Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa
File:                     f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa (raw, json)
Hash identifier:          529PzDbvOqSwlC2hCV5r+UvbL0xJhQZTG0ejYSGRG70=
Subject key identifier:   51:10:E0:26:8A:9D:C7:F0:3E:3A:D8:EF:F1:44:F3:9D:05:86:3E:98
Certificate issuer:       /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
Certificate serial:       010D0C9F4328584563F311D913D6732507E75D80
Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     35008
IP address blocks:        23.153.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:11:d9:13:d6:73:25:07:e7:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=bbda3ccf-f811-458d-ae44-9e32aa4e0111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:a8:6c:33:1f:8f:f6:ef:7a:e1:b3:aa:a6:
                    3f:80:fc:9d:76:2b:86:51:70:a0:47:5b:27:39:3a:
                    23:c1:6f:2c:7d:fa:8d:6e:6e:02:f8:25:ff:87:8d:
                    f9:77:5e:93:fa:db:5a:2e:63:50:53:90:e9:fb:51:
                    03:a4:73:fa:68:98:1a:bd:9e:9b:ff:26:57:ee:4d:
                    89:ac:18:3f:99:7f:17:97:ef:07:f6:2e:74:9e:63:
                    c4:83:e2:13:34:62:23:97:63:b1:0b:1b:d7:c7:98:
                    a8:09:d9:0a:c3:6a:2b:1a:fc:e2:56:d6:19:81:2e:
                    03:12:6f:fb:97:37:f0:c9:ba:98:e7:f6:e0:4a:1c:
                    dc:fe:54:08:fa:91:0e:7b:8d:44:d6:10:7a:07:f8:
                    71:8e:1f:80:7c:ac:75:62:5b:2c:73:1e:a4:b4:7d:
                    70:f1:0f:33:98:3b:4a:3f:cc:71:29:b7:2c:67:72:
                    50:4c:88:fc:a6:84:2f:96:5b:f9:72:fe:13:f3:6f:
                    3b:a1:08:e6:ec:3a:04:89:85:49:e1:79:9a:c2:9c:
                    1a:07:ba:25:2c:fb:c1:27:b2:f1:67:be:ca:17:0e:
                    3f:3f:84:ae:b8:f0:f3:21:5b:90:57:6d:2f:7e:95:
                    30:e7:19:1c:f6:b9:e2:64:91:c1:bf:bb:8a:f9:e4:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:10:E0:26:8A:9D:C7:F0:3E:3A:D8:EF:F1:44:F3:9D:05:86:3E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:16:bd:24:7b:d1:9a:73:4e:bc:7e:fd:e4:33:f2:54:55:b5:
         a1:f2:96:34:df:e2:7f:5f:49:f4:5d:5d:f6:e4:51:41:37:05:
         4f:59:88:8b:59:fc:16:54:cc:2b:c0:6b:c2:f9:60:f3:ec:2c:
         13:f1:91:a3:a1:ee:b2:c6:a4:1a:de:97:0f:20:2c:d1:9a:92:
         8b:b7:a7:31:ce:62:f5:b3:a9:ce:f7:d4:a8:3c:22:fa:eb:92:
         8e:51:33:28:bd:ef:75:a5:11:2f:8f:9f:14:e9:b8:82:bf:d6:
         fc:2a:2d:37:93:77:3f:c9:ff:73:58:f9:21:73:b4:4c:f3:a0:
         ea:f0:5b:be:94:4a:ab:50:59:85:50:a9:56:a8:08:73:3e:30:
         d1:2a:b4:d4:c1:ff:f3:46:61:f9:e1:98:c9:fc:cf:67:82:b3:
         07:cc:fc:ad:de:31:08:4a:38:5f:71:27:6f:ed:65:89:ac:88:
         66:b2:5c:58:32:c4:f4:bd:9c:42:09:5e:98:f5:cd:d4:ce:5c:
         a8:55:ad:51:d2:92:e3:2e:b1:35:f0:48:cf:84:c5:c3:2e:9c:
         fb:73:6f:7f:f8:ea:8f:e3:6a:50:6b:33:f6:35:53:fe:a3:e1:
         98:8a:af:54:a9:01:6c:81:37:9c:36:4c:4b:88:93:b8:06:54:
         f7:16:57:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8xHZE9ZzJQfnXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz
ODE0MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk
YmJkYTNjY2YtZjgxMS00NThkLWFlNDQtOWUzMmFhNGUwMTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiKobDMfj/bveuGzqqY/gPyddiuGUXCgR1sn
OTojwW8sffqNbm4C+CX/h435d16T+ttaLmNQU5Dp+1EDpHP6aJgavZ6b/yZX7k2J
rBg/mX8Xl+8H9i50nmPEg+ITNGIjl2OxCxvXx5ioCdkKw2orGvziVtYZgS4DEm/7
lzfwybqY5/bgShzc/lQI+pEOe41E1hB6B/hxjh+AfKx1Ylsscx6ktH1w8Q8zmDtK
P8xxKbcsZ3JQTIj8poQvllv5cv4T8287oQjm7DoEiYVJ4XmawpwaB7olLPvBJ7Lx
Z77KFw4/P4SuuPDzIVuQV20vfpUw5xkc9rniZJHBv7uK+eRxmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEQ4CaKncfwPjrY7/FE850Fhj6YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi
NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvZjFjNDBmOGYtNGM5Yy0z
YWNiLTkzY2QtZjZjOWIyZTlkNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5
MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2
MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi
ZjliNjM4MTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5k4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4WvSR70ZpzTrx+/eQz8lRVtaHyljTf4n9fSfRdXfbkUUE3BU9ZiItZ
/BZUzCvAa8L5YPPsLBPxkaOh7rLGpBrelw8gLNGakou3pzHOYvWzqc731Kg8Ivrr
ko5RMyi973WlES+PnxTpuIK/1vwqLTeTdz/J/3NY+SFztEzzoOrwW76USqtQWYVQ
qVaoCHM+MNEqtNTB//NGYfnhmMn8z2eCswfM/K3eMQhKOF9xJ2/tZYmsiGayXFgy
xPS9nEIJXpj1zdTOXKhVrVHSkuMusTXwSM+ExcMunPtzb3/46o/jalBrM/Y1U/6j
4ZiKr1SpAWyBN5w2TEuIk7gGVPcWV3Y=
-----END CERTIFICATE-----
Generated at Tue May 7 17:02:02 2024 by rpki-client on console-ams.rpki-client.org