Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/61594ab1-0cfa-376c-9081-55c891482173.roa
File:                     61594ab1-0cfa-376c-9081-55c891482173.roa (raw, json)
Hash identifier:          nwHSS1+JfhAWEkXv1XlyF9i390x2tLe2lXifMkbgqNU=
Subject key identifier:   22:BB:BE:B8:3C:DA:33:09:F3:89:2E:1F:AA:46:02:21:27:C2:3E:63
Certificate issuer:       /CN=cd737608-8321-4248-8093-6c1db3c96df0
Certificate serial:       010D0C9F43285847FF6F47C950743665D089AD40
Authority key identifier: 7B:CF:5F:74:38:94:E6:B4:5E:B5:BC:33:52:DB:AE:64:64:58:65:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/61594ab1-0cfa-376c-9081-55c891482173.roa
Signing time:             Mon 25 Nov 2024 15:15:18 +0000
ROA not before:           Mon 25 Nov 2024 15:15:18 +0000
ROA not after:            Sun 23 Feb 2025 15:15:18 +0000
asID:                     401467
IP address blocks:        23.129.52.0/24 maxlen: 24
                          2602:81a:a000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/cd737608-8321-4248-8093-6c1db3c96df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/cd737608-8321-4248-8093-6c1db3c96df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:6f:47:c9:50:74:36:65:d0:89:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd737608-8321-4248-8093-6c1db3c96df0
        Validity
            Not Before: Nov 25 15:15:18 2024 GMT
            Not After : Feb 23 15:15:18 2025 GMT
        Subject: CN=7835eb96-2241-4205-8b8c-7f6e90b889a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:6c:b5:a3:d7:07:b9:9f:7e:4f:91:b5:3d:
                    75:6e:fc:50:45:55:68:25:91:57:eb:6c:74:21:d0:
                    3a:f6:49:49:35:88:8d:91:0f:9e:26:13:3d:e6:75:
                    54:97:4f:97:8c:c0:9c:24:cf:8e:3e:57:0c:74:1d:
                    00:8f:41:24:fb:f8:7b:ad:e3:f2:fb:bf:d6:b8:e0:
                    cf:5f:17:f9:f2:ae:85:10:1c:22:02:1d:30:af:ed:
                    1a:80:d3:2a:06:1b:ee:a3:d2:2b:08:1b:1a:90:63:
                    fb:78:48:f4:14:b9:63:d8:0f:f7:1c:d0:46:45:db:
                    0c:a7:75:de:4f:25:ec:34:b2:27:10:3a:17:65:2a:
                    7b:b2:52:58:7f:c5:4a:db:ff:73:9c:d2:eb:e8:56:
                    07:84:49:4c:3d:b3:83:43:4e:4d:9b:76:23:87:c3:
                    16:67:21:e5:5b:cc:1f:bd:3e:f3:46:95:8e:d6:65:
                    16:47:4d:a8:b2:63:76:26:07:61:29:fa:6c:61:85:
                    c4:76:35:a3:1d:40:38:a8:b3:5e:c9:a8:ee:84:ef:
                    7e:7b:24:59:d5:c3:f4:70:3d:e8:af:7e:82:5d:e9:
                    f8:15:94:4d:3a:4d:01:96:ad:2e:f6:d4:6e:df:f7:
                    9c:68:18:87:15:32:1f:e5:17:b5:54:5f:f2:b6:b6:
                    65:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BB:BE:B8:3C:DA:33:09:F3:89:2E:1F:AA:46:02:21:27:C2:3E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/61594ab1-0cfa-376c-9081-55c891482173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0/cd737608-8321-4248-8093-6c1db3c96df0.crl

            X509v3 Authority Key Identifier:
