Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa
File:                     d0aa6771-362e-3935-947a-bfd5081d3828.roa (raw, json)
Hash identifier:          YMyao6kQJ7yovE2snhdfKT5JMytyPTAiRmyKREnN1io=
Subject key identifier:   7C:53:87:90:85:B4:E6:BF:F4:6E:64:58:E1:D5:0C:D0:5A:AE:52:26
Certificate issuer:       /CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74
Certificate serial:       010D0C9F43285848008BD0BBEB2AFCFC9A1B39E8
Authority key identifier: DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa
Signing time:             Tue 26 Nov 2024 00:48:36 +0000
ROA not before:           Tue 26 Nov 2024 00:48:36 +0000
ROA not after:            Mon 24 Feb 2025 00:48:36 +0000
asID:                     399340
IP address blocks:        23.180.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:8b:d0:bb:eb:2a:fc:fc:9a:1b:39:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74
        Validity
            Not Before: Nov 26 00:48:36 2024 GMT
            Not After : Feb 24 00:48:36 2025 GMT
        Subject: CN=d53903b6-6bd0-4e5b-a3e3-87cab23ef6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:37:12:e8:1f:53:3f:9c:ea:4c:04:b8:14:
                    23:9a:7b:a6:e8:c6:50:c4:bb:ef:fb:70:79:ef:64:
                    8e:3e:51:6b:ec:9e:46:d9:d9:1a:60:ee:6a:d0:92:
                    a5:1c:1e:ce:a6:19:74:56:43:20:43:7f:c0:aa:b9:
                    11:d1:89:92:6f:88:25:e0:59:fc:6c:9e:91:77:5a:
                    38:6a:44:5c:4a:a4:15:92:80:f2:ff:00:54:b5:6a:
                    3a:d5:50:ef:fb:82:49:8c:b7:db:ca:8a:73:08:d8:
                    78:eb:1b:34:36:4d:14:ed:f0:4e:07:c5:ef:fb:29:
                    29:ad:10:d2:93:11:7b:ec:09:c6:62:f6:5e:4c:36:
                    76:74:de:19:55:68:c9:54:4a:85:a9:43:be:53:18:
                    df:ca:be:1c:00:42:f2:15:0a:52:28:ef:0f:00:07:
                    95:f3:6f:26:8f:a7:a1:64:a4:67:1d:42:25:59:10:
                    22:46:01:69:3e:0f:65:49:4f:da:9a:f0:c4:0d:ab:
                    69:8c:5b:67:f3:b3:59:54:63:9a:f9:f9:b1:80:d8:
                    3d:21:71:86:e6:d0:b2:8e:cf:fd:19:28:d0:cc:36:
                    13:d3:e0:ae:41:64:13:b5:3e:14:2d:b3:0c:d9:d8:
                    db:83:d9:ee:90:a3:c0:b9:5f:60:e8:6c:e3:18:a5:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:53:87:90:85:B4:E6:BF:F4:6E:64:58:E1:D5:0C:D0:5A:AE:52:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/d0aa6771-362e-3935-947a-bfd5081d3828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl

            X509v3 Authority Key Identifier:
                keyid:DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:45:26:f5:1a:4f:43:d1:dc:2c:ad:f9:ab:97:82:8d:b4:9d:
