Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/744ae307-ebad-3fe8-9431-ba575d6002dc.roa
File:                     744ae307-ebad-3fe8-9431-ba575d6002dc.roa (raw, json)
Hash identifier:          17OX4cVkdeIeG4xXcYJLRST5gj7oJAoHPWIGgUq0A0o=
Subject key identifier:   FF:31:41:49:8F:76:F6:DE:C9:42:9B:D2:2C:AC:C7:F1:20:F7:EC:3C
Certificate issuer:       /CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
Certificate serial:       010D0C9F43285845F51E9526E00426DFFEAA0AE0
Authority key identifier: 73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/744ae307-ebad-3fe8-9431-ba575d6002dc.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     29770
IP address blocks:        23.146.232.0/24 maxlen: 24
                          65.38.124.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:95:26:e0:04:26:df:fe:aa:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=7a80217f-23dc-41ee-98b2-af8f4fe0dcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:88:65:94:ea:5e:a4:34:42:86:af:d3:70:
                    70:e6:f9:4b:2f:10:2b:29:b8:aa:99:e6:18:fd:e2:
                    a7:06:45:6b:67:ff:60:fb:ed:01:df:03:54:25:0b:
                    eb:3e:77:d8:25:82:ab:41:08:79:64:6d:f3:cc:7b:
                    18:6e:ed:80:ad:64:63:6a:21:6f:de:a3:5a:20:fd:
                    9a:76:79:1e:97:df:a3:02:63:07:5b:c7:c3:b3:6f:
                    e7:7d:81:94:93:fe:73:7d:36:58:06:27:e0:a5:f8:
                    01:d2:ef:b0:2c:bf:c1:7c:cf:e1:fe:94:04:3f:de:
                    a9:9b:4e:36:7f:73:6d:83:c5:ad:18:cd:11:fc:6d:
                    75:61:0a:9b:ba:8c:b2:3b:32:37:fc:b7:9a:f9:e9:
                    ff:ed:f0:1d:9a:3c:7e:d9:ae:a5:cf:8b:47:3e:26:
                    06:ce:62:e7:53:9a:7e:cc:f6:f2:f6:e3:e6:8a:cf:
                    0d:df:f2:68:34:85:e4:00:94:9f:ad:d0:d9:38:99:
                    43:7e:e6:93:d0:b9:f4:95:bf:57:ec:7f:25:55:33:
                    22:1e:fb:ad:a0:db:d8:8b:41:38:1c:af:69:fb:ac:
                    19:71:ac:61:df:87:a8:70:48:5c:a8:f6:7f:fb:7a:
                    cc:19:cd:7f:8b:8c:80:85:f2:52:11:c8:1f:e7:46:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:31:41:49:8F:76:F6:DE:C9:42:9B:D2:2C:AC:C7:F1:20:F7:EC:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/744ae307-ebad-3fe8-9431-ba575d6002dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl

            X509v3 Authority Key Identifier:
                keyid:73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.232.0/24
                  65.38.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fe:b5:e1:1c:6f:78:c3:8e:e5:af:f7:29:37:7c:d8:bf:65:
