Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/41e00708-234d-3fac-acd8-a65b0f5482b1.roa
File:                     41e00708-234d-3fac-acd8-a65b0f5482b1.roa (raw, json)
Hash identifier:          JzX9DqUv6WNjAWEMI18euPc8Cn/ajrm+lNYT5jBsocM=
Subject key identifier:   40:42:64:14:AD:FA:C4:A8:54:01:5A:D3:4D:55:22:AA:98:D2:C9:BE
Certificate issuer:       /CN=f57c3c5c-9df4-42aa-92c7-c3f8e77313b4
Certificate serial:       010D0C9F4328584585732E298FF838F470BC6C00
Authority key identifier: 1D:13:81:95:E5:47:0B:3A:81:6A:16:CF:DB:29:D2:1D:E6:DA:C8:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/41e00708-234d-3fac-acd8-a65b0f5482b1.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        23.92.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:2e:29:8f:f8:38:f4:70:bc:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57c3c5c-9df4-42aa-92c7-c3f8e77313b4
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=49b2c6b8-1ca5-4252-abac-628d0295352a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:16:64:36:c3:a1:7c:19:b8:66:44:fa:87:
                    a7:ff:83:76:8e:52:cf:8d:7a:97:b1:f0:f8:fd:d0:
                    29:39:d6:a2:c0:7b:b5:63:a9:a7:68:21:1a:61:cf:
                    3e:fd:bf:63:c4:e3:ea:2a:fe:66:e8:f9:c8:e6:16:
                    3d:85:a3:68:fd:de:47:39:2d:d5:19:ca:59:ec:1e:
                    c4:33:cc:af:59:0f:10:c1:fe:c5:f1:86:40:57:d9:
                    b3:6b:86:f2:e9:d4:93:8a:a0:1c:05:42:17:eb:e3:
                    54:ef:95:43:9f:9a:8f:45:28:1d:d3:da:af:c2:59:
                    2d:89:33:b8:0b:5f:4b:02:f2:55:4c:62:20:c5:aa:
                    b8:1c:e2:6f:c2:e7:e4:e1:07:8e:a0:85:00:68:38:
                    b6:68:a9:8b:5d:29:2b:36:f5:1e:49:30:77:f8:b0:
                    19:1a:d0:69:71:1c:40:ec:5a:45:62:c6:bb:82:fe:
                    ae:4c:e0:72:53:38:48:3c:eb:e9:ae:1a:1e:74:55:
                    27:1b:e4:49:42:ff:cf:73:c9:3e:52:59:49:4d:61:
                    62:b1:32:f5:be:3e:bf:2b:54:e7:5d:5e:9b:1e:b4:
                    c8:29:92:4a:e3:b2:35:b9:90:b7:41:cd:88:24:1d:
                    f9:dd:dc:86:e3:80:c8:a2:82:d2:01:94:16:ed:84:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:42:64:14:AD:FA:C4:A8:54:01:5A:D3:4D:55:22:AA:98:D2:C9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/41e00708-234d-3fac-acd8-a65b0f5482b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.crl

            X509v3 Authority Key Identifier:
                keyid:1D:13:81:95:E5:47:0B:3A:81:6A:16:CF:DB:29:D2:1D:E6:DA:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:85:bf:89:31:89:3d:f0:77:e2:16:17:07:44:10:bb:4f:6d:
