Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
File:                     d44ea506-3bb6-396c-9617-92bba4db10b9.roa (raw, json)
Hash identifier:          6sgMBvvS1eFoylPYFIO9uqOHIqejkvYegWLK+J0MNeM=
Subject key identifier:   20:77:65:39:8E:E3:F8:CF:5E:A1:1D:8C:DC:D9:9B:EA:34:7F:D4:D1
Certificate issuer:       /CN=46d43cee-39e6-4150-ae7b-94a20c139206
Certificate serial:       010D0C9F4328584769D0D575FD807228C6299600
Authority key identifier: 28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     394367
IP address blocks:        23.176.0.0/24 maxlen: 24
                          205.207.142.0/24 maxlen: 24
                          207.167.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d5:75:fd:80:72:28:c6:29:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d43cee-39e6-4150-ae7b-94a20c139206
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=c6589ad5-5ba1-45e9-b2d3-46b6b93585b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a4:b0:50:b0:6d:fe:24:09:23:76:63:cd:31:
                    52:15:39:16:17:72:8d:7f:bf:8b:37:9b:2e:67:17:
                    38:18:96:5b:68:dd:8a:ca:03:fb:23:48:75:91:13:
                    a8:d2:16:a3:c0:7d:38:1a:03:fd:72:ad:26:ac:9b:
                    a6:33:4e:70:1e:99:50:f7:71:20:5f:75:fe:8a:63:
                    6e:34:4e:c6:94:03:e2:1b:40:37:19:7f:97:cf:7c:
                    f9:d7:ec:0c:e6:7d:ad:60:cc:f4:45:93:af:4f:f5:
                    13:ab:81:ac:c0:d7:09:1e:44:03:30:df:7b:db:af:
                    e4:04:cb:a5:b7:51:af:3e:ca:6b:76:e7:bc:74:ba:
                    a7:7b:3c:57:76:ca:65:43:21:f5:6e:36:3d:77:e2:
                    a4:ae:e9:ff:4d:a6:24:e2:e5:17:06:59:19:d0:92:
                    21:6a:19:74:7a:fd:fa:4d:e4:a9:19:74:9d:35:ff:
                    a1:d2:55:29:9d:0f:ba:b0:55:36:62:28:4e:1e:35:
                    30:21:17:41:9a:4f:6c:06:a6:6d:df:cd:8d:fb:f7:
                    9a:30:fc:ed:39:41:20:a7:1e:29:56:0c:c2:ea:c6:
                    90:02:f4:76:37:69:6f:83:91:45:06:d0:17:95:8c:
                    68:13:57:96:77:9e:39:30:59:60:5b:89:71:14:8d:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:77:65:39:8E:E3:F8:CF:5E:A1:1D:8C:DC:D9:9B:EA:34:7F:D4:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/d44ea506-3bb6-396c-9617-92bba4db10b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl

            X509v3 Authority Key Identifier:
                keyid:28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.0.0/24
                  205.207.142.0/24
                  207.167.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ac:a1:86:29:99:1a:7a:ec:38:53:54:90:23:0d:b1:64:cd:
         d7:a5:53:2d:da:cd:9a:dd:49:40:6d:fd:26:ba:75:7f:09:e8:
         b3:d6:d3:d8:0a:91:ce:b8:e2:14:f7:6d:73:d0:d3:a5:ee:31:
         8e:ee:55:ff:13:aa:52:d3:6a:25:31:db:12:5a:d0:82:c2:36:
         a8:84:df:87:ed:18:c5:6f:4b:19:bd:38:35:f6:ee:e3:03:95:
         b8:a4:a6:39:64:97:7b:15:ef:d5:e9:37:ff:f3:39:99:60:70:
         a5:20:77:d8:fc:e2:c3:16:31:d9:38:28:f8:bf:64:ba:55:be:
         d3:56:c6:d3:d5:94:d3:24:2a:62:e1:fb:71:d9:a6:33:b7:28:
         97:36:02:ea:ef:ad:7a:9e:bd:66:03:cd:d6:71:cd:09:ec:c8:
         ea:53:2b:a1:60:8e:bc:20:34:25:85:f3:44:34:d3:92:7e:56:
         ce:cd:e0:eb:eb:62:0d:75:69:ee:8b:df:2a:2e:da:ec:75:3d:
         b6:dc:f2:16:a4:1f:67:f5:bd:d9:89:10:a7:9a:a5:21:53:ca:
         14:cd:7e:fd:6e:1f:98:8d:1c:75:a1:a5:af:f8:3f:ec:bf:08:
         e7:25:82:5b:9e:bb:56:e5:60:ee:d4:fd:23:b2:37:e9:73:cb:
         3a:2a:7c:bb
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEdp0NV1/YByKMYplgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDZkNDNjZWUtMzllNi00MTUwLWFlN2ItOTRhMjBjMTM5
MjA2MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk
YzY1ODlhZDUtNWJhMS00NWU5LWIyZDMtNDZiNmI5MzU4NWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqSwULBt/iQJI3ZjzTFSFTkWF3KNf7+LN5su
Zxc4GJZbaN2KygP7I0h1kROo0hajwH04GgP9cq0mrJumM05wHplQ93EgX3X+imNu
NE7GlAPiG0A3GX+Xz3z51+wM5n2tYMz0RZOvT/UTq4GswNcJHkQDMN9726/kBMul
t1GvPsprdue8dLqnezxXdsplQyH1bjY9d+Kkrun/TaYk4uUXBlkZ0JIhahl0ev36
TeSpGXSdNf+h0lUpnQ+6sFU2YihOHjUwIRdBmk9sBqZt382N+/eaMPztOUEgpx4p
VgzC6saQAvR2N2lvg5FFBtAXlYxoE1eWd545MFlgW4lxFI0WaQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCB3ZTmO4/jPXqEdjNzZm+o0f9TRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NmQ0
M2NlZS0zOWU2LTQxNTAtYWU3Yi05NGEyMGMxMzkyMDYvZDQ0ZWE1MDYtM2JiNi0z
OTZjLTk2MTctOTJiYmE0ZGIxMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDZkNDNjZWUtMzllNi00MTUwLWFl
N2ItOTRhMjBjMTM5MjA2LzQ2ZDQzY2VlLTM5ZTYtNDE1MC1hZTdiLTk0YTIwYzEz
OTIwNi5jcmwwHwYDVR0jBBgwFoAUKIc788kgyu4H+FS1ATebxoQI+RUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NmQ0M2NlZS0zOWU2LTQxNTAtYWU3Yi05NGEy
MGMxMzkyMDYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF7AAAwQA
zc+OAwQCz6dIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABWsoYYpmRp67DhTVJAjDbFkzdelUy3azZrdSUBt
/Sa6dX8J6LPW09gKkc644hT3bXPQ06XuMY7uVf8TqlLTaiUx2xJa0ILCNqiE34ft
GMVvSxm9ODX27uMDlbikpjlkl3sV79XpN//zOZlgcKUgd9j84sMWMdk4KPi/ZLpV
vtNWxtPVlNMkKmLh+3HZpjO3KJc2AurvrXqevWYDzdZxzQnsyOpTK6FgjrwgNCWF
80Q005J+Vs7N4OvrYg11ae6L3you2ux1Pbbc8hakH2f1vdmJEKeapSFTyhTNfv1u
H5iNHHWhpa/4P+y/COclglueu1blYO7U/SOyN+lzyzoqfLs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:56 2024 by rpki-client on console-fra.rpki-client.org