Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/7aa24150-2c39-3866-b24c-0bda23609ae1.roa
File:                     7aa24150-2c39-3866-b24c-0bda23609ae1.roa (raw, json)
Hash identifier:          Jzf59gggS4SPmHGH2n/Kv5k/wrYkyre4MrpLRWk7NcU=
Subject key identifier:   24:37:13:7B:88:5B:0F:FF:AF:E6:28:9F:3F:6C:C1:7B:B0:3B:E4:70
Certificate issuer:       /CN=92790d80-09a9-411b-b7e0-abbcd294be57
Certificate serial:       010D0C9F43285847E78F5B53464DDF90A62DF680
Authority key identifier: 3F:34:1F:D0:4A:7A:FA:61:22:16:C0:10:48:83:DA:14:6C:57:FA:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/7aa24150-2c39-3866-b24c-0bda23609ae1.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     32127
IP address blocks:        23.173.208.0/22 maxlen: 32
                          23.173.212.0/24 maxlen: 32
                          45.11.140.0/22 maxlen: 32
                          2602:fcce::/36 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:5b:53:46:4d:df:90:a6:2d:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92790d80-09a9-411b-b7e0-abbcd294be57
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=9f20d575-2b96-435b-96c6-d0703f230f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:07:5e:ee:08:f2:72:04:70:5f:74:e5:d6:
                    7e:34:58:80:06:16:4d:12:35:d4:08:a0:3d:88:a6:
                    90:aa:29:fc:03:9b:79:cb:ea:5c:75:a0:fd:1e:95:
                    6d:61:f0:d1:dd:fc:61:d8:ec:9c:76:02:28:63:ae:
                    c1:8c:65:a2:07:b2:11:6e:11:08:cc:ca:21:9b:be:
                    68:45:91:ab:8a:4a:0c:be:7f:06:a7:79:74:5c:06:
                    03:03:05:84:70:53:a7:22:f3:81:4e:80:d3:f9:b1:
                    fb:6a:96:ee:56:20:44:04:1e:fc:9c:87:35:4b:68:
                    07:2e:b3:61:ea:be:de:b1:9b:4b:19:55:19:19:be:
                    b2:6b:d8:4f:23:9f:67:5f:65:53:0a:f5:ee:ce:ff:
                    92:b8:a9:f0:16:a6:c8:5d:7e:19:36:ad:07:13:01:
                    dd:74:bf:36:34:01:d9:67:88:67:1f:37:1f:5a:23:
                    cb:5d:4a:63:eb:75:42:88:63:d0:5e:b8:75:fb:fd:
                    fc:db:16:8a:5c:26:09:7d:55:ac:72:04:58:b4:c7:
                    5a:9f:54:e8:e2:9d:c1:e7:3f:9a:80:2b:b5:ab:42:
                    a8:1c:9f:6b:6f:50:87:5a:f9:2e:53:f4:21:a6:11:
                    3d:6e:a8:e4:5e:90:33:d3:b4:40:84:89:3f:88:d0:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:37:13:7B:88:5B:0F:FF:AF:E6:28:9F:3F:6C:C1:7B:B0:3B:E4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/7aa24150-2c39-3866-b24c-0bda23609ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.crl

            X509v3 Authority Key Identifier:
                keyid:3F:34:1F:D0:4A:7A:FA:61:22:16:C0:10:48:83:DA:14:6C:57:FA:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.208.0-23.173.212.255
                  45.11.140.0/22
                IPv6:
