Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa
File:                     ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json)
Hash identifier:          P9zK7I75Bt8MALgwBDAH3u/oj+TxDMNjb7qx7/S8JZk=
Subject key identifier:   86:2D:8A:16:22:DD:B3:CD:1F:48:BC:4F:E0:87:1B:7C:AD:D8:F2:8A
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F432858474420B227FAC4ED31C5082000
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     16584
IP address blocks:        23.140.98.0/24 maxlen: 24
                          172.111.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b2:27:fa:c4:ed:31:c5:08:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=1b49b5c1-5653-40a1-8d4f-f546005fa1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5c:1f:ed:95:5b:03:39:23:60:7d:65:f5:37:
                    63:d1:0e:d6:b2:08:7c:fa:7d:d7:d8:30:f6:41:a7:
                    22:00:9d:aa:d5:27:a2:7d:10:a3:4a:5c:38:8e:a9:
                    3d:05:c6:a6:e7:34:28:ff:b5:3c:59:b2:56:75:b0:
                    2f:af:d6:d8:ea:c3:db:84:89:84:fc:bd:ae:be:e6:
                    a3:42:1f:39:25:6c:e5:58:1d:66:d3:6a:91:7b:5f:
                    b3:a0:bc:8f:56:58:61:05:4e:44:3f:b1:00:fb:40:
                    94:ea:f2:5d:65:48:7c:3a:f9:3c:33:08:8e:bf:16:
                    90:77:d5:c9:da:ee:c9:f4:fa:41:ff:9a:0e:44:3f:
                    56:13:f9:1f:7a:cc:2b:6c:8d:cf:d8:85:fd:21:52:
                    dc:5f:f3:30:7a:a1:cf:ba:09:2f:ab:03:04:0e:ce:
                    91:f4:17:dc:e9:ae:c2:50:af:5c:c6:47:db:b7:74:
                    e2:4b:32:7a:7e:ca:78:9a:29:79:02:57:c4:7e:1e:
                    c6:2d:d9:44:e7:a5:34:b1:e4:e7:57:9e:c7:f7:db:
                    fb:86:e9:67:9f:fe:c1:5c:44:1c:4f:ba:f7:d2:8a:
                    23:93:2d:4b:d2:a6:34:a1:11:6e:a4:6f:2b:e2:c2:
                    10:56:0e:1d:32:84:30:cf:e4:49:d1:cf:2f:22:81:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2D:8A:16:22:DD:B3:CD:1F:48:BC:4F:E0:87:1B:7C:AD:D8:F2:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.98.0/24
                  172.111.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:f2:23:e9:07:91:7c:f3:d4:a9:6f:93:53:c2:aa:d7:92:
         4e:0e:1f:7a:aa:43:1d:60:a6:09:b0:3f:b0:70:4e:f0:e4:51:
         5c:44:47:72:33:b9:81:e5:cb:66:7f:a9:ed:19:76:52:34:4c:
         0a:9c:d1:96:15:7f:83:cb:06:8e:68:e2:94:4c:0b:a1:d3:f6:
         12:ba:73:c5:e9:4e:f5:3b:4e:ed:ed:49:ae:7b:e3:72:c5:be:
         a6:61:dc:e6:61:76:0b:c0:8c:03:e4:fa:1d:30:ac:4c:36:d6:
         aa:a8:96:1e:1c:fb:a7:73:f7:c9:7c:ec:be:c5:55:9b:c6:e9:
         26:38:25:b8:3c:ce:09:23:5a:71:b8:85:15:75:e1:ac:d5:9b:
         7e:2b:0b:d3:fa:c2:99:ab:84:b4:f1:f0:8e:05:48:ae:29:e2:
         29:28:1f:b0:9c:d0:89:e7:58:a9:e4:bf:16:8d:e8:5a:2a:e0:
         e1:66:97:c5:92:fe:cc:40:41:e2:22:46:79:ce:ec:63:e9:25:
         d0:8e:20:18:52:cb:3c:ae:91:89:0b:9d:7c:48:8d:ca:54:bd:
         03:ed:16:e2:e9:cb:e2:c6:cf:a8:1d:3a:8d:8d:e9:ee:a1:7a:
         85:ac:87:29:b1:02:48:14:c8:92:25:3b:22:b8:ac:b9:36:ef:
         d4:6e:24:8d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdEILIn+sTtMcUIIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1
NmRiMB4XDTI0MDkxOTEzMDA0MloXDTI0MTIxODE0MDA0MlowLzEtMCsGA1UEAxMk
MWI0OWI1YzEtNTY1My00MGExLThkNGYtZjU0NjAwNWZhMWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFwf7ZVbAzkjYH1l9Tdj0Q7Wsgh8+n3X2DD2
QaciAJ2q1SeifRCjSlw4jqk9Bcam5zQo/7U8WbJWdbAvr9bY6sPbhImE/L2uvuaj
Qh85JWzlWB1m02qRe1+zoLyPVlhhBU5EP7EA+0CU6vJdZUh8Ovk8MwiOvxaQd9XJ
2u7J9PpB/5oORD9WE/kfeswrbI3P2IX9IVLcX/MweqHPugkvqwMEDs6R9Bfc6a7C
UK9cxkfbt3TiSzJ6fsp4mil5AlfEfh7GLdlE56U0seTnV57H99v7hulnn/7BXEQc
T7r30oojky1L0qY0oRFupG8r4sIQVg4dMoQwz+RJ0c8vIoFR1QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIYtihYi3bPNH0i8T+CHG3yt2PKKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4
NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvYmE1OGI3ZWYtZWUyYS0z
MWIxLTk1MWYtNmU3Yjc5YTUyZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi
NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy
NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj
NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4xiAwQC
rG8MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFLI8iPpB5F889Spb5NTwqrXkk4OH3qqQx1gpgmwP7BwTvDk
UVxER3IzuYHly2Z/qe0ZdlI0TAqc0ZYVf4PLBo5o4pRMC6HT9hK6c8XpTvU7Tu3t
Sa5743LFvqZh3OZhdgvAjAPk+h0wrEw21qqolh4c+6dz98l87L7FVZvG6SY4Jbg8
zgkjWnG4hRV14azVm34rC9P6wpmrhLTx8I4FSK4p4ikoH7Cc0InnWKnkvxaN6Foq
4OFml8WS/sxAQeIiRnnO7GPpJdCOIBhSyzyukYkLnXxIjcpUvQPtFuLpy+LGz6gd
Oo2N6e6heoWshymxAkgUyJIlOyK4rLk279RuJI0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:49 2024 by rpki-client on console-ams.rpki-client.org