         99:fc:13:f2:69:d5:e0:1f:d7:61:7d:2b:21:ef:fa:bf:9d:e4:
         89:65:9b:e8:db:aa:c0:77:28:e0:09:4b:66:a8:76:8c:82:75:
         3d:30:ac:8f:4c:c0:b6:80:d9:fd:38:c5:7e:67:5e:67:7e:4b:
         1f:5d:db:0e:29:6a:99:f7:54:d4:d5:2f:fd:97:6f:c6:09:26:
         35:b9:5e:4b:b2:33:ae:6d:05:34:26:5c:ad:5f:7e:0b:ca:8c:
         d3:f6:4d:36:f5:80:ae:15:52:a5:3a:6f:06:bf:ba:7e:43:64:
         f2:21:64:6e:68:9a:5b:23:8d:c2:f8:a4:e3:58:0c:37:13:c3:
         dc:50:65:0a:04:fe:43:96:16:71:e7:f1:bd:ba:4b:f3:0a:55:
         bc:72:f4:d4:c3:f6:9a:a2:e9:b5:1c:86:29:d1:46:20:b0:b9:
         dc:ac:51:77:8d:89:d1:0b:3b:09:f8:f0:02:cf:ec:7e:10:7e:
         0b:7f:4a:5c:43:5b:35:ee:83:db:c6:8b:09:5f:dd:68:9b:88:
         52:56:81:65:7c:8c:6f:3a:51:3a:56:b4:89:f4:0e:32:8c:d0:
         ff:87:53:16:78:3b:98:63:46:2f:d4:e9:84:2a:04:ae:a9:b8:
         42:61:1a:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAi9C76yr8/JobOegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhmYTg1MWYtMGM2Zi00NGEyLTgwMTctN2IwNjJmNGQ4
ZTc0MB4XDTI0MTEyNjAwNDgzNloXDTI1MDIyNDAwNDgzNlowLzEtMCsGA1UEAxMk
ZDUzOTAzYjYtNmJkMC00ZTViLWEzZTMtODdjYWIyM2VmNmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI03EugfUz+c6kwEuBQjmnum6MZQxLvv+3B5
72SOPlFr7J5G2dkaYO5q0JKlHB7Ophl0VkMgQ3/AqrkR0YmSb4gl4Fn8bJ6Rd1o4
akRcSqQVkoDy/wBUtWo61VDv+4JJjLfbyopzCNh46xs0Nk0U7fBOB8Xv+ykprRDS
kxF77AnGYvZeTDZ2dN4ZVWjJVEqFqUO+Uxjfyr4cAELyFQpSKO8PAAeV828mj6eh
ZKRnHUIlWRAiRgFpPg9lSU/amvDEDatpjFtn87NZVGOa+fmxgNg9IXGG5tCyjs/9
GSjQzDYT0+CuQWQTtT4ULbMM2djbg9nukKPAuV9g6GzjGKVVVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxTh5CFtOa/9G5kWOHVDNBarlImMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOGZh
ODUxZi0wYzZmLTQ0YTItODAxNy03YjA2MmY0ZDhlNzQvZDBhYTY3NzEtMzYyZS0z
OTM1LTk0N2EtYmZkNTA4MWQzODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjhmYTg1MWYtMGM2Zi00NGEyLTgw
MTctN2IwNjJmNGQ4ZTc0L2Y4ZmE4NTFmLTBjNmYtNDRhMi04MDE3LTdiMDYyZjRk
OGU3NC5jcmwwHwYDVR0jBBgwFoAU364p3EgjoHT15jh5JneG6KzQa54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOGZhODUxZi0wYzZmLTQ0YTItODAxNy03YjA2
MmY0ZDhlNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7QwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBFJvUaT0PR3Cyt+auXgo20nZn8E/Jp1eAf12F9KyHv+r+d5Illm+jb
qsB3KOAJS2aodoyCdT0wrI9MwLaA2f04xX5nXmd+Sx9d2w4papn3VNTVL/2Xb8YJ
JjW5XkuyM65tBTQmXK1ffgvKjNP2TTb1gK4VUqU6bwa/un5DZPIhZG5omlsjjcL4
pONYDDcTw9xQZQoE/kOWFnHn8b26S/MKVbxy9NTD9pqi6bUchinRRiCwudysUXeN
idELOwn48ALP7H4Qfgt/SlxDWzXug9vGiwlf3WibiFJWgWV8jG86UTpWtIn0DjKM
0P+HUxZ4O5hjRi/U6YQqBK6puEJhGq0=
-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org