Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
File:                     f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa (raw, json)
Hash identifier:          ij6A5qlVyE7c0qP3Zq9E8xEjC+L8Eo+XTbjbkZHSN/A=
Subject key identifier:   20:A7:D3:4A:4B:F4:0C:39:2C:AA:5A:85:BA:6F:12:ED:15:42:D2:A6
Certificate issuer:       /CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Certificate serial:       010D0C9F43285847B101668DD41C6E29C672A22C
Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     209242
IP address blocks:        23.145.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:66:8d:d4:1c:6e:29:c6:72:a2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=832ec713-e23b-4c6b-a543-1fb5a0e7c9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:63:98:55:fe:eb:a6:0c:04:51:80:23:c4:
                    ea:d4:7c:54:31:1f:99:ed:28:9e:fb:0f:09:4d:3b:
                    fc:00:c5:af:a3:0c:cb:00:00:d7:ec:e1:90:d2:88:
                    9d:c2:ec:87:6f:d1:3e:cb:dc:44:84:68:20:8b:6c:
                    22:e3:fb:86:7b:8b:67:bb:e6:42:27:61:8d:35:30:
                    0c:51:c3:55:20:8a:e8:ad:68:fb:84:6d:8a:b5:a1:
                    14:2e:42:b7:e8:e3:8c:79:e5:e4:cf:1c:27:27:38:
                    24:a9:fa:16:0c:1e:72:ab:3d:1a:65:35:65:6f:72:
                    b2:c6:e2:94:c3:dd:09:f1:af:75:3d:64:53:70:97:
                    36:26:ab:03:4e:8d:8a:7c:b9:46:e1:ee:55:a2:9f:
                    58:63:94:f7:61:83:b3:3d:7d:8b:a6:64:0b:14:33:
                    32:81:6e:bc:0e:c3:ec:94:44:54:34:3f:45:19:df:
                    aa:ac:f3:3b:89:2a:2c:cc:94:dc:63:f3:5a:e5:f7:
                    1b:3b:4e:b4:12:88:32:96:db:22:ee:5b:0f:90:c3:
                    b8:f4:a6:c9:37:cf:48:d6:9d:36:e0:00:27:f8:39:
                    44:ec:33:af:cd:b2:e0:01:13:ef:b1:25:ee:62:2d:
                    f4:d1:08:74:7e:32:9f:03:d0:d5:62:8e:9e:4f:c2:
                    17:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A7:D3:4A:4B:F4:0C:39:2C:AA:5A:85:BA:6F:12:ED:15:42:D2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl

            X509v3 Authority Key Identifier:
                keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:15:d2:84:36:1a:3d:49:53:ae:89:8a:0f:8f:74:db:2c:
         8c:ca:58:8e:de:ba:1c:1c:c5:dc:36:4c:0b:b2:34:e4:38:cd:
         7d:5d:b8:c2:a3:64:bb:3f:5c:bb:42:16:f4:b3:ac:0f:9f:2e:
         ad:c0:4d:6a:73:86:9a:90:fc:53:8b:4f:27:ed:29:1b:fa:25:
         a5:f0:28:20:39:05:c0:f9:46:d9:60:d8:bd:a7:3f:05:59:fd:
         d2:93:8b:cd:2d:ba:80:af:df:85:a9:65:3e:82:2d:d1:c5:35:
         ef:9f:86:d5:d5:60:e5:d3:8e:03:0d:7e:30:84:55:77:ce:e5:
         7b:5f:9e:9f:25:46:5a:b0:ea:d7:12:65:ec:36:a9:81:5c:46:
         95:99:d7:92:8d:5d:59:4c:a1:ee:0b:2f:30:15:38:a9:e8:f4:
         05:3d:d6:2d:72:76:12:8c:b7:c8:8e:9b:33:39:ac:4d:2d:84:
         df:cc:4b:ac:00:57:ca:85:05:d4:8b:70:ab:31:ce:89:d4:94:
         82:4f:09:6c:18:54:a9:5a:3d:6b:9e:e4:88:4d:a9:ca:79:1b:
         19:be:10:1d:8c:50:90:b0:e3:1f:29:88:9a:27:8e:96:79:dc:
         df:d7:ab:ba:f8:30:12:39:ea:58:b5:99:bd:d2:97:f1:c2:60:
         4d:bd:78:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAWaN1BxuKcZyoiwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzkxYTZjMDEtZGE2Yy00NDlhLTliNTAtYmE1NGZiODQw
MzlhMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk
ODMyZWM3MTMtZTIzYi00YzZiLWE1NDMtMWZiNWEwZTdjOWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeBjmFX+66YMBFGAI8Tq1HxUMR+Z7Sie+w8J
TTv8AMWvowzLAADX7OGQ0oidwuyHb9E+y9xEhGggi2wi4/uGe4tnu+ZCJ2GNNTAM
UcNVIIrorWj7hG2KtaEULkK36OOMeeXkzxwnJzgkqfoWDB5yqz0aZTVlb3KyxuKU
w90J8a91PWRTcJc2JqsDTo2KfLlG4e5Vop9YY5T3YYOzPX2LpmQLFDMygW68DsPs
lERUND9FGd+qrPM7iSoszJTcY/Na5fcbO060Eogyltsi7lsPkMO49KbJN89I1p02
4AAn+DlE7DOvzbLgARPvsSXuYi300Qh0fjKfA9DVYo6eT8IXaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCCn00pL9Aw5LKpahbpvEu0VQtKmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTFh
NmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0ZmI4NDAzOWEvZjc1OGI4MzEtYzVlNS0z
ZTkzLWE1ZmUtN2I1MzkzYmI5ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzkxYTZjMDEtZGE2Yy00NDlhLTli
NTAtYmE1NGZiODQwMzlhLzM5MWE2YzAxLWRhNmMtNDQ5YS05YjUwLWJhNTRmYjg0
MDM5YS5jcmwwHwYDVR0jBBgwFoAU02OLz5nQfmCBKU/RAYtha4JuYHgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTFhNmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0
ZmI4NDAzOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDNFdKENho9SVOuiYoPj3TbLIzKWI7euhwcxdw2TAuyNOQ4zX1duMKj
ZLs/XLtCFvSzrA+fLq3ATWpzhpqQ/FOLTyftKRv6JaXwKCA5BcD5Rtlg2L2nPwVZ
/dKTi80tuoCv34WpZT6CLdHFNe+fhtXVYOXTjgMNfjCEVXfO5Xtfnp8lRlqw6tcS
Zew2qYFcRpWZ15KNXVlMoe4LLzAVOKno9AU91i1ydhKMt8iOmzM5rE0thN/MS6wA
V8qFBdSLcKsxzonUlIJPCWwYVKlaPWue5IhNqcp5Gxm+EB2MUJCw4x8piJonjpZ5
3N/Xq7r4MBI56li1mb3Sl/HCYE29eG8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:10 2024 by rpki-client on console-ams.rpki-client.org