Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903197c9-cdb7-354b-88c0-233ae6bec329.roa
File:                     903197c9-cdb7-354b-88c0-233ae6bec329.roa (raw, json)
Hash identifier:          RqZPuliWeaF6WenC6EeLKANpULd8S8hJsRwHtJ+RIrc=
Subject key identifier:   86:93:B4:B3:77:87:A2:13:D6:71:25:6F:F3:9B:57:6D:5F:54:5C:67
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E6C3BB721849898A3376D900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903197c9-cdb7-354b-88c0-233ae6bec329.roa
Signing time:             Fri 17 May 2024 09:36:22 +0000
ROA not before:           Fri 17 May 2024 09:36:22 +0000
ROA not after:            Thu 15 Aug 2024 09:36:22 +0000
asID:                     20940
IP address blocks:        23.52.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e6:c3:bb:72:18:49:89:8a:33:76:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 09:36:22 2024 GMT
            Not After : Aug 15 09:36:22 2024 GMT
        Subject: CN=dcde230e-1e29-48db-a0bc-34bd90041f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:00:bb:17:eb:cb:ab:77:d5:f0:02:ae:96:
                    6c:a6:10:5c:7c:93:91:48:84:f6:b4:9f:f8:07:62:
                    c5:e8:9a:22:ca:dd:42:79:76:e9:cf:2b:76:e4:74:
                    d9:de:45:58:f7:f8:67:2e:51:76:7f:39:0c:ac:8a:
                    4d:6b:a1:ac:65:33:91:97:53:ab:17:94:98:cc:d3:
                    0c:e1:b5:fc:23:6d:52:a1:f0:8f:7a:de:75:79:77:
                    ae:2a:ea:b7:13:4f:96:81:8a:a3:83:dd:a3:59:81:
                    6f:2a:6c:11:ff:c3:67:fd:30:61:66:e8:d7:3b:be:
                    b8:ff:a9:d2:ab:99:5a:a1:16:94:67:8a:97:7c:48:
                    51:23:fa:2c:36:84:9c:b8:1e:36:70:05:9a:a7:67:
                    22:4c:c3:87:1d:5e:bf:df:74:db:11:94:99:5f:1b:
                    08:35:b1:a9:1e:49:d8:88:23:59:d9:ce:7a:6f:1b:
                    5e:85:83:86:ab:c7:51:68:b8:f4:c1:cc:b7:0d:12:
                    0d:bb:44:14:4f:4a:65:63:5d:64:8e:fd:ef:1e:b0:
                    94:cb:8c:8f:e7:a6:72:d1:76:86:fb:07:bf:df:a6:
                    d3:ee:bf:d0:ba:8d:e0:f0:ab:e7:5a:96:66:02:cc:
                    d7:69:66:27:12:b6:64:7d:4c:ce:7b:af:fc:da:93:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:93:B4:B3:77:87:A2:13:D6:71:25:6F:F3:9B:57:6D:5F:54:5C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903197c9-cdb7-354b-88c0-233ae6bec329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:57:3d:5b:9a:ee:8e:a3:89:ef:68:b9:39:03:78:15:e9:
         a1:0e:b1:98:aa:f8:df:b8:3d:19:5f:f7:5a:f8:71:98:fe:fc:
         94:34:8a:81:6f:43:a7:75:a9:2e:ee:3c:c5:73:62:b6:9b:10:
         66:c8:f6:50:c4:a9:f5:ed:13:9b:16:76:c6:5c:4e:a2:30:5e:
         5a:4e:9c:7c:9d:be:49:d8:87:38:a4:1a:66:7c:ff:6b:9c:0e:
         5e:77:50:bb:ce:a1:3d:ac:d4:ec:ae:51:ac:48:d0:01:a0:da:
         d0:4e:45:75:17:f3:da:a5:f9:25:5e:16:10:2a:fa:70:20:87:
         c0:31:1f:27:71:9f:4c:76:00:2e:8f:56:c0:c9:77:b6:38:30:
         63:44:14:27:0e:bf:98:58:da:85:ff:19:ac:d8:84:91:42:b1:
         32:29:ff:87:2d:21:95:5b:fb:65:be:eb:f3:a7:73:38:49:42:
         b4:b1:d7:c6:fb:ed:86:f3:90:36:83:96:0d:c0:17:f9:4f:3e:
         ec:7b:93:c1:07:ff:b2:c5:ca:fa:6d:6d:04:66:c2:10:34:13:
         33:ea:f0:21:9e:ad:0d:d1:21:6d:96:81:04:a2:7f:79:4b:74:
         ae:46:60:01:64:d2:c8:fe:68:43:6a:a6:e9:68:c4:de:bd:3f:
         7a:cf:e4:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXmw7tyGEmJijN22QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxNzA5MzYyMloXDTI0MDgxNTA5MzYyMlowLzEtMCsGA1UEAxMk
ZGNkZTIzMGUtMWUyOS00OGRiLWEwYmMtMzRiZDkwMDQxZjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoYAuxfry6t31fACrpZsphBcfJORSIT2tJ/4
B2LF6Joiyt1CeXbpzyt25HTZ3kVY9/hnLlF2fzkMrIpNa6GsZTORl1OrF5SYzNMM
4bX8I21SofCPet51eXeuKuq3E0+WgYqjg92jWYFvKmwR/8Nn/TBhZujXO764/6nS
q5laoRaUZ4qXfEhRI/osNoScuB42cAWap2ciTMOHHV6/33TbEZSZXxsINbGpHknY
iCNZ2c56bxtehYOGq8dRaLj0wcy3DRINu0QUT0plY11kjv3vHrCUy4yP56Zy0XaG
+we/36bT7r/Quo3g8KvnWpZmAszXaWYnErZkfUzOe6/82pN1mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIaTtLN3h6IT1nElb/ObV21fVFxnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAzMTk3YzktY2RiNy0z
NTRiLTg4YzAtMjMzYWU2YmVjMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzWVz1bmu6Oo4nvaLk5A3gV6aEOsZiq+N+4PRlf91r4cZj+/JQ0ioFv
Q6d1qS7uPMVzYrabEGbI9lDEqfXtE5sWdsZcTqIwXlpOnHydvknYhzikGmZ8/2uc
Dl53ULvOoT2s1OyuUaxI0AGg2tBORXUX89ql+SVeFhAq+nAgh8AxHydxn0x2AC6P
VsDJd7Y4MGNEFCcOv5hY2oX/GazYhJFCsTIp/4ctIZVb+2W+6/OnczhJQrSx18b7
7YbzkDaDlg3AF/lPPux7k8EH/7LFyvptbQRmwhA0EzPq8CGerQ3RIW2WgQSif3lL
dK5GYAFk0sj+aENqpuloxN69P3rP5NY=
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:37:06 2024 by rpki-client on console-fra.rpki-client.org