Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/05f41490-eb46-385a-b1c5-c75862aa15d4.roa
File:                     05f41490-eb46-385a-b1c5-c75862aa15d4.roa (raw, json)
Hash identifier:          Rx/F1xgBv3iSmox/ybDgcr/TdQn0zV20l8WnKpf2iIY=
Subject key identifier:   28:16:AE:38:9B:AB:23:4C:8A:51:38:31:AB:49:B3:A5:9A:76:42:49
Certificate issuer:       /CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Certificate serial:       010D0C9F43285847DC64ADC184B819F6C44BF13C
Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/05f41490-eb46-385a-b1c5-c75862aa15d4.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     48231
IP address blocks:        23.150.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:ad:c1:84:b8:19:f6:c4:4b:f1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=71f2ca00-b635-46be-ad02-58cd21f16210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:b6:a4:69:07:9b:0f:a8:3b:fe:80:b7:92:
                    a7:3d:75:a5:10:b1:a3:87:e1:1f:b9:36:94:2d:5f:
                    12:6b:32:d6:18:2a:a5:7c:8d:f8:35:5d:b5:4d:db:
                    a6:c1:bc:33:51:9e:bc:9e:35:6e:fa:43:a2:54:e1:
                    69:79:4f:d1:97:57:36:e3:b0:66:00:c2:8e:cf:6c:
                    2c:aa:ad:e5:c4:8a:e7:00:44:f8:6c:b5:ee:dc:d1:
                    02:90:cd:d9:eb:87:31:72:e1:75:9c:02:88:6d:b8:
                    b4:60:28:89:dc:38:7f:53:53:2c:4f:f7:fb:04:a0:
                    0e:10:21:04:83:ea:7d:70:16:8c:0c:c0:d4:8b:ae:
                    61:e8:e1:71:07:55:ea:10:32:00:f4:21:f4:61:82:
                    c0:28:65:02:81:be:4d:29:0b:e7:43:a5:78:29:f2:
                    f3:66:54:98:66:94:ef:ef:cd:93:ab:aa:2e:ea:d8:
                    ce:e7:3d:d8:57:83:8b:fc:6b:0d:b8:11:76:5f:07:
                    f0:05:da:4b:5a:c7:68:7f:1b:c8:ed:d3:27:4a:55:
                    91:d6:cd:61:9d:eb:32:3a:e6:6c:2f:1c:4b:7b:9a:
                    08:b5:2d:53:0e:92:00:cc:0d:ca:f0:01:eb:c6:5d:
                    a3:32:e4:f0:0d:a2:29:8b:35:f4:2f:97:2d:f7:84:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:16:AE:38:9B:AB:23:4C:8A:51:38:31:AB:49:B3:A5:9A:76:42:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/05f41490-eb46-385a-b1c5-c75862aa15d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:30:9b:57:66:a9:8c:41:86:69:63:40:03:f0:d5:b1:52:f6:
         79:89:a1:0f:5f:f7:63:7b:e1:90:0c:30:bd:4c:1c:09:27:3b:
         2e:ac:30:78:7f:09:18:07:70:5e:f2:19:60:60:c5:84:c5:01:
         f1:27:9d:eb:14:9f:e9:e7:e1:6f:4f:19:11:11:a7:81:c9:cd:
         a7:4c:d6:ab:1d:6a:5f:c7:78:19:ad:54:36:94:a3:45:57:9f:
         42:c4:4a:99:44:0b:6d:36:09:9a:d2:02:d2:22:c8:52:5a:ec:
         79:7f:91:7c:56:04:5f:4c:07:ce:26:cc:65:d1:01:ba:35:48:
         50:ae:69:35:7a:c3:ef:57:cb:76:34:6f:03:7e:49:35:ad:e3:
         fc:16:06:87:86:a5:ab:c4:44:20:fb:ee:68:cb:98:e7:f9:a8:
         99:7d:6c:34:fb:d7:b2:90:2a:dc:85:17:f8:16:a1:e8:9c:01:
         e0:44:50:e5:00:91:59:b2:e6:76:1a:9b:43:2d:4a:62:05:35:
         5f:05:e6:9d:48:3b:bb:90:77:86:24:7b:2f:be:73:cb:b5:e0:
         6a:ad:8f:1f:5f:75:c5:a9:2d:20:8a:76:a0:ea:dc:a0:86:57:
         20:36:2e:3b:fd:59:ba:a8:ab:2e:f2:d9:14:47:22:8b:02:e5:
         c2:f5:82:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZK3BhLgZ9sRL8TwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q3MzA0ZTEtM2JjMS00M2MxLWIwMzUtOTNlZTAyNzA2
M2RiMB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk
NzFmMmNhMDAtYjYzNS00NmJlLWFkMDItNThjZDIxZjE2MjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSG2pGkHmw+oO/6At5KnPXWlELGjh+EfuTaU
LV8SazLWGCqlfI34NV21TdumwbwzUZ68njVu+kOiVOFpeU/Rl1c247BmAMKOz2ws
qq3lxIrnAET4bLXu3NECkM3Z64cxcuF1nAKIbbi0YCiJ3Dh/U1MsT/f7BKAOECEE
g+p9cBaMDMDUi65h6OFxB1XqEDIA9CH0YYLAKGUCgb5NKQvnQ6V4KfLzZlSYZpTv
782Tq6ou6tjO5z3YV4OL/GsNuBF2XwfwBdpLWsdofxvI7dMnSlWR1s1hnesyOuZs
LxxLe5oItS1TDpIAzA3K8AHrxl2jMuTwDaIpizX0L5ct94QpdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgWrjibqyNMilE4MatJs6WadkJJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZDcz
MDRlMS0zYmMxLTQzYzEtYjAzNS05M2VlMDI3MDYzZGIvMDVmNDE0OTAtZWI0Ni0z
ODVhLWIxYzUtYzc1ODYyYWExNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2Q3MzA0ZTEtM2JjMS00M2MxLWIw
MzUtOTNlZTAyNzA2M2RiL2NkNzMwNGUxLTNiYzEtNDNjMS1iMDM1LTkzZWUwMjcw
NjNkYi5jcmwwHwYDVR0jBBgwFoAU7rmdZNXt9QBRjGNxx50ffKrFHZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jZDczMDRlMS0zYmMxLTQzYzEtYjAzNS05M2Vl
MDI3MDYzZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5Y4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQwm1dmqYxBhmljQAPw1bFS9nmJoQ9f92N74ZAMML1MHAknOy6sMHh/
CRgHcF7yGWBgxYTFAfEnnesUn+nn4W9PGRERp4HJzadM1qsdal/HeBmtVDaUo0VX
n0LESplEC202CZrSAtIiyFJa7Hl/kXxWBF9MB84mzGXRAbo1SFCuaTV6w+9Xy3Y0
bwN+STWt4/wWBoeGpavERCD77mjLmOf5qJl9bDT717KQKtyFF/gWoeicAeBEUOUA
kVmy5nYam0MtSmIFNV8F5p1IO7uQd4Ykey++c8u14Gqtjx9fdcWpLSCKdqDq3KCG
VyA2Ljv9Wbqoqy7y2RRHIosC5cL1gn8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:06 2024 by rpki-client on console-ams.rpki-client.org