                  2602:fcce::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:62:51:15:8e:a1:6e:5a:a5:5e:63:09:d6:b4:88:bc:fc:6b:
         bb:b4:21:62:fc:e5:aa:fd:f8:e7:8c:cd:43:9a:40:5f:27:49:
         8e:04:33:f1:d5:62:f9:1b:29:a8:a7:b3:5f:76:fe:2f:5b:f5:
         c3:4d:8e:61:61:f6:e1:8f:b1:cf:30:fc:68:61:0e:ac:78:39:
         79:6a:f9:a0:fe:f9:80:08:a3:8c:bb:d1:30:e6:56:d5:d9:0d:
         fd:4e:65:4d:40:ab:7f:3b:c4:fd:e2:e1:e6:c2:3b:32:fb:b1:
         9c:cc:91:82:af:49:26:4a:53:85:7b:e8:90:20:dc:ba:25:ef:
         95:1c:ba:5b:09:8a:61:44:14:65:4d:99:18:e4:80:21:7e:18:
         22:80:b3:d3:2b:36:ec:fc:77:ec:e5:0e:8a:a7:76:57:4c:03:
         ec:42:93:b8:72:ba:95:4f:d4:d4:eb:8f:99:27:27:e1:37:5c:
         3c:dc:d4:aa:ca:83:d7:d8:d7:88:97:f3:52:9b:e6:86:85:79:
         fc:9a:da:f9:32:d8:41:93:88:17:bf:6b:7b:90:c4:9b:f1:ca:
         be:fd:23:33:7a:b5:61:4a:8c:b6:25:49:24:3a:15:77:71:3d:
         ce:7a:51:90:de:18:2e:61:18:a2:76:13:85:46:a9:80:92:ac:
         c5:c2:f7:26
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEfnj1tTRk3fkKYt9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3OTBkODAtMDlhOS00MTFiLWI3ZTAtYWJiY2QyOTRi
ZTU3MB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk
OWYyMGQ1NzUtMmI5Ni00MzViLTk2YzYtZDA3MDNmMjMwZjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5oHXu4I8nIEcF905dZ+NFiABhZNEjXUCKA9
iKaQqin8A5t5y+pcdaD9HpVtYfDR3fxh2OycdgIoY67BjGWiB7IRbhEIzMohm75o
RZGrikoMvn8Gp3l0XAYDAwWEcFOnIvOBToDT+bH7apbuViBEBB78nIc1S2gHLrNh
6r7esZtLGVUZGb6ya9hPI59nX2VTCvXuzv+SuKnwFqbIXX4ZNq0HEwHddL82NAHZ
Z4hnHzcfWiPLXUpj63VCiGPQXrh1+/382xaKXCYJfVWscgRYtMdan1To4p3B5z+a
gCu1q0KoHJ9rb1CHWvkuU/QhphE9bqjkXpAz07RAhIk/iNBDyQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFCQ3E3uIWw//r+Yonz9swXuwO+RwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Mjc5
MGQ4MC0wOWE5LTQxMWItYjdlMC1hYmJjZDI5NGJlNTcvN2FhMjQxNTAtMmMzOS0z
ODY2LWIyNGMtMGJkYTIzNjA5YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTI3OTBkODAtMDlhOS00MTFiLWI3
ZTAtYWJiY2QyOTRiZTU3LzkyNzkwZDgwLTA5YTktNDExYi1iN2UwLWFiYmNkMjk0
YmU1Ny5jcmwwHwYDVR0jBBgwFoAUPzQf0Ep6+mEiFsAQSIPaFGxX+v4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85Mjc5MGQ4MC0wOWE5LTQxMWItYjdlMC1hYmJj
ZDI5NGJlNTcuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUMAwDBAQXrdAD
BAAXrdQDBAItC4wwDgQCAAIwCAMGBCYC/M4AMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFxiURWOoW5apV5j
Cda0iLz8a7u0IWL85ar9+OeMzUOaQF8nSY4EM/HVYvkbKains192/i9b9cNNjmFh
9uGPsc8w/GhhDqx4OXlq+aD++YAIo4y70TDmVtXZDf1OZU1Aq387xP3i4ebCOzL7
sZzMkYKvSSZKU4V76JAg3Lol75UculsJimFEFGVNmRjkgCF+GCKAs9MrNuz8d+zl
DoqndldMA+xCk7hyupVP1NTrj5knJ+E3XDzc1KrKg9fY14iX81Kb5oaFefya2vky
2EGTiBe/a3uQxJvxyr79IzN6tWFKjLYlSSQ6FXdxPc56UZDeGC5hGKJ2E4VGqYCS
rMXC9yY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:07 2024 by rpki-client on console-fra.rpki-client.org