Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa
File:                     053e21d2-df36-3335-adc2-8524bf1355a2.roa (raw, json)
Hash identifier:          zwYiBNJg+ouovgX9GETocOC7uksPqxHw7QNHAOKdWYY=
Subject key identifier:   37:5E:2A:0D:D8:0F:03:A7:84:FC:58:9B:39:E6:B8:BC:79:1D:9D:4E
Certificate issuer:       /CN=13c2bd37-5092-4959-a489-318c7da33b9d
Certificate serial:       010D0C9F4328584726D087DAF5880ECBDEBE4300
Authority key identifier: 4F:3C:1C:3D:A6:CA:80:4F:31:8F:EE:4D:80:6D:31:87:3E:86:E6:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     151338
IP address blocks:        23.145.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:87:da:f5:88:0e:cb:de:be:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c2bd37-5092-4959-a489-318c7da33b9d
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=1c7c8afa-5339-4db9-9ec9-4675506a94ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:45:a0:a2:a7:22:43:d9:84:df:36:29:4c:5b:
                    97:8d:72:4d:df:62:92:da:6e:c3:f8:99:40:d0:f1:
                    36:1f:2d:ea:bc:55:6c:03:4c:c3:b1:9d:22:3c:79:
                    af:06:1f:f0:69:bc:cb:14:e4:27:e6:66:e9:b2:79:
                    ff:0b:93:7a:b3:b7:98:79:20:63:08:0b:7c:76:30:
                    17:1b:d8:19:64:8f:c2:63:dd:cf:5e:71:30:49:0d:
                    97:86:1a:1f:c6:d1:96:a8:39:8d:a8:3c:45:2e:c3:
                    33:75:bc:8c:ad:43:32:4b:4c:d1:33:64:62:57:29:
                    c5:06:10:49:dd:eb:8c:1a:41:a4:d1:0e:af:a9:f1:
                    1b:5f:12:59:7c:59:22:0f:10:89:c4:83:81:79:1d:
                    47:fb:00:71:84:9e:04:73:70:3c:a8:61:b6:5c:0b:
                    82:a1:61:06:17:b1:5a:5d:77:5a:3b:30:16:19:3c:
                    1b:e8:e7:21:97:b1:8c:9a:3b:69:4f:0b:c6:4b:d2:
                    b6:21:4f:d4:a0:ed:04:51:b9:b4:fc:6e:6c:a3:60:
                    25:e3:7c:d9:e2:55:43:53:59:bf:d9:61:78:0a:87:
                    35:f5:d9:34:25:3f:9b:5e:1b:eb:dd:58:d2:31:a5:
                    8e:33:4d:3c:63:db:03:6a:80:b0:21:f2:e1:80:2f:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5E:2A:0D:D8:0F:03:A7:84:FC:58:9B:39:E6:B8:BC:79:1D:9D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:3C:1C:3D:A6:CA:80:4F:31:8F:EE:4D:80:6D:31:87:3E:86:E6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:bd:8f:26:0d:27:15:44:79:20:6a:58:a2:ab:00:2e:9a:30:
         ee:f5:5b:36:cb:dc:52:d8:b7:71:10:23:14:19:9a:97:74:a6:
         ef:09:92:86:61:1b:ac:c2:ed:db:a4:17:67:60:55:d1:cc:ff:
         13:93:82:54:91:7c:b8:c7:90:3c:23:78:a1:f3:4f:d8:60:39:
         aa:5b:bb:8c:eb:90:8a:b4:32:b4:f9:dd:42:aa:00:17:e2:7a:
         8c:5b:57:f9:6a:0d:23:73:ed:59:17:f6:76:e0:54:8a:05:8a:
         c9:cc:97:46:d2:79:a6:07:53:cd:aa:3a:92:96:de:03:41:1f:
         40:fb:00:10:fd:84:dd:f1:bf:16:30:a7:ba:cf:d6:de:28:6f:
         6d:32:18:1c:a1:56:3b:36:4e:fc:bc:88:13:03:bb:f6:f2:a2:
         67:09:3b:77:9b:54:db:52:40:12:7f:c5:9c:11:da:76:e2:6c:
         d6:26:88:01:a6:1a:72:e1:6b:24:72:56:65:98:da:97:6d:13:
         6d:a4:a7:5f:3a:c7:db:a7:20:7d:a5:b9:52:71:32:37:32:8a:
         65:f1:2a:6e:3a:6c:3d:7b:35:3d:5d:c2:7b:03:a2:fe:d3:6d:
         63:ac:32:04:65:76:94:ac:f0:7d:4b:be:a3:24:fc:38:27:80:
         b7:05:a9:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcm0Ifa9YgOy96+QwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNjMmJkMzctNTA5Mi00OTU5LWE0ODktMzE4YzdkYTMz
YjlkMB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk
MWM3YzhhZmEtNTMzOS00ZGI5LTllYzktNDY3NTUwNmE5NGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EWgoqciQ9mE3zYpTFuXjXJN32KS2m7D+JlA
0PE2Hy3qvFVsA0zDsZ0iPHmvBh/wabzLFOQn5mbpsnn/C5N6s7eYeSBjCAt8djAX
G9gZZI/CY93PXnEwSQ2XhhofxtGWqDmNqDxFLsMzdbyMrUMyS0zRM2RiVynFBhBJ
3euMGkGk0Q6vqfEbXxJZfFkiDxCJxIOBeR1H+wBxhJ4Ec3A8qGG2XAuCoWEGF7Fa
XXdaOzAWGTwb6Ochl7GMmjtpTwvGS9K2IU/UoO0EUbm0/G5so2Al43zZ4lVDU1m/
2WF4Coc19dk0JT+bXhvr3VjSMaWOM008Y9sDaoCwIfLhgC/veQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdeKg3YDwOnhPxYmznmuLx5HZ1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xM2My
YmQzNy01MDkyLTQ5NTktYTQ4OS0zMThjN2RhMzNiOWQvMDUzZTIxZDItZGYzNi0z
MzM1LWFkYzItODUyNGJmMTM1NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTNjMmJkMzctNTA5Mi00OTU5LWE0
ODktMzE4YzdkYTMzYjlkLzEzYzJiZDM3LTUwOTItNDk1OS1hNDg5LTMxOGM3ZGEz
M2I5ZC5jcmwwHwYDVR0jBBgwFoAUTzwcPabKgE8xj+5NgG0xhz6G5uEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xM2MyYmQzNy01MDkyLTQ5NTktYTQ4OS0zMThj
N2RhMzNiOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5EYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADK9jyYNJxVEeSBqWKKrAC6aMO71WzbL3FLYt3EQIxQZmpd0pu8JkoZh
G6zC7dukF2dgVdHM/xOTglSRfLjHkDwjeKHzT9hgOapbu4zrkIq0MrT53UKqABfi
eoxbV/lqDSNz7VkX9nbgVIoFisnMl0bSeaYHU82qOpKW3gNBH0D7ABD9hN3xvxYw
p7rP1t4ob20yGByhVjs2Tvy8iBMDu/byomcJO3ebVNtSQBJ/xZwR2nbibNYmiAGm
GnLhayRyVmWY2pdtE22kp186x9unIH2luVJxMjcyimXxKm46bD17NT1dwnsDov7T
bWOsMgRldpSs8H1LvqMk/DgngLcFqUY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:18 2024 by rpki-client on console-ams.rpki-client.org