Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/827f07b0-f3d1-3bca-bc21-59925be858fd.roa
File:                     827f07b0-f3d1-3bca-bc21-59925be858fd.roa (raw, json)
Hash identifier:          HBWgSDXkXMEI3mfmuHiuAKouWz3JovlgmcDwFd6h3q0=
Subject key identifier:   97:B4:38:63:A4:F4:60:CA:CA:59:93:69:30:8C:3B:A6:F9:6F:3C:8F
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584500F567BA9327115823B34D00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/827f07b0-f3d1-3bca-bc21-59925be858fd.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        23.239.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:67:ba:93:27:11:58:23:b3:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=eaced762-90f3-4830-8422-002b7711e8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:27:99:56:87:7b:3e:1c:d3:5b:ad:cf:7e:da:
                    08:e3:fa:05:64:27:c9:c3:e3:66:77:55:88:fe:a4:
                    c1:06:df:e9:12:2d:ca:ca:c2:88:34:5d:f9:b9:b9:
                    57:48:e4:9b:7b:2a:15:f5:6a:5a:bc:15:c7:f0:47:
                    fc:31:84:86:47:11:3a:a0:ea:a7:b6:44:ea:a0:d6:
                    a8:47:51:0e:cf:d0:31:a9:c6:9e:2d:e6:fc:99:01:
                    92:5b:3f:96:fd:6c:2e:d2:10:de:b6:5b:e6:c2:2a:
                    08:1b:28:ab:dc:a6:09:c3:33:a1:f6:81:30:1c:01:
                    ad:72:49:4b:ff:78:26:b1:c6:c5:42:2d:6d:bb:0f:
                    78:7c:8c:4e:5a:d7:99:77:be:91:85:ff:85:ac:92:
                    63:21:29:fc:fa:46:ce:c0:0c:2a:40:c5:21:fe:c9:
                    6d:c9:a7:26:03:66:4f:ec:a1:dd:ab:dd:f0:a3:ba:
                    28:51:5f:d4:ac:12:d2:ab:02:67:69:2c:b3:da:ec:
                    8d:2c:ac:ba:22:df:34:55:f3:57:10:57:4d:f8:c7:
                    9d:c6:da:b1:d5:93:45:5b:32:24:cd:0c:4d:a3:51:
                    fc:ba:0a:86:f4:4f:1f:a3:1e:36:72:2e:75:89:4a:
                    c4:d9:3a:6d:4f:3a:87:69:16:70:e2:f1:df:25:0d:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B4:38:63:A4:F4:60:CA:CA:59:93:69:30:8C:3B:A6:F9:6F:3C:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/827f07b0-f3d1-3bca-bc21-59925be858fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:13:e6:49:54:76:44:b4:6d:61:e6:6b:78:b6:15:59:65:cf:
         8e:36:32:7c:03:91:68:6c:cb:26:15:bb:f9:58:09:9b:14:9d:
         d0:f1:00:09:83:b2:47:d0:74:3f:2f:94:7a:69:f6:ef:ea:d4:
         5f:68:d4:a5:a1:3b:73:aa:06:23:77:49:ac:73:de:4e:1e:70:
         4c:49:c1:31:02:ea:41:bd:52:83:10:3d:e5:4d:7e:0e:59:ae:
         c3:ca:a4:a8:fb:eb:9c:e2:c4:59:c9:da:c4:44:88:55:71:b6:
         5a:f3:f4:69:d0:2f:04:42:bb:11:81:82:2d:81:fd:c3:40:6e:
         6e:d4:8b:ba:56:d1:36:ed:6d:99:8b:b2:30:cd:b3:9d:50:f8:
         c0:27:dd:cf:3a:56:40:24:24:83:c8:18:fb:3c:d1:c3:74:7c:
         96:23:ed:74:71:4d:be:a5:2d:7d:01:fb:4e:f4:f8:51:1b:30:
         12:51:71:b5:d4:1a:4d:ac:0f:d0:03:1c:36:d1:f5:c1:e5:eb:
         22:8e:ba:11:d4:c8:73:dc:e0:be:4f:14:e1:3e:45:ae:bd:17:
         1f:79:31:ca:21:3c:03:a1:9d:ca:5b:b9:cd:4b:ef:2d:18:b3:
         b6:8f:a2:dd:9a:13:fd:b3:cf:cb:22:92:dc:21:cf:9c:ee:1d:
         c8:8c:b8:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUA9We6kycRWCOzTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI0MDIyNTAyMDAyNloXDTI0MDUyNTAxMDAyNlowLzEtMCsGA1UEAxMk
ZWFjZWQ3NjItOTBmMy00ODMwLTg0MjItMDAyYjc3MTFlOGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yeZVod7PhzTW63PftoI4/oFZCfJw+Nmd1WI
/qTBBt/pEi3KysKINF35ublXSOSbeyoV9WpavBXH8Ef8MYSGRxE6oOqntkTqoNao
R1EOz9AxqcaeLeb8mQGSWz+W/Wwu0hDetlvmwioIGyir3KYJwzOh9oEwHAGtcklL
/3gmscbFQi1tuw94fIxOWteZd76Rhf+FrJJjISn8+kbOwAwqQMUh/sltyacmA2ZP
7KHdq93wo7ooUV/UrBLSqwJnaSyz2uyNLKy6It80VfNXEFdN+Medxtqx1ZNFWzIk
zQxNo1H8ugqG9E8fox42ci51iUrE2TptTzqHaRZw4vHfJQ1hPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJe0OGOk9GDKylmTaTCMO6b5bzyPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODI3ZjA3YjAtZjNkMS0z
YmNhLWJjMjEtNTk5MjViZTg1OGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANQT5klUdkS0bWHma3i2FVllz442MnwDkWhsyyYVu/lYCZsUndDxAAmD
skfQdD8vlHpp9u/q1F9o1KWhO3OqBiN3Saxz3k4ecExJwTEC6kG9UoMQPeVNfg5Z
rsPKpKj765zixFnJ2sREiFVxtlrz9GnQLwRCuxGBgi2B/cNAbm7Ui7pW0TbtbZmL
sjDNs51Q+MAn3c86VkAkJIPIGPs80cN0fJYj7XRxTb6lLX0B+070+FEbMBJRcbXU
Gk2sD9ADHDbR9cHl6yKOuhHUyHPc4L5PFOE+Ra69Fx95McohPAOhncpbuc1L7y0Y
s7aPot2aE/2zz8siktwhz5zuHciMuNE=
-----END CERTIFICATE-----
Generated at Wed May 1 23:05:56 2024 by rpki-client on console-ams.rpki-client.org