Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8df1d8c-172e-30ec-9499-2164cc775c04.roa
File:                     e8df1d8c-172e-30ec-9499-2164cc775c04.roa (raw, json)
Hash identifier:          2fwfY3WtcT8iM+rYhg+qxASSpkFyNYPu5y/QpswIb7M=
Subject key identifier:   2F:18:A9:32:5D:BF:31:AF:96:E9:41:C6:E7:A6:4E:C2:5D:50:5A:9B
Certificate issuer:       /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
Certificate serial:       010D0C9F4328584511B591DBF6C5A714C5D9B100
Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8df1d8c-172e-30ec-9499-2164cc775c04.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     397952
IP address blocks:        23.135.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:91:db:f6:c5:a7:14:c5:d9:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=380dcb1a-95ac-476a-98ff-496e5612b8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:4e:2d:b0:7d:04:82:56:96:c9:4c:48:90:
                    5a:70:68:d0:51:d1:ab:4a:0b:8a:2b:bd:ec:ef:7a:
                    08:90:57:47:02:62:f4:ab:b4:dc:89:db:26:26:00:
                    0b:2d:75:9f:1e:22:23:a4:dd:6f:b8:97:d8:3e:a9:
                    8a:7f:6a:43:5b:e1:ac:61:1e:3e:11:36:db:74:5d:
                    59:95:29:1c:3b:98:a1:14:e3:41:fa:22:ea:19:92:
                    66:42:c9:e1:b4:5d:70:b2:e9:c5:89:9b:7c:22:b4:
                    d0:83:67:0d:b9:15:9d:cc:07:e5:8c:a4:3c:fb:2b:
                    76:8f:2c:46:1e:f8:3f:da:90:93:42:fb:a8:bc:e7:
                    28:25:c3:99:68:ed:88:5c:83:83:af:6e:3f:f1:94:
                    a2:63:fc:f0:e3:cb:fc:97:10:9b:7c:67:7e:04:1b:
                    13:68:15:42:27:29:ea:40:0c:eb:b7:da:a0:9f:86:
                    34:ad:0e:65:7e:53:10:11:5c:f1:6d:0f:18:4a:13:
                    89:d2:b1:b1:a1:20:c2:51:1e:1f:36:15:8f:65:87:
                    dd:16:d7:45:d7:9a:76:c3:03:39:66:f1:b9:8c:50:
                    6d:e9:54:68:f7:29:fc:8c:0e:39:14:a6:1a:48:da:
                    d5:34:2b:b0:38:5c:63:20:d7:a0:46:76:c3:ee:70:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:18:A9:32:5D:BF:31:AF:96:E9:41:C6:E7:A6:4E:C2:5D:50:5A:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8df1d8c-172e-30ec-9499-2164cc775c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl

            X509v3 Authority Key Identifier:
                keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:68:f2:97:9f:91:4f:9e:57:e4:22:cb:6d:29:35:c1:23:
         43:06:25:dc:0b:2e:23:ad:4f:78:fa:18:a0:5d:49:41:72:8d:
         f1:3c:e8:58:02:66:e1:08:36:e8:cd:e2:fd:a1:e0:4a:9b:1a:
         24:45:ad:0e:4f:32:a5:38:09:e3:16:3e:03:7b:b6:8c:a5:de:
         33:e3:ac:63:47:2e:49:37:0b:8a:f1:4f:82:37:1a:3f:9d:7e:
         ef:e4:1c:7a:bf:3e:33:b3:16:87:fa:52:30:ea:52:14:a5:2c:
         95:04:f7:bb:4d:65:75:a8:bc:08:35:1f:cc:d9:e1:c6:86:d4:
         eb:4a:56:cb:ae:cd:94:a4:dd:33:cf:74:8f:13:15:0a:df:98:
         f8:55:90:a1:54:b1:a5:84:61:b4:e2:c7:b2:43:55:05:26:d3:
         e1:69:52:48:c8:bb:a3:c7:dc:1c:e6:07:95:c2:56:e1:e3:6b:
         2c:20:ca:28:f9:8c:4e:ea:e2:92:0b:ac:d8:95:fe:1a:4c:51:
         49:38:99:2e:59:ea:75:e4:4b:03:92:5c:52:63:41:7d:64:5c:
         ce:7e:ba:be:bb:6a:51:ee:ab:43:e9:20:7e:81:36:4a:a1:df:
         58:13:6b:58:ae:c2:96:2d:66:04:a1:fb:3e:b7:8c:f2:b4:ff:
         e9:38:f2:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtZHb9sWnFMXZsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyNjQ1OTItYmNjMy00OGYxLWE3ODItOGJhNDhmYzUw
NmZhMB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk
MzgwZGNiMWEtOTVhYy00NzZhLTk4ZmYtNDk2ZTU2MTJiOGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnxOLbB9BIJWlslMSJBacGjQUdGrSguKK73s
73oIkFdHAmL0q7TcidsmJgALLXWfHiIjpN1vuJfYPqmKf2pDW+GsYR4+ETbbdF1Z
lSkcO5ihFONB+iLqGZJmQsnhtF1wsunFiZt8IrTQg2cNuRWdzAfljKQ8+yt2jyxG
Hvg/2pCTQvuovOcoJcOZaO2IXIODr24/8ZSiY/zw48v8lxCbfGd+BBsTaBVCJynq
QAzrt9qgn4Y0rQ5lflMQEVzxbQ8YShOJ0rGxoSDCUR4fNhWPZYfdFtdF15p2wwM5
ZvG5jFBt6VRo9yn8jA45FKYaSNrVNCuwOFxjINegRnbD7nB7mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC8YqTJdvzGvlulBxuemTsJdUFqbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lODI2
NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0OGZjNTA2ZmEvZThkZjFkOGMtMTcyZS0z
MGVjLTk0OTktMjE2NGNjNzc1YzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTgyNjQ1OTItYmNjMy00OGYxLWE3
ODItOGJhNDhmYzUwNmZhL2U4MjY0NTkyLWJjYzMtNDhmMS1hNzgyLThiYTQ4ZmM1
MDZmYS5jcmwwHwYDVR0jBBgwFoAUiHdMTp8/9MLgRDap8Qq21ISdpwowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lODI2NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0
OGZjNTA2ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4fwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEp5aPKXn5FPnlfkIsttKTXBI0MGJdwLLiOtT3j6GKBdSUFyjfE86FgC
ZuEINujN4v2h4EqbGiRFrQ5PMqU4CeMWPgN7toyl3jPjrGNHLkk3C4rxT4I3Gj+d
fu/kHHq/PjOzFof6UjDqUhSlLJUE97tNZXWovAg1H8zZ4caG1OtKVsuuzZSk3TPP
dI8TFQrfmPhVkKFUsaWEYbTix7JDVQUm0+FpUkjIu6PH3BzmB5XCVuHjaywgyij5
jE7q4pILrNiV/hpMUUk4mS5Z6nXkSwOSXFJjQX1kXM5+ur67alHuq0PpIH6BNkqh
31gTa1iuwpYtZgSh+z63jPK0/+k48gk=
-----END CERTIFICATE-----
Generated at Thu May 2 08:06:27 2024 by rpki-client on console-ams.rpki-client.org