Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa
File:                     09a572b8-7960-3b89-a1a8-7f9e35951515.roa (raw, json)
Hash identifier:          HtTIJjZRhf9MudwJEcFx1cRoPAFkc/8SiSHxndI7SNY=
Subject key identifier:   24:A8:06:54:0E:FA:D5:E0:EA:D8:13:FA:26:4C:D9:A6:EC:64:7C:1B
Certificate issuer:       /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial:       010D0C9F43285848090FB5543C7FB45B8029A040
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     11831
IP address blocks:        23.111.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b5:54:3c:7f:b4:5b:80:29:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=887c9402-5362-4647-bdb5-3a25b2c0cdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:dc:08:5b:61:e1:c7:9d:70:27:24:4d:88:
                    d5:1c:78:bc:47:51:05:79:ce:3f:75:2e:7d:0c:51:
                    6b:48:9f:75:96:f2:93:60:05:3a:ae:c2:91:8d:09:
                    47:eb:29:25:39:99:b8:ae:36:8f:c5:56:4b:e5:fa:
                    4f:d9:10:b4:ad:69:5b:ba:62:43:58:3f:ee:83:e4:
                    62:6f:9a:73:e4:9c:1c:53:52:5e:92:ff:b6:6d:c5:
                    70:57:6b:04:0a:87:e1:02:ba:84:7b:6b:cd:ca:4c:
                    4e:36:31:7b:ea:f2:db:07:77:16:5e:a4:54:af:14:
                    ec:f9:2c:22:6f:29:d9:ab:a7:a3:39:2f:c5:7a:04:
                    cd:fb:40:8b:0e:a2:a6:25:44:59:a1:78:66:e9:14:
                    9d:df:3f:73:81:b9:37:d4:6b:6e:ec:c4:88:98:51:
                    a2:60:3a:d0:92:3b:3c:36:e0:f4:72:c1:3c:cb:c2:
                    4a:66:95:cd:46:39:23:fa:a6:09:6d:56:7f:d2:5e:
                    7e:28:a5:08:67:81:36:a3:c6:c1:fe:72:58:c1:cf:
                    8b:62:ca:de:b8:c9:92:48:fe:41:64:7e:b7:4a:da:
                    57:cd:38:e0:c0:b1:01:b1:a4:94:7d:12:c8:70:45:
                    fd:37:db:63:d8:02:25:4f:d7:a2:7b:93:4c:6e:3a:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:06:54:0E:FA:D5:E0:EA:D8:13:FA:26:4C:D9:A6:EC:64:7C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl

            X509v3 Authority Key Identifier:
                keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.111.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:82:13:56:72:59:ce:66:66:af:92:4f:1e:0d:ba:aa:26:82:
         f6:2b:08:aa:17:e4:22:cc:52:6d:4b:40:ab:b2:fd:de:3f:ae:
         d2:5c:9e:ea:6e:88:1d:5e:45:4a:3d:97:69:b8:82:f3:a2:f5:
         12:66:0c:0d:a5:f0:23:f4:f7:79:d4:99:b1:3d:79:8b:33:79:
         e4:31:dd:f5:c8:43:fd:9d:8f:bd:69:2d:50:1a:8f:d3:41:ff:
         98:84:ba:de:e5:b0:a0:2c:b8:2d:e9:ff:dc:93:01:44:bf:42:
         6b:ad:2c:48:92:6a:dc:e3:92:16:e0:b9:32:00:3c:7a:a1:19:
         c7:6b:29:1a:8b:d8:de:b5:e7:f8:25:ad:92:aa:d2:c1:0f:d2:
         99:bd:b4:3c:58:70:23:92:a2:18:5e:c7:c6:23:d9:07:5d:6b:
         93:4d:a9:93:7c:07:d6:d1:c8:7e:49:09:1b:97:f5:2e:56:d9:
         fd:fb:af:65:9c:0a:1a:9a:4e:2a:20:1d:cf:3c:42:49:e4:f9:
         56:ab:7b:1a:65:05:79:a0:74:64:bb:f5:1b:19:db:ae:4e:b4:
         88:f9:83:34:4f:2b:53:12:3f:3c:ee:9c:bd:de:91:4f:02:4c:
         fc:f2:ef:75:f0:48:2c:ab:76:f4:bf:ed:1a:41:93:e2:ae:92:
         10:62:5c:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7VUPH+0W4ApoEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBhZWQ3NTgtODQ3Yi00ODUzLTlmY2UtZjA0NTFiNWZh
MmIzMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
ODg3Yzk0MDItNTM2Mi00NjQ3LWJkYjUtM2EyNWIyYzBjZGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/jcCFth4cedcCckTYjVHHi8R1EFec4/dS59
DFFrSJ91lvKTYAU6rsKRjQlH6yklOZm4rjaPxVZL5fpP2RC0rWlbumJDWD/ug+Ri
b5pz5JwcU1Jekv+2bcVwV2sECofhArqEe2vNykxONjF76vLbB3cWXqRUrxTs+Swi
bynZq6ejOS/FegTN+0CLDqKmJURZoXhm6RSd3z9zgbk31Gtu7MSImFGiYDrQkjs8
NuD0csE8y8JKZpXNRjkj+qYJbVZ/0l5+KKUIZ4E2o8bB/nJYwc+LYsreuMmSSP5B
ZH63StpXzTjgwLEBsaSUfRLIcEX9N9tj2AIlT9eie5NMbjp/0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSoBlQO+tXg6tgT+iZM2absZHwbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMGFl
ZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1MWI1ZmEyYjMvMDlhNTcyYjgtNzk2MC0z
Yjg5LWExYTgtN2Y5ZTM1OTUxNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDBhZWQ3NTgtODQ3Yi00ODUzLTlm
Y2UtZjA0NTFiNWZhMmIzL2QwYWVkNzU4LTg0N2ItNDg1My05ZmNlLWYwNDUxYjVm
YTJiMy5jcmwwHwYDVR0jBBgwFoAUJilJP/OCupL6yCxvq0gH82UlXCcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kMGFlZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1
MWI1ZmEyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF29PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECCE1ZyWc5mZq+STx4NuqomgvYrCKoX5CLMUm1LQKuy/d4/rtJcnupu
iB1eRUo9l2m4gvOi9RJmDA2l8CP093nUmbE9eYszeeQx3fXIQ/2dj71pLVAaj9NB
/5iEut7lsKAsuC3p/9yTAUS/QmutLEiSatzjkhbguTIAPHqhGcdrKRqL2N615/gl
rZKq0sEP0pm9tDxYcCOSohhex8Yj2Qdda5NNqZN8B9bRyH5JCRuX9S5W2f37r2Wc
ChqaTiogHc88Qknk+VarexplBXmgdGS79RsZ265OtIj5gzRPK1MSPzzunL3ekU8C
TPzy73XwSCyrdvS/7RpBk+KukhBiXHI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:45 2025 by rpki-client