Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dba2df2-3b03-3064-81d3-2f4c8dce355a.roa
File:                     6dba2df2-3b03-3064-81d3-2f4c8dce355a.roa (raw, json)
Hash identifier:          eQUrnSZveSfcNvBIqifSEXOCalGwgPM6zLyEei6I/DQ=
Subject key identifier:   E3:8C:51:0F:17:D2:DE:0E:A4:ED:2A:48:3F:3A:3F:5E:2C:D7:CD:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E19D5161DEA44C8B6A158FE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dba2df2-3b03-3064-81d3-2f4c8dce355a.roa
Signing time:             Wed 15 May 2024 13:19:56 +0000
ROA not before:           Wed 15 May 2024 13:19:56 +0000
ROA not after:            Tue 13 Aug 2024 13:19:56 +0000
asID:                     20940
IP address blocks:        23.49.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:9d:51:61:de:a4:4c:8b:6a:15:8f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 13:19:56 2024 GMT
            Not After : Aug 13 13:19:56 2024 GMT
        Subject: CN=872a04e6-42b3-4164-a95b-bd2c02d3522b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:82:76:51:18:75:7f:f4:c6:0a:64:cf:3c:
                    4a:56:f6:54:ef:3b:75:7e:b3:88:56:b2:45:c2:aa:
                    6e:b2:39:0b:06:a7:1a:66:5a:44:73:38:46:0b:83:
                    1f:fc:d4:bb:d0:ff:59:5c:31:49:81:8a:a3:30:00:
                    c3:3a:f7:25:15:c3:19:e6:8a:47:49:91:93:33:01:
                    cf:07:3c:ed:0c:f0:db:c1:ed:55:eb:ee:bb:c4:ee:
                    d2:ce:5e:2d:aa:9b:8f:2d:f0:52:61:e2:27:48:c5:
                    39:3a:bb:22:7a:ae:81:5e:84:48:16:e0:c0:fb:5f:
                    b8:e7:f0:8d:a9:4e:5b:ab:f0:9e:27:2f:33:19:b4:
                    ff:f9:67:af:5a:ec:df:d9:f0:ff:06:a5:ac:70:43:
                    a8:21:f0:1d:40:36:63:4d:90:06:12:82:8a:ff:9c:
                    14:b0:43:3e:ba:da:fa:b2:4c:9e:da:59:fb:0f:c8:
                    d6:a2:f9:c5:2f:93:0f:45:c8:72:0f:01:40:c6:2b:
                    ac:d4:fe:e3:c9:d4:d7:74:e4:3b:d8:29:64:8b:6f:
                    56:24:76:86:e3:6a:78:4a:7f:5e:52:8f:58:d4:24:
                    8a:0b:4a:21:74:16:ce:58:f3:99:1b:5f:3c:5d:9d:
                    14:0b:5d:7d:b7:1c:7f:7d:c5:09:82:f5:78:80:8b:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:51:0F:17:D2:DE:0E:A4:ED:2A:48:3F:3A:3F:5E:2C:D7:CD:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dba2df2-3b03-3064-81d3-2f4c8dce355a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.49.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:87:fc:54:99:b4:df:c0:da:d2:09:1c:6e:76:1c:b0:48:
         6c:7a:61:be:78:9d:d4:bd:8c:cc:d1:5c:12:1e:01:d6:ea:8a:
         20:74:bc:f0:94:6e:89:4b:e2:e7:bb:07:35:00:82:47:42:cd:
         c3:e1:81:b4:a6:4c:8e:6a:29:1d:f0:21:ae:1e:cc:2c:db:98:
         35:2d:ba:32:4d:30:66:85:bd:98:19:f4:97:63:7d:5f:17:e4:
         59:ff:04:ed:be:cb:4b:1a:da:b8:81:41:65:87:66:1f:23:31:
         ee:27:93:f2:b9:7b:f4:ea:d5:f8:6d:e1:f1:c6:84:52:c6:42:
         00:22:42:6d:13:74:df:6f:39:0b:b6:20:96:8d:a6:a0:de:5e:
         c5:3b:df:05:16:e9:b5:2a:5c:9c:06:f5:04:4b:df:dc:63:97:
         4d:86:f8:87:d3:e7:6f:f0:b8:ec:c8:18:89:df:d8:93:06:6a:
         a9:3d:c2:e4:46:e0:b2:da:d1:e8:a9:12:88:15:ee:ae:19:b5:
         65:97:d4:e3:c3:4b:75:c4:17:3c:9c:b3:09:c8:02:0a:ca:1f:
         19:4f:ad:af:57:d0:ce:77:67:28:7b:ea:36:f8:74:19:a2:9c:
         1b:7a:cf:ba:e5:e7:63:f3:96:34:2f:d7:af:55:7c:b7:6f:4a:
         6a:4b:d0:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXhnVFh3qRMi2oVj+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxNTEzMTk1NloXDTI0MDgxMzEzMTk1NlowLzEtMCsGA1UEAxMk
ODcyYTA0ZTYtNDJiMy00MTY0LWE5NWItYmQyYzAyZDM1MjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU+CdlEYdX/0xgpkzzxKVvZU7zt1frOIVrJF
wqpusjkLBqcaZlpEczhGC4Mf/NS70P9ZXDFJgYqjMADDOvclFcMZ5opHSZGTMwHP
BzztDPDbwe1V6+67xO7Szl4tqpuPLfBSYeInSMU5Orsieq6BXoRIFuDA+1+45/CN
qU5bq/CeJy8zGbT/+WevWuzf2fD/BqWscEOoIfAdQDZjTZAGEoKK/5wUsEM+utr6
skye2ln7D8jWovnFL5MPRchyDwFAxius1P7jydTXdOQ72Clki29WJHaG42p4Sn9e
Uo9Y1CSKC0ohdBbOWPOZG188XZ0UC119txx/fcUJgvV4gIuPxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOMUQ8X0t4OpO0qSD86P14s180eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmRiYTJkZjItM2IwMy0z
MDY0LTgxZDMtMmY0YzhkY2UzNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzFiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnJh/xUmbTfwNrSCRxudhywSGx6Yb54ndS9jMzRXBIeAdbqiiB0vPCU
bolL4ue7BzUAgkdCzcPhgbSmTI5qKR3wIa4ezCzbmDUtujJNMGaFvZgZ9JdjfV8X
5Fn/BO2+y0sa2riBQWWHZh8jMe4nk/K5e/Tq1fht4fHGhFLGQgAiQm0TdN9vOQu2
IJaNpqDeXsU73wUW6bUqXJwG9QRL39xjl02G+IfT52/wuOzIGInf2JMGaqk9wuRG
4LLa0eipEogV7q4ZtWWX1OPDS3XEFzycswnIAgrKHxlPra9X0M53Zyh76jb4dBmi
nBt6z7rl52PzljQv169VfLdvSmpL0Nc=
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:39:04 2024 by rpki-client on console-fra.rpki-client.org