         df:e7:bd:0b:b7:ed:5d:aa:f7:6b:e2:0f:4d:f4:0f:22:07:5b:
         69:7b:1d:4e:70:6b:56:a7:1e:cd:40:d9:b5:6c:10:15:ee:2b:
         9f:a0:e2:f4:92:a8:26:cf:d4:99:85:30:4d:3f:95:21:2f:d5:
         cc:a0:5c:1b:a7:db:88:4c:98:08:7c:bd:ca:0b:b8:6b:36:24:
         48:2b:9a:0c:43:b4:70:c8:84:ba:83:40:6f:f4:68:97:7c:1f:
         7a:ab:4e:7c:40:a6:c5:b9:e6:6d:13:e2:e5:2b:e9:89:72:c6:
         08:89:10:73:fb:f9:16:2c:e9:06:27:a8:32:d5:3e:22:9f:1c:
         f5:69:3f:79:56:6b:fa:7b:a7:e5:11:53:77:41:d3:ae:f4:26:
         4c:d8:e5:5e:54:8a:ec:94:70:a5:cc:f9:c5:0f:32:a2:98:91:
         1a:8a:df:fd:75:bd:d9:94:a9:5b:e1:53:c9:04:c4:0d:80:bd:
         7a:bc:5a:b6:b6:a8:bb:9e:3e:ba:40:4c:dd:24:79:a1:0f:0a:
         bb:6f:1b:d2:eb:8e:16:db:bd:9d:7a:4d:72:32:b9:2d:96:f8:
         05:3a:34:7b:e9:31:16:8f:9f:f5:ef:c2:8e:ef:6e:e0:c9:ca:
         0f:7f:e2:70
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEX1HpUm4AQm3/6qCuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ4ZGM5YWEtNDEzZi00NWY4LTlhNGUtMjAzNDZiZGNj
YTY0MB4XDTI0MDUyMjEzMDAzM1oXDTI0MDgyMDEzMDAzM1owLzEtMCsGA1UEAxMk
N2E4MDIxN2YtMjNkYy00MWVlLTk4YjItYWY4ZjRmZTBkY2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlruIZZTqXqQ0Qoav03Bw5vlLLxArKbiqmeYY
/eKnBkVrZ/9g++0B3wNUJQvrPnfYJYKrQQh5ZG3zzHsYbu2ArWRjaiFv3qNaIP2a
dnkel9+jAmMHW8fDs2/nfYGUk/5zfTZYBifgpfgB0u+wLL/BfM/h/pQEP96pm042
f3Ntg8WtGM0R/G11YQqbuoyyOzI3/Lea+en/7fAdmjx+2a6lz4tHPiYGzmLnU5p+
zPby9uPmis8N3/JoNIXkAJSfrdDZOJlDfuaT0Ln0lb9X7H8lVTMiHvutoNvYi0E4
HK9p+6wZcaxh34eocEhcqPZ/+3rMGc1/i4yAhfJSEcgf50YqQQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFP8xQUmPdvbeyUKb0iysx/Eg9+w8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDhk
YzlhYS00MTNmLTQ1ZjgtOWE0ZS0yMDM0NmJkY2NhNjQvNzQ0YWUzMDctZWJhZC0z
ZmU4LTk0MzEtYmE1NzVkNjAwMmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ4ZGM5YWEtNDEzZi00NWY4LTlh
NGUtMjAzNDZiZGNjYTY0L2U0OGRjOWFhLTQxM2YtNDVmOC05YTRlLTIwMzQ2YmRj
Y2E2NC5jcmwwHwYDVR0jBBgwFoAUc/Lvn3urHfpg60W99pQ52mh8MUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDhkYzlhYS00MTNmLTQ1ZjgtOWE0ZS0yMDM0
NmJkY2NhNjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5LoAwQB
QSZ8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADT+teEcb3jDjuWv9yk3fNi/Zd/nvQu37V2q92viD030DyIH
W2l7HU5wa1anHs1A2bVsEBXuK5+g4vSSqCbP1JmFME0/lSEv1cygXBun24hMmAh8
vcoLuGs2JEgrmgxDtHDIhLqDQG/0aJd8H3qrTnxApsW55m0T4uUr6YlyxgiJEHP7
+RYs6QYnqDLVPiKfHPVpP3lWa/p7p+URU3dB0670JkzY5V5UiuyUcKXM+cUPMqKY
kRqK3/11vdmUqVvhU8kExA2AvXq8Wra2qLuePrpATN0keaEPCrtvG9LrjhbbvZ16
TXIyuS2W+AU6NHvpMRaPn/Xvwo7vbuDJyg9/4nA=
-----END CERTIFICATE-----
Generated at Mon Jun 3 21:55:38 2024 by rpki-client on console-fra.rpki-client.org