Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa
File:                     66807622-f529-3717-a7e3-9e3f1a257327.roa (raw, json)
Hash identifier:          1onN6KISv1tB61NJn1PyX+hao/sCZbSajr6zG6Q7nqw=
Subject key identifier:   61:26:28:F5:80:97:7C:FF:AC:65:9B:E4:C8:03:76:2B:E1:DF:D4:AA
Certificate issuer:       /CN=f2eccad3-9416-4755-b75e-5a77a272beb3
Certificate serial:       010D0C9F43285845A6F359981BAA1A1BF9C27600
Authority key identifier: 4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     19625
IP address blocks:        23.188.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:59:98:1b:aa:1a:1b:f9:c2:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2eccad3-9416-4755-b75e-5a77a272beb3
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=fb68d7b5-7d4a-4d0d-b374-5a16dc1d8f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:68:30:c2:49:8c:02:98:30:24:12:c8:74:
                    4c:b5:61:d5:e3:22:cf:d8:51:a5:87:b6:25:11:e3:
                    cf:a5:dd:3e:03:ca:1d:29:31:10:b8:08:31:30:0e:
                    a4:e4:1b:9e:6d:d7:be:26:10:6c:48:5c:7e:75:39:
                    11:f5:28:35:dc:3e:16:71:36:f8:92:aa:98:7c:98:
                    87:f5:71:0f:12:60:06:0a:79:6e:0c:69:21:5f:7e:
                    bc:b3:b8:41:88:fe:d4:2c:0b:e4:1a:81:d4:32:f8:
                    c6:6c:06:44:5f:af:b6:d7:08:35:17:11:4e:fd:ad:
                    fb:64:b3:b3:3d:e5:50:d6:7b:03:21:12:d6:58:16:
                    bc:94:fe:93:e7:e3:e9:45:5a:f4:c9:9c:a8:9f:8d:
                    d0:16:1b:ee:51:ed:8a:5d:ac:1a:22:8a:ac:49:83:
                    ad:1a:dc:50:f7:3b:d6:c8:66:12:bb:b5:5f:6a:c8:
                    65:15:55:6c:81:99:e1:c6:48:86:95:a2:6a:13:5a:
                    2a:5d:8c:d0:af:22:61:0b:fa:92:83:eb:1f:42:21:
                    f5:6a:62:d6:17:18:72:d7:29:3e:18:4b:ca:ca:fb:
                    00:a6:af:bb:62:4b:e2:52:11:ec:0f:4d:27:73:c4:
                    b2:ec:89:f1:ea:e7:7e:88:71:82:76:32:4a:b1:42:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:26:28:F5:80:97:7C:FF:AC:65:9B:E4:C8:03:76:2B:E1:DF:D4:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl

            X509v3 Authority Key Identifier:
                keyid:4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:74:ec:ba:d6:e9:90:0c:4a:b2:bf:0c:f1:f4:b8:b9:79:6b:
         41:5f:2b:56:e7:95:45:bf:6f:26:01:e0:34:fb:ef:e5:96:f7:
         d5:51:81:80:a7:de:2e:77:4f:86:6d:15:4a:5b:69:61:0b:cc:
         7e:7b:20:20:f6:55:da:28:c7:e6:9e:16:eb:24:c6:34:da:8d:
         46:f8:2a:ab:a0:37:1a:aa:b0:9d:fd:b9:97:32:94:76:27:6f:
         f2:48:95:1e:64:42:81:7f:b5:e2:d7:be:a5:e6:1b:eb:87:a4:
         d9:35:7a:fd:cb:3b:3d:70:f0:47:c2:ef:08:a6:40:b8:85:62:
         df:e4:03:2a:7c:5c:f0:67:f0:af:7b:fe:b1:85:56:42:99:31:
         08:69:44:e4:5b:e7:0b:98:c2:26:65:85:77:1e:f2:be:bd:43:
         c4:66:28:57:90:9e:98:49:12:39:44:b6:2d:93:c4:63:e3:b7:
         3a:30:19:b7:25:ea:e7:1b:d6:0f:e8:08:7d:df:9b:01:e2:bb:
         38:61:74:a7:18:92:85:ed:4e:d8:e7:d2:94:af:73:44:4c:7f:
         56:95:5e:c1:0c:3c:b4:d9:86:ce:59:b4:04:8f:af:96:fc:c4:
         a8:69:cb:dc:d5:fa:5f:d8:93:22:f8:1b:84:ce:90:81:74:8f:
         4e:84:9f:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm81mYG6oaG/nCdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJlY2NhZDMtOTQxNi00NzU1LWI3NWUtNWE3N2EyNzJi
ZWIzMB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk
ZmI2OGQ3YjUtN2Q0YS00ZDBkLWIzNzQtNWExNmRjMWQ4ZjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy49oMMJJjAKYMCQSyHRMtWHV4yLP2FGlh7Yl
EePPpd0+A8odKTEQuAgxMA6k5Buebde+JhBsSFx+dTkR9Sg13D4WcTb4kqqYfJiH
9XEPEmAGCnluDGkhX368s7hBiP7ULAvkGoHUMvjGbAZEX6+21wg1FxFO/a37ZLOz
PeVQ1nsDIRLWWBa8lP6T5+PpRVr0yZyon43QFhvuUe2KXawaIoqsSYOtGtxQ9zvW
yGYSu7VfashlFVVsgZnhxkiGlaJqE1oqXYzQryJhC/qSg+sfQiH1amLWFxhy1yk+
GEvKyvsApq+7YkviUhHsD00nc8Sy7Inx6ud+iHGCdjJKsUKbvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEmKPWAl3z/rGWb5MgDdivh39SqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMmVj
Y2FkMy05NDE2LTQ3NTUtYjc1ZS01YTc3YTI3MmJlYjMvNjY4MDc2MjItZjUyOS0z
NzE3LWE3ZTMtOWUzZjFhMjU3MzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjJlY2NhZDMtOTQxNi00NzU1LWI3
NWUtNWE3N2EyNzJiZWIzL2YyZWNjYWQzLTk0MTYtNDc1NS1iNzVlLTVhNzdhMjcy
YmViMy5jcmwwHwYDVR0jBBgwFoAUTyvg/2IL6iEkTNbimcBC2Ks65g4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mMmVjY2FkMy05NDE2LTQ3NTUtYjc1ZS01YTc3
YTI3MmJlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7zwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABx07LrW6ZAMSrK/DPH0uLl5a0FfK1bnlUW/byYB4DT77+WW99VRgYCn
3i53T4ZtFUpbaWELzH57ICD2Vdoox+aeFuskxjTajUb4KqugNxqqsJ39uZcylHYn
b/JIlR5kQoF/teLXvqXmG+uHpNk1ev3LOz1w8EfC7wimQLiFYt/kAyp8XPBn8K97
/rGFVkKZMQhpRORb5wuYwiZlhXce8r69Q8RmKFeQnphJEjlEti2TxGPjtzowGbcl
6ucb1g/oCH3fmwHiuzhhdKcYkoXtTtjn0pSvc0RMf1aVXsEMPLTZhs5ZtASPr5b8
xKhpy9zV+l/YkyL4G4TOkIF0j06En6w=
-----END CERTIFICATE-----
Generated at Sun May 5 01:43:58 2024 by rpki-client on console-fra.rpki-client.org