Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bea5479-84c8-31ea-99a6-1739e63fc063.roa
File:                     4bea5479-84c8-31ea-99a6-1739e63fc063.roa (raw, json)
Hash identifier:          KtTd/LYtWpA81d4U4s9KMo9Xln4KI8SJ3Zn+qzs2YrU=
Subject key identifier:   54:36:54:E2:2B:A3:E9:8E:96:BE:AB:6B:91:41:2A:25:FD:EB:21:27
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DBB97294BCA003DE461F4B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bea5479-84c8-31ea-99a6-1739e63fc063.roa
Signing time:             Mon 13 May 2024 10:41:45 +0000
ROA not before:           Mon 13 May 2024 10:41:45 +0000
ROA not after:            Sun 11 Aug 2024 10:41:45 +0000
asID:                     16625
IP address blocks:        23.38.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:b9:72:94:bc:a0:03:de:46:1f:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 10:41:45 2024 GMT
            Not After : Aug 11 10:41:45 2024 GMT
        Subject: CN=3008e072-68b4-4644-a1af-e22887ca2749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:06:fa:31:5f:fa:7a:57:85:40:c6:e3:fe:
                    0e:99:03:cc:00:d1:5c:6e:19:ee:a8:a8:f3:38:1f:
                    ed:cc:76:b9:f9:60:1a:39:fd:87:f2:de:9f:fc:5e:
                    fd:93:9b:9b:9f:54:ee:f9:ff:8a:df:04:36:e5:ff:
                    48:9b:f2:61:94:8e:fc:f2:f3:78:cd:5b:f6:c9:5b:
                    e3:3a:7f:b7:2a:f1:b6:22:73:9a:95:82:88:15:6c:
                    ce:c5:50:3a:d1:dd:0e:6f:09:bb:9f:64:8d:40:de:
                    40:20:12:17:13:1f:7f:dc:40:62:e4:76:b0:39:98:
                    a5:07:99:6b:b5:61:64:d2:ba:01:d3:63:04:cf:85:
                    b7:63:c0:de:a3:9c:59:05:83:c3:68:62:9b:c8:c1:
                    79:d1:71:a4:5e:9c:e5:60:e3:61:03:c4:86:c0:5f:
                    5d:76:45:7d:98:44:96:d9:4e:c3:eb:76:3e:de:54:
                    0c:a5:28:6e:d5:e4:de:86:8f:fa:78:9e:43:8c:bb:
                    d9:16:6d:e0:ce:1a:a9:16:61:81:01:c2:84:74:ec:
                    5a:35:c2:bc:37:81:33:4f:0e:71:c6:16:8b:23:09:
                    53:90:63:a3:4f:1b:28:b9:49:ad:b8:e2:68:c8:75:
                    fd:16:0d:e7:8a:e9:4e:61:42:32:6a:1f:ce:1b:ae:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:36:54:E2:2B:A3:E9:8E:96:BE:AB:6B:91:41:2A:25:FD:EB:21:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bea5479-84c8-31ea-99a6-1739e63fc063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:46:43:47:3a:6b:92:23:e9:12:b9:b6:91:36:9a:81:24:7f:
         a1:ad:b3:a3:58:9b:02:98:8d:a1:f7:83:26:9e:2c:96:23:62:
         db:e4:05:2b:42:04:fa:5c:71:54:be:07:c5:be:75:32:c7:f2:
         34:c9:f1:e6:7a:02:7b:9e:8f:e8:34:55:5e:94:6d:cd:da:73:
         04:51:5a:d2:ea:97:d7:f1:25:98:b4:b8:43:9a:76:7a:30:75:
         3c:0a:b2:e5:41:46:23:af:fc:74:db:a1:ba:b7:56:04:eb:e4:
         2e:b9:28:79:b1:a9:85:77:72:e8:dc:34:51:d0:b3:8d:a3:2c:
         bb:41:97:89:0c:43:d3:f9:cd:66:98:b3:c6:7c:43:89:25:ba:
         76:cf:c6:55:61:fd:ff:21:63:95:fe:3f:b5:de:73:31:2a:ef:
         46:fc:5b:aa:bc:eb:43:c6:a0:42:7e:db:62:1d:10:e4:62:30:
         18:02:3a:b4:58:e9:5a:38:de:1c:6a:f7:07:82:01:2b:85:f2:
         41:f4:23:09:9c:6f:c3:f5:f9:3b:8e:54:22:71:75:2c:f0:01:
         53:16:ac:99:49:76:55:05:6c:ef:ca:84:f8:e4:2c:15:a9:d1:
         ab:a9:9c:89:6d:dc:38:39:7e:b5:21:27:4a:2a:ee:10:e2:40:
         7a:c7:6e:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXbuXKUvKAD3kYfS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxMzEwNDE0NVoXDTI0MDgxMTEwNDE0NVowLzEtMCsGA1UEAxMk
MzAwOGUwNzItNjhiNC00NjQ0LWExYWYtZTIyODg3Y2EyNzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg4G+jFf+npXhUDG4/4OmQPMANFcbhnuqKjz
OB/tzHa5+WAaOf2H8t6f/F79k5ubn1Tu+f+K3wQ25f9Im/JhlI788vN4zVv2yVvj
On+3KvG2InOalYKIFWzOxVA60d0Obwm7n2SNQN5AIBIXEx9/3EBi5HawOZilB5lr
tWFk0roB02MEz4W3Y8Deo5xZBYPDaGKbyMF50XGkXpzlYONhA8SGwF9ddkV9mESW
2U7D63Y+3lQMpShu1eTeho/6eJ5DjLvZFm3gzhqpFmGBAcKEdOxaNcK8N4EzTw5x
xhaLIwlTkGOjTxsouUmtuOJoyHX9Fg3niulOYUIyah/OG67+oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQ2VOIro+mOlr6ra5FBKiX96yEnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJlYTU0NzktODRjOC0z
MWVhLTk5YTYtMTczOWU2M2ZjMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyYwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJGQ0c6a5Ij6RK5tpE2moEkf6Gts6NYmwKYjaH3gyaeLJYjYtvkBStC
BPpccVS+B8W+dTLH8jTJ8eZ6Anuej+g0VV6Ubc3acwRRWtLql9fxJZi0uEOadnow
dTwKsuVBRiOv/HTbobq3VgTr5C65KHmxqYV3cujcNFHQs42jLLtBl4kMQ9P5zWaY
s8Z8Q4klunbPxlVh/f8hY5X+P7XeczEq70b8W6q860PGoEJ+22IdEORiMBgCOrRY
6Vo43hxq9weCASuF8kH0Iwmcb8P1+TuOVCJxdSzwAVMWrJlJdlUFbO/KhPjkLBWp
0aupnIlt3Dg5frUhJ0oq7hDiQHrHbn4=
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:16:10 2024 by rpki-client on console-ams.rpki-client.org