Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa
File:                     db7be19b-e29a-3fed-8de7-c83ce5094676.roa (raw, json)
Hash identifier:          CRAk1/W/KUQUe5xByWItyGZKFJH3TiH/Er2LXtEdUvQ=
Subject key identifier:   AC:77:45:76:BB:5A:4A:97:D0:96:75:E2:F5:0F:DE:74:6C:99:16:07
Certificate issuer:       /CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
Certificate serial:       010D0C9F43285847C4AA14338F48410A8CD85380
Authority key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     54098
IP address blocks:        23.92.32.0/24 maxlen: 24
                          23.92.33.0/24 maxlen: 24
                          23.92.34.0/24 maxlen: 24
                          23.92.35.0/24 maxlen: 24
                          23.92.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:14:33:8f:48:41:0a:8c:d8:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=b7809486-bc55-49ff-a3c7-a7fdad69e4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:b7:71:07:12:d0:57:40:b8:4e:46:1d:93:
                    e8:eb:e4:32:da:ba:88:0f:b4:bc:7c:e8:09:13:3d:
                    6d:77:0a:02:f2:a3:f9:29:ef:4e:20:7d:58:7d:8c:
                    c1:5c:c4:90:d2:20:0c:c0:89:a2:3b:49:be:33:34:
                    5a:2f:6e:67:4d:99:b1:ea:b2:c8:5b:d9:5e:7f:c4:
                    c5:9a:ef:67:67:37:2d:d5:17:68:26:ec:c7:2b:12:
                    d2:b0:ad:cd:93:74:79:ea:61:8a:e8:52:a0:38:35:
                    2e:d6:13:b8:72:90:50:ae:0e:d5:c9:e4:1c:ba:84:
                    73:e5:3d:a0:1d:90:01:0c:bb:e2:d3:f5:61:4d:8b:
                    16:f2:03:4b:8e:7c:11:d4:74:65:23:c4:70:20:92:
                    d5:9e:ec:a0:da:66:8c:fb:a2:96:72:eb:5d:02:22:
                    92:99:99:4c:a8:01:10:ce:96:59:db:92:e9:e8:05:
                    d0:71:fa:41:b9:21:60:6f:8a:cb:51:e2:60:a3:5e:
                    87:e4:3d:87:67:f6:85:db:b0:80:f3:c3:9a:af:48:
                    30:77:5f:68:5d:d9:6f:94:99:15:30:59:24:56:33:
                    8a:0a:05:27:12:e5:70:66:d8:cd:f2:02:01:10:a7:
                    a8:e1:45:e5:87:2a:a9:c4:7a:6b:13:2c:60:a6:94:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:77:45:76:BB:5A:4A:97:D0:96:75:E2:F5:0F:DE:74:6C:99:16:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl

            X509v3 Authority Key Identifier:
                keyid:74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.32.0-23.92.36.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:bd:6e:11:1d:26:5b:6b:33:8d:c5:ce:a9:60:59:61:25:
         55:1c:48:4c:b8:47:6a:44:96:4f:f3:12:15:ff:83:5d:e3:53:
         2c:5f:85:07:a7:21:f7:1a:6a:e8:54:13:5d:de:a3:84:ff:2d:
         43:1f:0f:f3:6c:70:f3:b1:22:39:85:87:af:e4:f5:d3:9b:5b:
         8d:ef:ed:17:fe:70:a0:40:3d:cc:bd:c8:9a:88:58:92:d3:95:
         4c:b9:98:46:00:0d:a0:bc:5a:4a:ef:73:79:30:d5:61:01:8a:
         01:3f:17:70:4a:07:3b:94:8c:50:48:53:16:b5:64:30:ff:3f:
         10:28:4f:9b:9f:11:5b:af:55:f9:7d:1c:e6:05:7f:55:61:c9:
         3c:e9:4b:2d:b9:b9:e8:47:1d:70:10:87:6c:97:dc:a6:09:01:
         4c:a0:c8:5f:a5:82:f8:4f:d9:bf:89:f5:1a:00:a8:cf:66:9e:
         22:7c:02:fe:f5:ad:fe:ab:64:3a:ee:15:fb:07:83:e8:d0:13:
         30:9a:36:1d:22:64:1b:8f:91:94:25:0a:91:2a:3c:2e:11:12:
         3f:82:93:6d:9b:b0:45:fb:a2:19:bc:4a:46:34:9a:5d:45:7b:
         a6:47:86:13:0c:36:e6:69:d2:6a:3c:07:3c:96:f0:d9:05:b1:
         40:1d:dd:3f
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEfEqhQzj0hBCozYU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE4NmViM2UtZDE0Mi00Y2I5LWFkNGQtZDdmNjBiYWMy
ZDI2MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
Yjc4MDk0ODYtYmM1NS00OWZmLWEzYzctYTdmZGFkNjllNGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvS3cQcS0FdAuE5GHZPo6+Qy2rqID7S8fOgJ
Ez1tdwoC8qP5Ke9OIH1YfYzBXMSQ0iAMwImiO0m+MzRaL25nTZmx6rLIW9lef8TF
mu9nZzct1RdoJuzHKxLSsK3Nk3R56mGK6FKgODUu1hO4cpBQrg7VyeQcuoRz5T2g
HZABDLvi0/VhTYsW8gNLjnwR1HRlI8RwIJLVnuyg2maM+6KWcutdAiKSmZlMqAEQ
zpZZ25Lp6AXQcfpBuSFgb4rLUeJgo16H5D2HZ/aF27CA88Oar0gwd19oXdlvlJkV
MFkkVjOKCgUnEuVwZtjN8gIBEKeo4UXlhyqpxHprEyxgppSxSwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKx3RXa7WkqX0JZ14vUP3nRsmRYHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTg2
ZWIzZS1kMTQyLTRjYjktYWQ0ZC1kN2Y2MGJhYzJkMjYvZGI3YmUxOWItZTI5YS0z
ZmVkLThkZTctYzgzY2U1MDk0Njc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE4NmViM2UtZDE0Mi00Y2I5LWFk
NGQtZDdmNjBiYWMyZDI2LzlhODZlYjNlLWQxNDItNGNiOS1hZDRkLWQ3ZjYwYmFj
MmQyNi5jcmwwHwYDVR0jBBgwFoAUdHI+v8JdZyjAwRBgp2iAj566XFAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTg2ZWIzZS1kMTQyLTRjYjktYWQ0ZC1kN2Y2
MGJhYzJkMjYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUXXCAD
BAAXXCQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAEg69bhEdJltrM43FzqlgWWElVRxITLhHakSWT/MSFf+D
XeNTLF+FB6ch9xpq6FQTXd6jhP8tQx8P82xw87EiOYWHr+T105tbje/tF/5woEA9
zL3ImohYktOVTLmYRgANoLxaSu9zeTDVYQGKAT8XcEoHO5SMUEhTFrVkMP8/EChP
m58RW69V+X0c5gV/VWHJPOlLLbm56EcdcBCHbJfcpgkBTKDIX6WC+E/Zv4n1GgCo
z2aeInwC/vWt/qtkOu4V+weD6NATMJo2HSJkG4+RlCUKkSo8LhESP4KTbZuwRfui
GbxKRjSaXUV7pkeGEww25mnSajwHPJbw2QWxQB3dPw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:54 2024 by rpki-client on console-fra.rpki-client.org