         42:d6:b8:b7:ca:48:ab:82:12:c8:7b:bd:07:33:28:eb:db:03:
         59:7b:59:1b:42:10:08:8a:4c:52:a9:94:83:1a:54:37:04:36:
         8a:39:57:5c:b8:44:f2:64:14:c2:02:78:3b:40:c7:5c:18:a1:
         89:91:55:35:f9:dd:40:b2:92:c4:99:1d:e1:fa:a4:bb:36:65:
         8d:03:b7:87:77:9d:ea:b8:79:fd:fd:19:7e:ef:ff:1d:50:90:
         4f:29:8d:63:cb:34:6d:f1:6a:1c:df:77:81:f2:fa:7d:e8:f5:
         03:ab:27:e2:e9:41:f4:aa:e5:02:c2:b6:af:ea:3b:f2:95:84:
         dd:b8:47:63:81:b0:84:9c:ae:e4:3f:af:ea:2d:af:55:5f:83:
         02:da:5e:8d:3f:76:19:48:e2:3c:79:31:17:7a:af:09:a1:3c:
         9f:29:89:23:b4:6d:5b:ed:2e:6e:b4:3d:23:eb:2f:df:2b:02:
         58:1d:7c:3a:d7:06:0c:83:7f:a1:ee:1d:a0:43:8a:e4:98:da:
         02:c2:f7:99:0d:ae:37:3c:7b:28:54:18:35:3c:b8:2b:5b:d6:
         f8:1d:db:bf:f0:b7:a0:91:1e:df:d1:fd:55:d9:df:f5:3b:1d:
         63:2d:7f:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWFcy4pj/g49HC8bAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjU3YzNjNWMtOWRmNC00MmFhLTkyYzctYzNmOGU3NzMx
M2I0MB4XDTI0MDQxMjEzMDAzNFoXDTI0MDcxMTEzMDAzNFowLzEtMCsGA1UEAxMk
NDliMmM2YjgtMWNhNS00MjUyLWFiYWMtNjI4ZDAyOTUzNTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQYWZDbDoXwZuGZE+oen/4N2jlLPjXqXsfD4
/dApOdaiwHu1Y6mnaCEaYc8+/b9jxOPqKv5m6PnI5hY9haNo/d5HOS3VGcpZ7B7E
M8yvWQ8Qwf7F8YZAV9mza4by6dSTiqAcBUIX6+NU75VDn5qPRSgd09qvwlktiTO4
C19LAvJVTGIgxaq4HOJvwufk4QeOoIUAaDi2aKmLXSkrNvUeSTB3+LAZGtBpcRxA
7FpFYsa7gv6uTOByUzhIPOvprhoedFUnG+RJQv/Pc8k+UllJTWFisTL1vj6/K1Tn
XV6bHrTIKZJK47I1uZC3Qc2IJB353dyG44DIooLSAZQW7YTDnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBCZBSt+sSoVAFa001VIqqY0sm+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNTdj
M2M1Yy05ZGY0LTQyYWEtOTJjNy1jM2Y4ZTc3MzEzYjQvNDFlMDA3MDgtMjM0ZC0z
ZmFjLWFjZDgtYTY1YjBmNTQ4MmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjU3YzNjNWMtOWRmNC00MmFhLTky
YzctYzNmOGU3NzMxM2I0L2Y1N2MzYzVjLTlkZjQtNDJhYS05MmM3LWMzZjhlNzcz
MTNiNC5jcmwwHwYDVR0jBBgwFoAUHROBleVHCzqBahbP2ynSHebayMgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mNTdjM2M1Yy05ZGY0LTQyYWEtOTJjNy1jM2Y4
ZTc3MzEzYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1ytMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuFv4kxiT3wd+IWFwdEELtPbULWuLfKSKuCEsh7vQczKOvbA1l7WRtC
EAiKTFKplIMaVDcENoo5V1y4RPJkFMICeDtAx1wYoYmRVTX53UCyksSZHeH6pLs2
ZY0Dt4d3neq4ef39GX7v/x1QkE8pjWPLNG3xahzfd4Hy+n3o9QOrJ+LpQfSq5QLC
tq/qO/KVhN24R2OBsIScruQ/r+otr1VfgwLaXo0/dhlI4jx5MRd6rwmhPJ8piSO0
bVvtLm60PSPrL98rAlgdfDrXBgyDf6HuHaBDiuSY2gLC95kNrjc8eyhUGDU8uCtb
1vgd27/wt6CRHt/R/VXZ3/U7HWMtf8w=
-----END CERTIFICATE-----
Generated at Thu May 2 15:00:03 2024 by rpki-client on console-ams.rpki-client.org