Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/5e508305-9fc1-313d-8943-64f35786eeb3.roa
File:                     5e508305-9fc1-313d-8943-64f35786eeb3.roa (raw, json)
Hash identifier:          a8LLGiFcIxpdgD1BaNONRoVIhj8v2YlOEl8D/lLFMjg=
Subject key identifier:   00:DE:FD:63:44:6C:B8:BA:92:CF:9B:06:E3:57:70:0D:1D:DE:52:A2
Certificate issuer:       /CN=41dcdb5d-400c-4bbe-8411-2529aa359a0c
Certificate serial:       010D0C9F43285847D999F2B9DB1D7984006AC400
Authority key identifier: 5F:95:64:AF:62:76:C1:89:E8:38:5D:63:8A:DA:99:9A:40:82:40:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/5e508305-9fc1-313d-8943-64f35786eeb3.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     395763
IP address blocks:        23.142.64.0/24 maxlen: 24
                          2602:fbc6::/40 maxlen: 40
                          2620:34:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/41dcdb5d-400c-4bbe-8411-2529aa359a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/41dcdb5d-400c-4bbe-8411-2529aa359a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f2:b9:db:1d:79:84:00:6a:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dcdb5d-400c-4bbe-8411-2529aa359a0c
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=7a7bdb4b-5a2e-4491-a6f3-22fbe60f1290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:25:27:a7:7b:92:59:1d:9b:fd:0a:06:e3:
                    1d:82:0f:cc:fe:27:a3:08:49:da:2b:c1:b1:4b:c0:
                    31:a5:4f:5b:82:ea:24:80:e3:61:9a:de:ac:d9:13:
                    23:3b:93:3f:5d:1d:2b:48:4f:aa:20:fd:cf:2d:b8:
                    51:f1:a9:d6:dd:78:e6:52:73:e6:cc:e8:49:55:67:
                    fd:61:92:33:90:e1:3e:3a:43:72:a8:00:1e:01:69:
                    7b:be:0a:68:42:cb:ca:a1:78:9e:d8:a4:d7:68:46:
                    cf:22:ab:08:f0:3a:21:a7:d2:89:5b:02:61:c6:78:
                    94:3d:7a:1e:bd:bf:a6:09:57:c1:da:8c:1e:d0:26:
                    7e:54:b8:bf:65:ef:8f:ed:de:42:a3:77:a8:d5:67:
                    91:a3:37:47:c2:34:88:c4:c7:ad:20:de:c5:2f:7f:
                    c8:a2:3c:c4:f3:36:6c:69:60:79:e7:f5:8f:02:a4:
                    b9:48:ee:ee:8c:fd:a7:23:26:49:e1:f0:0c:a9:63:
                    73:55:f6:2c:be:7a:1d:cf:17:da:2c:89:ff:04:4c:
                    f8:ae:75:6d:52:14:ee:11:e1:b6:19:99:d8:a8:2a:
                    e9:9e:ce:cd:49:34:80:08:af:7a:ea:91:a1:7e:68:
                    d8:d0:fc:97:e7:8c:37:4c:72:e7:b1:1d:af:13:b5:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:FD:63:44:6C:B8:BA:92:CF:9B:06:E3:57:70:0D:1D:DE:52:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/5e508305-9fc1-313d-8943-64f35786eeb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c/41dcdb5d-400c-4bbe-8411-2529aa359a0c.crl

            X509v3 Authority Key Identifier:
                keyid:5F:95:64:AF:62:76:C1:89:E8:38:5D:63:8A:DA:99:9A:40:82:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dcdb5d-400c-4bbe-8411-2529aa359a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.64.0/24
