Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6a95303c-703a-3f8f-957c-4acc3bd4c7d2.roa
File:                     6a95303c-703a-3f8f-957c-4acc3bd4c7d2.roa (raw, json)
Hash identifier:          d+h0jBsPY1aG4yUMpraDUqssj7JxZjheViHmw03rltY=
Subject key identifier:   17:9D:1E:C9:79:31:4E:05:D0:5B:74:EC:20:89:E8:98:70:06:C5:C0
Certificate issuer:       /CN=6b40b2f9-8053-4405-96a0-dd415cb12c1a
Certificate serial:       010D0C9F43285847792BA786EC6B90ECEE56E280
Authority key identifier: D2:DA:F2:C4:09:2B:FC:A1:08:8D:75:32:29:8D:BE:F2:04:EB:D3:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6a95303c-703a-3f8f-957c-4acc3bd4c7d2.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     397672
IP address blocks:        23.173.224.0/23 maxlen: 24
                          2602:fe06::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6b40b2f9-8053-4405-96a0-dd415cb12c1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6b40b2f9-8053-4405-96a0-dd415cb12c1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:a7:86:ec:6b:90:ec:ee:56:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b40b2f9-8053-4405-96a0-dd415cb12c1a
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=0bb4e607-4370-4f9d-9e6d-77cca8803b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:33:d5:ad:84:eb:d8:cd:98:e9:c0:ea:5a:0c:
                    2d:63:29:40:b3:a8:cc:cb:03:cd:e6:de:7f:a0:48:
                    92:15:a8:1e:af:19:aa:91:ff:17:86:d5:c4:64:5a:
                    0d:5d:e4:f9:9f:02:81:8a:67:f0:23:bf:47:c8:d7:
                    61:e6:3b:54:71:46:5b:3d:34:3e:5c:23:a5:36:d8:
                    c9:e4:79:fd:45:40:d9:77:c9:c1:70:4b:97:4b:01:
                    7f:cf:7a:a7:e9:be:7c:83:8c:c2:0f:58:09:22:bc:
                    af:1e:3b:c7:dc:a2:2a:08:e3:66:c6:d8:18:c3:a3:
                    b9:e2:bd:94:89:ac:f1:f0:dd:0c:8e:1a:74:b7:05:
                    e0:62:5c:05:a7:a6:c4:50:69:3e:13:53:44:0f:99:
                    d2:12:04:ef:dd:e6:b9:3e:43:60:82:32:52:43:9a:
                    98:bd:2b:6b:90:94:2d:fe:8b:86:ce:e8:4f:ea:eb:
                    20:4f:f6:55:5e:95:da:71:56:ee:d6:c7:b4:e2:f9:
                    a9:ce:af:99:dd:70:cf:71:67:8d:b0:64:71:53:6b:
                    25:a5:12:54:a1:be:05:7e:25:af:f4:23:24:15:b5:
                    28:2d:76:38:5f:02:1b:33:92:e7:56:88:32:a8:07:
                    a7:93:12:d7:1a:aa:d8:f8:dc:dc:1a:fa:ae:ba:3d:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9D:1E:C9:79:31:4E:05:D0:5B:74:EC:20:89:E8:98:70:06:C5:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6a95303c-703a-3f8f-957c-4acc3bd4c7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6b40b2f9-8053-4405-96a0-dd415cb12c1a.crl

            X509v3 Authority Key Identifier:
                keyid:D2:DA:F2:C4:09:2B:FC:A1:08:8D:75:32:29:8D:BE:F2:04:EB:D3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.224.0/23
