Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa
File:                     aa578848-2b75-3b39-9243-d445c17b3680.roa (raw, json)
Hash identifier:          Qoaw01t7lcnIBiyF+fJkIcN5ugF48uitghSpTAvtIT4=
Subject key identifier:   CB:91:4B:B9:0E:04:2B:93:37:26:4F:D9:7A:B7:C3:C0:AA:D3:D5:4D
Certificate issuer:       /CN=c966e577-4964-41bf-aced-835168bef4f1
Certificate serial:       010D0C9F432858474B1B550AB37D9CC4C969D680
Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     395400
IP address blocks:        168.123.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:55:0a:b3:7d:9c:c4:c9:69:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=17cfc78a-8bc6-47c0-983a-bce411fc994c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:a4:01:a7:36:91:46:45:09:22:f1:3a:81:
                    43:09:de:fd:f3:9d:8a:66:2f:19:0e:59:13:5a:86:
                    c2:25:94:22:00:16:4e:98:c3:16:ee:de:18:f0:08:
                    80:2f:b6:30:4e:68:5f:60:ee:49:d9:ef:b4:78:87:
                    3d:e3:2c:71:0f:f5:f0:47:91:6d:21:81:5b:ad:14:
                    3f:9b:8e:33:43:f5:12:1c:bb:ca:cf:7b:79:54:d8:
                    3f:98:f3:96:93:2d:78:a7:46:2a:e9:2d:76:5a:b5:
                    be:cb:01:b5:41:65:97:59:07:32:37:63:d9:44:98:
                    11:5b:e8:00:4b:80:92:5c:f1:ca:b4:1c:bb:55:06:
                    2f:62:ab:8f:62:9b:57:57:11:64:43:e0:eb:ba:a6:
                    98:7e:86:7b:17:21:dc:65:3b:c9:0d:45:55:fb:45:
                    9e:36:96:ed:86:05:e8:1e:07:2a:80:3e:dc:23:80:
                    0f:43:81:b9:75:58:64:19:ee:e9:0f:bd:8a:ad:eb:
                    0b:42:88:e6:25:27:4b:53:ee:62:97:6b:1c:bc:ec:
                    2c:3c:96:7f:62:3c:cc:08:b1:05:8e:a1:0d:1b:f3:
                    7a:86:ef:1b:10:36:73:63:bf:a6:b9:42:e4:53:2e:
                    d3:0e:b7:5b:52:20:63:33:2b:87:e7:13:cf:de:0d:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:91:4B:B9:0E:04:2B:93:37:26:4F:D9:7A:B7:C3:C0:AA:D3:D5:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl

            X509v3 Authority Key Identifier:
                keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.123.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:4c:70:3d:29:4b:ed:33:b2:df:f8:95:1c:f3:72:39:6f:
         19:22:e3:e8:68:d9:ce:c4:bb:f9:96:59:87:70:24:4c:46:6e:
         4d:3f:bf:c2:90:4e:d3:18:92:28:20:6f:e1:aa:1a:07:59:d6:
         a4:83:22:88:6d:43:c7:20:dc:49:c0:15:bc:ab:f6:f6:8d:be:
         19:70:7f:10:0d:23:1c:78:a9:63:cb:dd:2b:35:6f:be:92:75:
         cd:c9:09:ab:c3:6c:5c:9b:51:46:5d:d4:d2:05:48:48:e6:6d:
         d0:25:c9:77:8c:78:c0:4e:4a:e9:ce:14:07:51:77:83:be:f9:
         86:31:97:a9:30:93:ee:73:2a:b8:70:a5:5d:6a:c8:42:b6:b7:
         1d:ad:06:9c:aa:af:8e:0c:74:ae:e0:31:d1:27:f4:23:cc:eb:
         f2:20:10:54:c8:e6:b6:92:0c:c3:c7:89:86:78:a2:4e:de:88:
         4e:92:7a:90:cb:a6:fd:bc:e0:72:b5:75:1e:92:c7:5f:7c:b1:
         ba:07:2f:1c:9f:ff:5c:d4:c8:c2:97:23:ed:a8:74:1b:bf:2a:
         73:3e:b4:5c:6e:1f:e9:11:8b:c4:1d:97:43:37:44:85:9d:10:
         a3:f3:25:13:24:eb:f2:87:3c:2b:31:bf:3f:0a:9c:cb:cc:6f:
         4d:9d:21:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG1UKs32cxMlp1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm
NGYxMB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk
MTdjZmM3OGEtOGJjNi00N2MwLTk4M2EtYmNlNDExZmM5OTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHqkAac2kUZFCSLxOoFDCd79852KZi8ZDlkT
WobCJZQiABZOmMMW7t4Y8AiAL7YwTmhfYO5J2e+0eIc94yxxD/XwR5FtIYFbrRQ/
m44zQ/USHLvKz3t5VNg/mPOWky14p0Yq6S12WrW+ywG1QWWXWQcyN2PZRJgRW+gA
S4CSXPHKtBy7VQYvYquPYptXVxFkQ+DruqaYfoZ7FyHcZTvJDUVV+0WeNpbthgXo
HgcqgD7cI4APQ4G5dVhkGe7pD72KresLQojmJSdLU+5il2scvOwsPJZ/YjzMCLEF
jqENG/N6hu8bEDZzY7+muULkUy7TDrdbUiBjMyuH5xPP3g3f2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuRS7kOBCuTNyZP2Xq3w8Cq09VNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2
ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvYWE1Nzg4NDgtMmI3NS0z
YjM5LTkyNDMtZDQ0NWMxN2IzNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj
ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl
ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx
NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqHuEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnjTHA9KUvtM7Lf+JUc83I5bxki4+ho2c7Eu/mWWYdwJExGbk0/v8KQ
TtMYkiggb+GqGgdZ1qSDIohtQ8cg3EnAFbyr9vaNvhlwfxANIxx4qWPL3Ss1b76S
dc3JCavDbFybUUZd1NIFSEjmbdAlyXeMeMBOSunOFAdRd4O++YYxl6kwk+5zKrhw
pV1qyEK2tx2tBpyqr44MdK7gMdEn9CPM6/IgEFTI5raSDMPHiYZ4ok7eiE6SepDL
pv284HK1dR6Sx198sboHLxyf/1zUyMKXI+2odBu/KnM+tFxuH+kRi8Qdl0M3RIWd
EKPzJRMk6/KHPCsxvz8KnMvMb02dIZ8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:14 2024 by rpki-client on console-ams.rpki-client.org