                IPv6:
                  2602:fbc6::/40
                  2620:34:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:35:b2:71:12:ab:58:aa:69:2e:1b:e2:75:8f:43:cb:93:
         03:47:d3:6d:48:6d:40:f2:b7:36:7d:e7:5b:cc:c9:8c:b1:40:
         ac:05:74:f6:9a:e8:bb:e0:50:02:4d:2d:06:a0:db:ca:97:3f:
         66:f5:4a:09:0b:65:a5:b6:05:12:02:d2:d0:f1:f7:51:7c:3e:
         89:2f:ce:91:5d:e9:67:ff:14:12:a1:ab:f6:22:0f:c4:2b:3c:
         f2:50:ae:45:58:52:12:a1:f8:41:1b:07:b4:eb:e5:cc:cb:3d:
         ba:bc:e5:68:d2:06:78:0a:a1:d5:07:75:81:89:bf:ec:ce:11:
         ba:62:a7:41:a0:9a:28:dd:a7:29:89:63:40:2c:74:09:30:9f:
         51:3c:4e:b5:90:8f:5d:a0:df:60:92:8d:f5:1a:91:02:f5:d9:
         12:77:3d:37:f7:0f:49:a0:b1:da:55:4c:e7:c0:dd:f7:cf:03:
         86:ff:a0:fe:66:1a:fd:c9:88:ed:ec:86:8f:1d:78:91:c0:f6:
         72:21:bd:0d:75:ab:40:89:7b:bc:53:c2:66:d7:99:b7:56:a6:
         21:b3:bd:44:4c:87:6b:b1:33:25:2a:d6:78:da:b9:9b:14:b4:
         c9:3f:b6:81:0c:8d:c5:f7:85:1b:ea:9c:03:35:51:07:71:a2:
         8b:87:85:a9
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEfZmfK52x15hABqxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkY2RiNWQtNDAwYy00YmJlLTg0MTEtMjUyOWFhMzU5
YTBjMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
N2E3YmRiNGItNWEyZS00NDkxLWE2ZjMtMjJmYmU2MGYxMjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo4lJ6d7klkdm/0KBuMdgg/M/iejCEnaK8Gx
S8AxpU9bguokgONhmt6s2RMjO5M/XR0rSE+qIP3PLbhR8anW3XjmUnPmzOhJVWf9
YZIzkOE+OkNyqAAeAWl7vgpoQsvKoXie2KTXaEbPIqsI8Dohp9KJWwJhxniUPXoe
vb+mCVfB2owe0CZ+VLi/Ze+P7d5Co3eo1WeRozdHwjSIxMetIN7FL3/IojzE8zZs
aWB55/WPAqS5SO7ujP2nIyZJ4fAMqWNzVfYsvnodzxfaLIn/BEz4rnVtUhTuEeG2
GZnYqCrpns7NSTSACK966pGhfmjY0PyX54w3THLnsR2vE7VbqQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFADe/WNEbLi6ks+bBuNXcA0d3lKiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRj
ZGI1ZC00MDBjLTRiYmUtODQxMS0yNTI5YWEzNTlhMGMvNWU1MDgzMDUtOWZjMS0z
MTNkLTg5NDMtNjRmMzU3ODZlZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkY2RiNWQtNDAwYy00YmJlLTg0
MTEtMjUyOWFhMzU5YTBjLzQxZGNkYjVkLTQwMGMtNGJiZS04NDExLTI1MjlhYTM1
OWEwYy5jcmwwHwYDVR0jBBgwFoAUX5Vkr2J2wYnoOF1jitqZmkCCQOMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRjZGI1ZC00MDBjLTRiYmUtODQxMS0yNTI5
YWEzNTlhMGMuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAF45AMBcE
AgACMBEDBgAmAvvGAAMHACYgADQgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNYDWycRKrWKppLhvidY9D
y5MDR9NtSG1A8rc2fedbzMmMsUCsBXT2mui74FACTS0GoNvKlz9m9UoJC2WltgUS
AtLQ8fdRfD6JL86RXeln/xQSoav2Ig/EKzzyUK5FWFISofhBGwe06+XMyz26vOVo
0gZ4CqHVB3WBib/szhG6YqdBoJoo3acpiWNALHQJMJ9RPE61kI9doN9gko31GpEC
9dkSdz039w9JoLHaVUznwN33zwOG/6D+Zhr9yYjt7IaPHXiRwPZyIb0NdatAiXu8
U8Jm15m3VqYhs71ETIdrsTMlKtZ42rmbFLTJP7aBDI3F94Ub6pwDNVEHcaKLh4Wp
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:06 2024 by rpki-client on console-fra.rpki-client.org