Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa
File:                     b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa (raw, json)
Hash identifier:          UnU+bc1q7aJGImXqYZ3hfKvmwDATubBes6/LVyqNGqM=
Subject key identifier:   15:4B:43:48:6D:DC:85:9E:A8:A8:1E:6A:08:04:0C:57:D6:9E:54:93
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F43285845C01389D25CEE54FB390B4480
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     26548
IP address blocks:        23.147.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:89:d2:5c:ee:54:fb:39:0b:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=016309a6-c4d6-4335-b53b-031e5ecc4277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:95:7c:2f:39:e2:1a:03:f7:9a:3b:36:ba:
                    53:a0:01:e0:39:47:4e:90:fb:5e:bb:2d:75:82:cd:
                    e6:28:8e:f5:5f:34:f5:ad:22:e9:f2:55:21:c7:b8:
                    4b:23:6f:56:79:32:a0:79:5c:01:77:4d:3c:c7:6d:
                    09:13:db:a4:e7:f0:21:13:ad:44:31:0e:73:63:63:
                    4c:ff:b5:57:68:a4:7f:1a:08:94:6b:9c:ae:62:c8:
                    37:54:02:29:e9:63:76:45:dd:85:83:8e:a1:99:0e:
                    2b:2b:52:bd:35:32:57:ff:e7:9d:9b:13:1f:77:17:
                    43:6e:03:74:5c:d6:55:9e:50:cd:c3:a2:6b:da:64:
                    6c:b2:27:65:5b:ba:71:d8:e4:a2:cb:b7:f6:20:e7:
                    47:b4:00:41:d0:cb:aa:f7:5d:26:0f:6b:ea:cf:31:
                    0a:fc:74:19:4f:bf:15:2f:4e:d3:00:6f:90:07:ac:
                    2d:e7:91:91:66:40:28:dc:d1:75:09:d1:16:20:92:
                    71:2f:0b:cf:8b:36:17:d2:95:2b:6f:b0:d8:d4:17:
                    eb:0d:72:d7:cd:d6:52:75:5f:3e:d3:3d:fc:e8:41:
                    24:69:2d:73:2d:4a:b1:d7:4a:da:60:16:40:13:57:
                    7f:4c:4a:29:30:5a:14:26:9a:15:a8:de:10:c1:7e:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4B:43:48:6D:DC:85:9E:A8:A8:1E:6A:08:04:0C:57:D6:9E:54:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b5f712c2-a7c3-3695-ae75-c74dc0a984db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:0c:31:8e:00:9e:6e:a5:3f:e0:10:f2:59:38:87:9b:fa:73:
         d5:e2:01:fa:a7:e4:27:91:9a:0b:85:ce:99:70:01:33:e4:85:
         7c:64:38:e1:be:e1:0d:12:49:e5:30:22:62:18:6c:bb:99:dd:
         7b:90:14:3e:44:69:98:f7:93:0d:ef:64:e7:81:f9:40:83:53:
         3d:65:e6:7d:d6:f4:ed:b6:99:ae:8e:35:c1:c0:92:1f:e9:8a:
         b1:e5:75:ed:f2:50:e0:66:94:5e:22:c0:e2:9b:3f:d7:73:cd:
         a2:6c:99:df:1c:6d:61:17:75:70:cd:85:f3:64:eb:98:22:4e:
         3d:aa:08:e9:e1:2a:60:2b:37:95:03:84:0d:d5:8b:1e:cb:c3:
         52:82:51:a9:37:5a:64:72:1f:09:05:96:8a:19:da:62:4e:36:
         79:5c:5d:93:3c:a4:65:16:83:58:3c:30:0e:d8:f3:01:38:f7:
         14:b6:48:39:19:30:c4:96:c9:68:0e:a0:df:4b:d2:50:ae:be:
         0e:19:dc:73:31:52:d9:d1:fd:16:4f:65:ed:e7:e2:25:7c:0f:
         4c:87:6b:89:4d:7e:8e:59:bc:26:3c:8b:77:93:c1:69:f9:85:
         d3:45:84:13:d2:4c:a8:ff:0c:a0:e1:8d:da:f3:08:0a:78:2d:
         ef:7c:fc:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXAE4nSXO5U+zkLRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz
MmIzMB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk
MDE2MzA5YTYtYzRkNi00MzM1LWI1M2ItMDMxZTVlY2M0Mjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKaVfC854hoD95o7NrpToAHgOUdOkPteuy11
gs3mKI71XzT1rSLp8lUhx7hLI29WeTKgeVwBd008x20JE9uk5/AhE61EMQ5zY2NM
/7VXaKR/GgiUa5yuYsg3VAIp6WN2Rd2Fg46hmQ4rK1K9NTJX/+edmxMfdxdDbgN0
XNZVnlDNw6Jr2mRssidlW7px2OSiy7f2IOdHtABB0Muq910mD2vqzzEK/HQZT78V
L07TAG+QB6wt55GRZkAo3NF1CdEWIJJxLwvPizYX0pUrb7DY1BfrDXLXzdZSdV8+
0z386EEkaS1zLUqx10raYBZAE1d/TEopMFoUJpoVqN4QwX4FAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVLQ0ht3IWeqKgeaggEDFfWnlSTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5
YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYjVmNzEyYzItYTdjMy0z
Njk1LWFlNzUtYzc0ZGMwYTk4NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0
ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx
MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh
ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5MAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALQMMY4Anm6lP+AQ8lk4h5v6c9XiAfqn5CeRmguFzplwATPkhXxkOOG+
4Q0SSeUwImIYbLuZ3XuQFD5EaZj3kw3vZOeB+UCDUz1l5n3W9O22ma6ONcHAkh/p
irHlde3yUOBmlF4iwOKbP9dzzaJsmd8cbWEXdXDNhfNk65giTj2qCOnhKmArN5UD
hA3Vix7Lw1KCUak3WmRyHwkFlooZ2mJONnlcXZM8pGUWg1g8MA7Y8wE49xS2SDkZ
MMSWyWgOoN9L0lCuvg4Z3HMxUtnR/RZPZe3n4iV8D0yHa4lNfo5ZvCY8i3eTwWn5
hdNFhBPSTKj/DKDhjdrzCAp4Le98/E4=
-----END CERTIFICATE-----
Generated at Sat May 11 20:54:45 2024 by rpki-client on console-fra.rpki-client.org