                keyid:7B:CF:5F:74:38:94:E6:B4:5E:B5:BC:33:52:DB:AE:64:64:58:65:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cd737608-8321-4248-8093-6c1db3c96df0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.52.0/24
                IPv6:
                  2602:81a:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:77:2d:bb:ec:f5:29:ca:26:73:91:37:7f:8c:63:c7:8f:14:
         ae:a2:6c:17:cb:c0:6a:83:82:c9:eb:b0:39:cb:4c:5d:5b:d5:
         17:30:96:ba:87:7a:da:bb:c4:5a:2b:b2:6e:31:a8:de:31:ed:
         6f:c4:72:c8:66:1a:f0:7d:a8:a3:89:ef:6d:0e:f4:a4:08:9b:
         29:b0:d0:48:0d:5c:01:61:d0:4a:84:e2:cd:f7:a0:a9:1d:a6:
         1c:73:8f:da:7e:50:8e:a7:25:48:dc:28:68:3c:c8:23:c9:1a:
         b2:fe:11:7b:4b:02:b0:47:fb:26:21:c0:db:69:58:76:48:e2:
         ca:14:00:43:62:79:1c:32:93:ea:2e:59:02:45:20:89:96:26:
         be:c4:1b:00:d6:f1:f5:27:96:af:bf:cd:4b:e2:c4:d9:45:a7:
         e2:33:28:ad:97:aa:5a:36:f4:3d:40:79:3f:23:6a:5c:e7:67:
         66:62:85:9f:f9:78:7b:fb:c5:a0:1d:c5:ce:a5:63:7f:16:d8:
         db:60:b5:fb:f1:f8:18:43:f6:bf:23:db:da:e9:3f:d1:ba:c8:
         52:73:dc:d2:7e:3e:c4:ef:0f:77:d5:8d:36:38:ac:6e:0f:23:
         7a:48:37:0c:1b:c4:2c:72:eb:9b:af:0b:97:c2:26:24:20:77:
         07:14:78:a9
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEf/b0fJUHQ2ZdCJrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q3Mzc2MDgtODMyMS00MjQ4LTgwOTMtNmMxZGIzYzk2
ZGYwMB4XDTI0MTEyNTE1MTUxOFoXDTI1MDIyMzE1MTUxOFowLzEtMCsGA1UEAxMk
NzgzNWViOTYtMjI0MS00MjA1LThiOGMtN2Y2ZTkwYjg4OWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UBstaPXB7mffk+RtT11bvxQRVVoJZFX62x0
IdA69klJNYiNkQ+eJhM95nVUl0+XjMCcJM+OPlcMdB0Aj0Ek+/h7rePy+7/WuODP
Xxf58q6FEBwiAh0wr+0agNMqBhvuo9IrCBsakGP7eEj0FLlj2A/3HNBGRdsMp3Xe
TyXsNLInEDoXZSp7slJYf8VK2/9znNLr6FYHhElMPbODQ05Nm3Yjh8MWZyHlW8wf
vT7zRpWO1mUWR02osmN2JgdhKfpsYYXEdjWjHUA4qLNeyajuhO9+eyRZ1cP0cD3o
r36CXen4FZRNOk0Blq0u9tRu3/ecaBiHFTIf5Re1VF/ytrZlkwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFCK7vrg82jMJ84kuH6pGAiEnwj5jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZDcz
NzYwOC04MzIxLTQyNDgtODA5My02YzFkYjNjOTZkZjAvNjE1OTRhYjEtMGNmYS0z
NzZjLTkwODEtNTVjODkxNDgyMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2Q3Mzc2MDgtODMyMS00MjQ4LTgw
OTMtNmMxZGIzYzk2ZGYwL2NkNzM3NjA4LTgzMjEtNDI0OC04MDkzLTZjMWRiM2M5
NmRmMC5jcmwwHwYDVR0jBBgwFoAUe89fdDiU5rRetbwzUtuuZGRYZdQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZDczNzYwOC04MzIxLTQyNDgtODA5My02YzFk
YjNjOTZkZjAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4E0MA8E
AgACMAkDBwQmAggaoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW3ctu+z1Kcomc5E3f4xjx48UrqJsF8vA
aoOCyeuwOctMXVvVFzCWuod62rvEWiuybjGo3jHtb8RyyGYa8H2oo4nvbQ70pAib
KbDQSA1cAWHQSoTizfegqR2mHHOP2n5QjqclSNwoaDzII8kasv4Re0sCsEf7JiHA
22lYdkjiyhQAQ2J5HDKT6i5ZAkUgiZYmvsQbANbx9SeWr7/NS+LE2UWn4jMorZeq
Wjb0PUB5PyNqXOdnZmKFn/l4e/vFoB3FzqVjfxbY22C1+/H4GEP2vyPb2uk/0brI
UnPc0n4+xO8Pd9WNNjisbg8jekg3DBvELHLrm68Ll8ImJCB3BxR4qQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 23:45:12 2024 by rpki-client on console-fra.rpki-client.org