                IPv6:
                  2602:fe06::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:27:03:58:47:54:30:84:00:55:2c:ea:b5:58:06:bd:89:94:
         90:54:35:5c:a2:23:a2:4b:00:4b:b9:8f:7d:63:f7:6b:a5:6b:
         2f:86:14:35:c2:09:88:1e:42:25:95:da:fa:a3:a4:f0:ab:03:
         dd:89:70:67:cf:1d:14:fa:f3:dd:ae:ac:58:31:b8:52:57:74:
         8b:7c:46:ee:fd:e2:b0:7b:f0:a7:14:f6:8f:4f:ba:68:09:e1:
         c8:65:06:11:eb:5b:cd:23:76:f0:2a:73:a9:ad:f7:24:16:8e:
         61:a9:67:08:aa:35:68:6f:d6:a4:77:37:59:34:51:49:46:99:
         e7:60:c9:ad:05:76:84:5f:25:c8:83:60:af:d8:62:b1:88:57:
         67:b2:97:c0:1e:3f:46:a2:08:69:ad:7b:ea:58:47:3c:e5:cf:
         63:f5:54:7a:21:9c:72:96:45:79:58:84:cb:75:85:89:a6:39:
         8a:51:e7:6a:0f:a5:80:0a:6b:80:01:ba:68:f6:66:9d:48:4e:
         25:86:6e:86:be:89:39:8d:bc:16:c0:51:3a:32:09:3b:45:4e:
         c9:20:eb:5f:49:1e:b2:e9:ee:bd:1f:a7:a3:3e:29:22:f1:3c:
         c6:0a:0f:d0:62:ff:4b:a3:d3:11:fd:c9:65:f0:12:c3:fe:a9:
         27:da:d5:f1
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEd5K6eG7GuQ7O5W4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmI0MGIyZjktODA1My00NDA1LTk2YTAtZGQ0MTVjYjEy
YzFhMB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
MGJiNGU2MDctNDM3MC00ZjlkLTllNmQtNzdjY2E4ODAzYjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DPVrYTr2M2Y6cDqWgwtYylAs6jMywPN5t5/
oEiSFagerxmqkf8XhtXEZFoNXeT5nwKBimfwI79HyNdh5jtUcUZbPTQ+XCOlNtjJ
5Hn9RUDZd8nBcEuXSwF/z3qn6b58g4zCD1gJIryvHjvH3KIqCONmxtgYw6O54r2U
iazx8N0Mjhp0twXgYlwFp6bEUGk+E1NED5nSEgTv3ea5PkNggjJSQ5qYvStrkJQt
/ouGzuhP6usgT/ZVXpXacVbu1se04vmpzq+Z3XDPcWeNsGRxU2slpRJUob4FfiWv
9CMkFbUoLXY4XwIbM5LnVogyqAenkxLXGqrY+NzcGvquuj2cOQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFBedHsl5MU4F0Ft07CCJ6JhwBsXAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YjQw
YjJmOS04MDUzLTQ0MDUtOTZhMC1kZDQxNWNiMTJjMWEvNmE5NTMwM2MtNzAzYS0z
ZjhmLTk1N2MtNGFjYzNiZDRjN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmI0MGIyZjktODA1My00NDA1LTk2
YTAtZGQ0MTVjYjEyYzFhLzZiNDBiMmY5LTgwNTMtNDQwNS05NmEwLWRkNDE1Y2Ix
MmMxYS5jcmwwHwYDVR0jBBgwFoAU0tryxAkr/KEIjXUyKY2+8gTr04UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82YjQwYjJmOS04MDUzLTQ0MDUtOTZhMC1kZDQx
NWNiMTJjMWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF63gMA4E
AgACMAgDBgQmAv4GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXJwNYR1QwhABVLOq1WAa9iZSQVDVcoiOi
SwBLuY99Y/drpWsvhhQ1wgmIHkIlldr6o6TwqwPdiXBnzx0U+vPdrqxYMbhSV3SL
fEbu/eKwe/CnFPaPT7poCeHIZQYR61vNI3bwKnOprfckFo5hqWcIqjVob9akdzdZ
NFFJRpnnYMmtBXaEXyXIg2Cv2GKxiFdnspfAHj9GoghprXvqWEc85c9j9VR6IZxy
lkV5WITLdYWJpjmKUedqD6WACmuAAbpo9madSE4lhm6Gvok5jbwWwFE6Mgk7RU7J
IOtfSR6y6e69H6ejPiki8TzGCg/QYv9Lo9MR/cll8BLD/qkn2tXx
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:08 2024 by rpki-client on console-ams.rpki-client.org