Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a7027107-6e94-30b6-8510-73e3051693e9.roa
File:                     a7027107-6e94-30b6-8510-73e3051693e9.roa (raw, json)
Hash identifier:          FcV1swgB0xGMpWKdWStMiSdrBJAIEGt/nG7fJIQmI9Y=
Subject key identifier:   BE:81:85:3F:65:68:CC:C0:B5:04:A0:E1:FD:75:D7:C0:EA:E0:5E:C0
Certificate issuer:       /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial:       010D0C9F432858471E70551C6BA4BF741C41645E
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a7027107-6e94-30b6-8510-73e3051693e9.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     209242
IP address blocks:        23.141.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:55:1c:6b:a4:bf:74:1c:41:64:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=b9e2b864-f3a1-477b-9b35-a3a0af62e091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:8a:aa:ea:38:d4:fd:92:aa:95:0d:22:99:
                    cf:b3:6b:dd:01:6d:43:2a:32:1e:7a:ca:0f:1a:1d:
                    bd:44:d9:55:2d:ca:df:e4:7f:7a:d1:85:07:38:2c:
                    e9:bd:3d:3c:a9:96:5c:2c:c2:26:a7:b3:b4:19:4f:
                    99:57:1f:37:85:cc:bb:65:2f:cc:56:d4:b2:43:96:
                    86:2c:0d:dc:29:6b:b3:b6:f9:61:07:30:71:ce:c3:
                    21:2e:05:18:62:8d:29:62:ba:48:6e:d7:25:26:92:
                    bc:e9:cc:aa:ab:a6:56:db:40:ca:9c:6f:c5:13:a5:
                    81:d8:5d:2e:18:ad:69:06:40:4a:b0:d2:a8:3f:db:
                    cb:ba:fe:6d:99:6c:c8:b5:87:df:12:56:95:a3:04:
                    ec:94:4e:61:40:d6:16:41:da:e0:20:b8:5e:89:71:
                    d8:a5:45:9d:68:8d:39:54:f4:c8:5d:ad:3d:52:9a:
                    58:f7:1a:90:30:b8:b8:ee:a9:78:49:13:70:27:c5:
                    96:a6:e4:4e:fb:63:73:84:54:03:0c:c5:2d:d4:b9:
                    96:19:e9:63:95:84:fe:94:69:fd:6e:24:ba:c2:08:
                    8b:4c:bc:72:3d:91:1d:be:29:d6:2d:21:0c:1c:c7:
                    56:29:9a:ce:50:31:ff:83:8c:8a:07:f7:3e:24:4a:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:81:85:3F:65:68:CC:C0:B5:04:A0:E1:FD:75:D7:C0:EA:E0:5E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a7027107-6e94-30b6-8510-73e3051693e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ed:0f:cd:44:1f:db:86:cf:7b:50:77:c5:9e:9f:5f:35:b0:
         75:6a:66:af:96:66:24:5c:d1:e3:63:3f:86:35:1f:1b:0f:08:
         fc:04:5a:5c:30:0c:eb:ff:8d:ee:8f:4b:ee:86:ed:34:be:4b:
         62:fd:ae:02:d9:46:0f:8f:2f:23:79:83:fc:1e:b2:14:17:17:
         e6:04:01:d9:1b:4c:41:88:6d:cd:01:a3:da:88:9e:77:b2:72:
         5f:16:aa:8c:c8:66:bc:f1:95:23:f7:8e:13:64:2f:28:6c:fe:
         89:56:f3:24:0c:cf:cf:d0:60:9b:d4:4d:67:bd:db:45:9b:ed:
         5b:b6:c4:37:7b:56:b5:54:c5:2a:24:85:24:4d:3b:dc:c1:88:
         64:a2:4d:b1:2f:b1:e0:d4:2c:7a:fc:5a:e6:44:b9:19:97:90:
         f5:5f:b2:43:5a:0b:d1:b0:b6:4b:84:c8:ea:9e:90:cd:b1:ce:
         d0:1b:2b:f6:bb:d2:2a:a8:df:e6:4b:c9:4a:e9:e2:9a:57:c6:
         cd:39:bf:da:52:d3:99:5a:9e:e2:3c:3f:fc:5b:7e:4f:6e:07:
         47:54:2b:e4:cf:88:de:dc:46:16:ed:fd:11:fe:08:4d:8e:1b:
         85:84:4b:31:fd:ed:58:64:25:bd:a2:f0:13:56:18:34:4e:69:
         1b:a8:83:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecFUca6S/dBxBZF4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy
ZTBhMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
YjllMmI4NjQtZjNhMS00NzdiLTliMzUtYTNhMGFmNjJlMDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUmKquo41P2SqpUNIpnPs2vdAW1DKjIeesoP
Gh29RNlVLcrf5H960YUHOCzpvT08qZZcLMImp7O0GU+ZVx83hcy7ZS/MVtSyQ5aG
LA3cKWuztvlhBzBxzsMhLgUYYo0pYrpIbtclJpK86cyqq6ZW20DKnG/FE6WB2F0u
GK1pBkBKsNKoP9vLuv5tmWzItYffElaVowTslE5hQNYWQdrgILheiXHYpUWdaI05
VPTIXa09UppY9xqQMLi47ql4SRNwJ8WWpuRO+2NzhFQDDMUt1LmWGeljlYT+lGn9
biS6wgiLTLxyPZEdvinWLSEMHMdWKZrOUDH/g4yKB/c+JEppVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6BhT9laMzAtQSg4f1118Dq4F7AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz
MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvYTcwMjcxMDctNmU5NC0z
MGI2LTg1MTAtNzNlMzA1MTY5M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1
NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw
MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1
MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXtD81EH9uGz3tQd8Wen181sHVqZq+WZiRc0eNjP4Y1HxsPCPwEWlww
DOv/je6PS+6G7TS+S2L9rgLZRg+PLyN5g/weshQXF+YEAdkbTEGIbc0Bo9qInney
cl8WqozIZrzxlSP3jhNkLyhs/olW8yQMz8/QYJvUTWe920Wb7Vu2xDd7VrVUxSok
hSRNO9zBiGSiTbEvseDULHr8WuZEuRmXkPVfskNaC9GwtkuEyOqekM2xztAbK/a7
0iqo3+ZLyUrp4ppXxs05v9pS05lanuI8P/xbfk9uB0dUK+TPiN7cRhbt/RH+CE2O
G4WESzH97VhkJb2i8BNWGDROaRuogxo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:55 2024 by rpki-client on console-fra.rpki-client.org