Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
File:                     97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json)
Hash identifier:          fH++rIEU0WWtdWRoKszOP8GTlPwXvVOVJAzMbFhJYkI=
Subject key identifier:   FC:75:70:8F:35:38:21:55:DB:83:E9:FC:CE:FD:A4:E8:5E:53:17:7E
Certificate issuer:       /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Certificate serial:       010D0C9F43285847B961722EB2E89510C544CC80
Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     62516
IP address blocks:        23.140.104.0/24 maxlen: 32
                          2604:4940::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:72:2e:b2:e8:95:10:c5:44:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=46306abd-f040-4a42-842d-e5cf6e94b562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:0f:79:56:f7:87:74:96:5d:72:37:ea:71:
                    7c:f2:f8:55:c6:37:5c:59:39:8e:00:26:a2:ed:c6:
                    ef:ed:e9:d2:e8:fd:4b:2f:d7:4a:3a:02:ff:c6:d3:
                    76:58:20:4f:f7:43:75:cd:7c:e4:49:dd:57:a4:e7:
                    9e:dc:e7:c1:f0:77:76:79:cd:73:aa:19:cb:43:98:
                    7c:70:1a:d3:35:1f:b3:32:3e:92:42:61:fc:a4:d8:
                    a5:b9:ea:22:48:6a:05:55:6a:17:e0:f7:b2:4c:3e:
                    cc:9d:ae:d3:9b:c5:32:2d:2d:e7:81:1b:1d:17:f6:
                    87:9b:1c:e2:07:6e:db:2d:5b:c5:6b:d6:31:91:8d:
                    83:b1:7f:e5:8d:e1:50:e1:5a:7d:37:5b:95:11:7b:
                    77:d7:32:4f:2b:64:99:07:94:94:5e:0a:4f:5d:dc:
                    18:60:ee:82:d6:68:57:a7:21:29:58:51:cf:bd:e0:
                    dd:12:4f:f8:76:93:63:bd:ed:d0:b0:40:c1:28:68:
                    d0:e7:70:3d:48:a6:bc:70:ac:e9:37:68:89:88:02:
                    a8:75:a1:77:88:09:9c:e7:8e:0d:48:34:c8:68:c4:
                    7f:90:73:a4:b0:a4:eb:27:8f:4c:0a:23:10:ae:15:
                    9d:cd:81:ce:c4:21:5b:ff:07:29:30:16:3e:5a:96:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:70:8F:35:38:21:55:DB:83:E9:FC:CE:FD:A4:E8:5E:53:17:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.104.0/24
                IPv6:
                  2604:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5f:a5:9a:8c:55:c9:b9:fd:a2:1d:5b:3b:b8:7b:33:5e:dc:
         66:2d:76:37:5e:07:fc:d1:1a:ce:ba:97:ff:f5:91:4b:04:cd:
         79:69:9a:27:c2:3c:78:55:b7:18:dc:e1:ac:21:cc:02:af:ae:
         d4:2a:de:9e:29:8d:e8:3a:6f:25:22:08:22:08:25:7c:76:fb:
         26:fa:eb:c7:f1:b9:68:52:da:42:32:ed:8d:11:21:1a:0d:18:
         93:d3:f0:69:74:4d:3e:90:d9:a3:ce:14:ba:be:5b:79:50:8c:
         63:9e:52:da:c7:67:32:e2:6e:4e:d8:38:78:61:37:c5:aa:55:
         e3:46:66:72:c8:dc:05:70:90:63:69:b1:8a:a5:65:7c:a1:7f:
         26:e1:33:73:c2:52:0c:7e:45:e3:8b:9b:fc:6d:64:22:fc:53:
         35:f3:5f:d1:42:12:e4:7a:6b:56:a9:0c:f2:8d:e3:db:42:6c:
         16:aa:30:e8:0d:e9:53:92:62:3b:a2:cc:e5:66:e8:b5:9b:41:
         31:01:04:7c:01:93:18:37:78:f7:27:83:76:33:aa:2e:52:ff:
         54:b5:b5:dc:49:34:84:59:b6:ea:fc:9a:9e:99:ea:b9:ce:d6:
         8e:e2:15:cf:c1:50:a2:af:3d:d1:2c:55:03:70:36:c2:3c:7a:
         f2:0b:6c:07
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEe5YXIusuiVEMVEzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4
ZmEyMB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk
NDYzMDZhYmQtZjA0MC00YTQyLTg0MmQtZTVjZjZlOTRiNTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcMPeVb3h3SWXXI36nF88vhVxjdcWTmOACai
7cbv7enS6P1LL9dKOgL/xtN2WCBP90N1zXzkSd1XpOee3OfB8Hd2ec1zqhnLQ5h8
cBrTNR+zMj6SQmH8pNilueoiSGoFVWoX4PeyTD7Mna7Tm8UyLS3ngRsdF/aHmxzi
B27bLVvFa9YxkY2DsX/ljeFQ4Vp9N1uVEXt31zJPK2SZB5SUXgpPXdwYYO6C1mhX
pyEpWFHPveDdEk/4dpNjve3QsEDBKGjQ53A9SKa8cKzpN2iJiAKodaF3iAmc544N
SDTIaMR/kHOksKTrJ49MCiMQrhWdzYHOxCFb/wcpMBY+WpYKZwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFPx1cI81OCFV24Pp/M79pOheUxd+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1
ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvOTdhOTAyM2MtM2I2ZS0z
MTU4LTg5ZDgtZWZlNjMwMDFmNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl
MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5
OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw
YWJkOThmYTIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4xoMA0E
AgACMAcDBQAmBElAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFJfpZqMVcm5/aIdWzu4ezNe3GYtdjdeB/zR
Gs66l//1kUsEzXlpmifCPHhVtxjc4awhzAKvrtQq3p4pjeg6byUiCCIIJXx2+yb6
68fxuWhS2kIy7Y0RIRoNGJPT8Gl0TT6Q2aPOFLq+W3lQjGOeUtrHZzLibk7YOHhh
N8WqVeNGZnLI3AVwkGNpsYqlZXyhfybhM3PCUgx+ReOLm/xtZCL8UzXzX9FCEuR6
a1apDPKN49tCbBaqMOgN6VOSYjuizOVm6LWbQTEBBHwBkxg3ePcng3Yzqi5S/1S1
tdxJNIRZtur8mp6Z6rnO1o7iFc/BUKKvPdEsVQNwNsI8evILbAc=
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:43:54 2024 by rpki-client on console-ams.rpki-client.org