2f:59:bf:
         58:e8:87:63:f1:c4:51:3a:91:8f:00:d4:c5:2f:1e:aa:42:a8:
         5f:c1:22:3c:23:2f:0f:0c:49:97:93:2a:b4:60:b2:03:02:dd:
         f6:2d:65:b6:bb:de:29:f7:2f:93:ef:66:20:ab:45:7c:45:52:
         c2:d7:2d:cb:f0:34:6f:03:91:eb:6f:c5:fd:52:a2:67:98:09:
         82:4e:58:23:49:9b:61:bc:9d:e6:03:3e:1c:20:f3:90:07:95:
         7a:c4:5b:6b:9d:57:4f:8a:0c:1b:88:dc:5d:16:a8:94:ff:e5:
         ce:b1:95:9b:1e:e7:e6:44:af:6a:11:9f:b3:03:72:54:38:ae:
         fa:7e:61:74:01:9e:0c:a7:32:06:64:fc:d6:92:d3:c6:c5:b6:
         45:94:b2:0e:b7:4b:d7:0a:9d:a6:08:73:96:14:2d:75:09:46:
         a2:6e:c3:07:fd:74:f7:7a:50:01:e2:91:cc:fb:1a:6e:87:8f:
         9b:98:0a:90:66:4e:25:59:7f:cf:21:fb:96:a9:54:ed:49:7f:
         69:58:63:f0:0c:90:e2:a1:59:05:78:24:f8:77:f3:c7:cd:3b:
         61:82:31:ee
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEf1hPITPuhhAbDVDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5
YjEyMB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk
NDg3MGVmN2EtYWE4ZS00MzFmLTg1YWMtNzA4ZDY1NGEyNDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c5MLp2XeL/6AAgpeNm0om3bb2OM34vhooZ9
cE+b10QFcufJ3kvFGZD7PZJxOYnQfntKWSSLcbo7/JfB98PB+wgyJ96ubiqCKEpz
G4ygq4dmhTBD7M0vAUMubLG94fKK7xGPLfYodhpqN5EsDaCTUdJX7ZiIgNj0teUL
hRErAXTv8l6CcOP7lqnjJV3N2ktOgDP2TaVHxNqYIL9BAhr2AUB8RBuUvxvYit0H
9LVO8zPXxaUVM7+6O0NgFhE+J8QJBSG5zUUAc/qBjWIEFRsyS1Cjl5CYfMiK6+TE
aqnQ0u4phUcGWSX+u66AOv1QITPUcMSa1gAx8yz7z6NgeJ3WaQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFFtsjKpoJEGYK+vwB2BwrODK0TrCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2
MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvZmRjOGEyYzgtZTgzMy0z
N2I1LWFhOTYtNTRmNWQ5NjU3OWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5
OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk
OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz
ZTBmZDliMTIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAXvBED
BAMXvBAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAUC+ajMFA99YWksZYSYvTHUwzeNzaDTlOh5GxfAxOHb1g
L1m/WOiHY/HEUTqRjwDUxS8eqkKoX8EiPCMvDwxJl5MqtGCyAwLd9i1ltrveKfcv
k+9mIKtFfEVSwtcty/A0bwOR62/F/VKiZ5gJgk5YI0mbYbyd5gM+HCDzkAeVesRb
a51XT4oMG4jcXRaolP/lzrGVmx7n5kSvahGfswNyVDiu+n5hdAGeDKcyBmT81pLT
xsW2RZSyDrdL1wqdpghzlhQtdQlGom7DB/1093pQAeKRzPsaboePm5gKkGZOJVl/
zyH7lqlU7Ul/aVhj8AyQ4qFZBXgk+Hfzx807YYIx7g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:38 2024 by rpki-client on console-ams.rpki-client.org