Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/fc4937d1-9f6d-30ac-9295-fd74b8623d1a.roa
File:                     fc4937d1-9f6d-30ac-9295-fd74b8623d1a.roa (raw, json)
Hash identifier:          fIaFcaP9AgxUD+9WIxCL0Zsq3msUn+rlAJUu+tWe9Uo=
Subject key identifier:   C9:39:E8:03:78:F8:D3:FD:A4:8A:CB:FF:C8:74:77:F5:F7:20:B5:A3
Certificate issuer:       /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Certificate serial:       010D0C9F4328584754E0E3298C68FFA49061F880
Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/fc4937d1-9f6d-30ac-9295-fd74b8623d1a.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     46365
IP address blocks:        23.152.56.0/24 maxlen: 24
                          2602:2cd::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e3:29:8c:68:ff:a4:90:61:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=f8fd6fde-7f02-489e-b799-94424d01ad32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:39:87:c4:c3:d2:d9:82:b3:33:3b:40:cc:
                    22:5b:1c:f9:c2:cf:23:1c:1c:99:4a:fb:9c:e6:75:
                    f8:87:1c:0e:8e:d0:d9:45:7e:9c:e2:ed:8b:5f:22:
                    4e:a7:29:35:04:cd:38:e1:4f:4d:85:93:d7:9b:52:
                    f9:a5:d1:1d:16:d5:b6:a5:df:00:b6:36:62:14:45:
                    af:7d:44:c7:d9:3f:23:42:b8:69:ba:20:c2:04:0d:
                    d5:ff:e0:03:7a:9c:4c:07:bb:da:5b:fa:b7:6c:33:
                    ae:88:8f:75:69:5a:c0:47:a4:52:0b:9e:db:38:5f:
                    97:d2:f5:f7:75:c9:ef:31:a2:a6:28:50:ff:56:a4:
                    93:0c:6b:28:8f:25:4f:e3:4c:75:7a:68:b3:76:6c:
                    9f:f0:e3:ed:ee:28:06:88:5f:ef:ab:5a:ed:cc:09:
                    16:56:a9:c0:ee:2c:e3:69:c3:2e:a9:22:8f:a2:20:
                    f4:cc:63:b9:f2:04:a2:ee:79:ee:0b:a6:93:41:9a:
                    b0:6a:a6:1a:f2:2e:df:e6:a7:7f:8a:c7:5a:ac:a0:
                    19:83:96:bf:5e:7b:8a:7a:0d:81:f9:96:23:36:bd:
                    cc:cb:e3:ba:1d:7b:53:63:2e:41:e1:46:14:a9:c7:
                    62:42:1f:f3:f2:38:f1:e4:fd:38:f3:93:e7:b3:02:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:39:E8:03:78:F8:D3:FD:A4:8A:CB:FF:C8:74:77:F5:F7:20:B5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/fc4937d1-9f6d-30ac-9295-fd74b8623d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl

            X509v3 Authority Key Identifier:
                keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.56.0/24
                IPv6:
                  2602:2cd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:5d:72:f3:9e:61:6c:0e:54:ff:56:40:70:e0:7e:df:b7:
         49:e8:99:cd:e4:b2:1e:e3:26:0c:bf:ff:68:9a:b1:32:f9:87:
         35:44:03:b8:0e:d3:c7:ad:5c:4b:8c:59:19:11:d1:05:bf:c3:
         64:e5:e4:78:ee:49:2f:33:80:3f:0d:c9:48:18:70:9f:c7:68:
         f9:28:a4:d4:a0:21:9b:e9:9e:02:b5:e6:b0:f1:36:a4:c3:f9:
         91:fb:25:bf:52:1c:6c:b7:89:45:51:c6:98:45:b8:f0:22:4b:
         90:80:27:93:de:fc:5a:89:27:e7:be:7f:43:c4:94:a9:a5:28:
         10:74:3b:0a:7e:1a:b1:61:1c:b4:1d:65:2f:1a:e7:ea:01:72:
         13:ac:13:eb:76:e5:1b:bd:86:d1:02:19:df:15:98:d5:22:5a:
         10:a7:15:c2:e9:52:41:b6:ad:99:19:2e:85:21:92:62:22:42:
         e8:c5:51:83:8e:cb:27:7d:0f:f9:99:a0:96:a6:92:f3:cb:ad:
         83:01:1f:32:55:c3:8f:b3:92:42:4d:67:dc:7d:e1:6b:d5:c3:
         e7:66:ec:6b:77:69:60:2f:79:9c:41:bc:64:ec:93:62:9c:77:
         a2:37:dc:39:3b:70:c2:3e:2d:6d:1d:db:77:e7:00:97:c6:f8:
         0e:42:dc:59
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEdU4OMpjGj/pJBh+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAy
M2I0MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjhmZDZmZGUtN2YwMi00ODllLWI3OTktOTQ0MjRkMDFhZDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f85h8TD0tmCszM7QMwiWxz5ws8jHByZSvuc
5nX4hxwOjtDZRX6c4u2LXyJOpyk1BM044U9NhZPXm1L5pdEdFtW2pd8AtjZiFEWv
fUTH2T8jQrhpuiDCBA3V/+ADepxMB7vaW/q3bDOuiI91aVrAR6RSC57bOF+X0vX3
dcnvMaKmKFD/VqSTDGsojyVP40x1emizdmyf8OPt7igGiF/vq1rtzAkWVqnA7izj
acMuqSKPoiD0zGO58gSi7nnuC6aTQZqwaqYa8i7f5qd/isdarKAZg5a/XnuKeg2B
+ZYjNr3My+O6HXtTYy5B4UYUqcdiQh/z8jjx5P0485PnswJ+AQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFMk56AN4+NP9pIrL/8h0d/X3ILWjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3
YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvZmM0OTM3ZDEtOWY2ZC0z
MGFjLTkyOTUtZmQ3NGI4NjIzZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWJlN2JjZjUtMDUzOC00YTkyLTlh
ZWYtYzQ2MGYxNTAyM2I0LzFiZTdiY2Y1LTA1MzgtNGE5Mi05YWVmLWM0NjBmMTUw
MjNiNC5jcmwwHwYDVR0jBBgwFoAURZQqtWqdfjaPSQmspYB7dN4Nt2cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYw
ZjE1MDIzYjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5g4MA4E
AgACMAgDBgQmAgLNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB85F1y855hbA5U/1ZAcOB+37dJ6JnN5LIe
4yYMv/9omrEy+Yc1RAO4DtPHrVxLjFkZEdEFv8Nk5eR47kkvM4A/DclIGHCfx2j5
KKTUoCGb6Z4Cteaw8Takw/mR+yW/Uhxst4lFUcaYRbjwIkuQgCeT3vxaiSfnvn9D
xJSppSgQdDsKfhqxYRy0HWUvGufqAXITrBPrduUbvYbRAhnfFZjVIloQpxXC6VJB
tq2ZGS6FIZJiIkLoxVGDjssnfQ/5maCWppLzy62DAR8yVcOPs5JCTWfcfeFr1cPn
Zuxrd2lgL3mcQbxk7JNinHeiN9w5O3DCPi1tHdt35wCXxvgOQtxZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:13 2024 by rpki-client on console-ams.rpki-client.org