Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91cdf6a1-14d8-3eac-b047-f81f974d0844.roa
File:                     91cdf6a1-14d8-3eac-b047-f81f974d0844.roa (raw, json)
Hash identifier:          3yEJbnHLs4F3JXxO9zsVbHpUbgxwxiHdQoRpe9k+aeQ=
Subject key identifier:   4D:D5:F4:15:C4:2F:BC:45:E2:09:C8:28:55:31:87:3B:DC:16:E8:40
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DBDD0ECBD9C83C28B7758260
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91cdf6a1-14d8-3eac-b047-f81f974d0844.roa
Signing time:             Mon 13 May 2024 11:53:30 +0000
ROA not before:           Mon 13 May 2024 11:53:30 +0000
ROA not after:            Sun 11 Aug 2024 11:53:30 +0000
asID:                     20940
IP address blocks:        23.40.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:dd:0e:cb:d9:c8:3c:28:b7:75:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 11:53:30 2024 GMT
            Not After : Aug 11 11:53:30 2024 GMT
        Subject: CN=8750b63e-e0e8-4e4e-86c9-5c82bed18afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:bb:30:28:cc:bb:46:da:c5:03:c4:09:31:
                    bb:3e:4c:d5:ec:d2:db:87:14:82:71:4a:93:1b:8b:
                    dd:6e:7a:78:1d:31:ee:60:ed:ef:66:ab:40:db:64:
                    66:0d:64:e5:0b:02:88:85:0a:b0:47:1c:2d:34:a7:
                    7a:1c:70:20:e5:7d:2c:0a:8d:0f:7a:87:cc:4e:8f:
                    b5:84:4e:25:ed:82:f1:eb:a7:c1:17:5d:ad:0c:3a:
                    cb:e4:a7:60:ab:03:a3:db:ff:33:c8:37:1e:0a:d5:
                    c4:fd:1d:3c:85:d6:6c:d4:07:b5:40:ea:1d:b6:e5:
                    93:1c:74:9b:04:27:50:90:c5:81:ab:00:61:7d:df:
                    f8:2c:62:17:b3:27:38:0a:fd:da:81:2a:ef:08:8e:
                    f5:f9:c2:1a:81:b3:bc:a7:04:f3:88:89:dd:15:63:
                    d3:f1:2c:db:45:53:0b:56:0c:d5:6d:d9:bd:03:c6:
                    c0:97:0a:21:25:e3:04:d3:33:f2:b8:76:b9:e5:3d:
                    fb:4e:8f:f3:2e:d5:1a:68:0a:5c:ad:35:40:2a:d7:
                    c6:67:07:05:dd:ba:35:9a:ae:93:e3:68:a0:c6:8d:
                    31:69:f9:6c:ef:56:fb:ab:ee:cd:c4:33:b2:9b:ed:
                    ca:b6:f5:a9:dc:83:f6:c2:0a:34:e6:d6:1a:c1:fb:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D5:F4:15:C4:2F:BC:45:E2:09:C8:28:55:31:87:3B:DC:16:E8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91cdf6a1-14d8-3eac-b047-f81f974d0844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:75:10:54:c9:24:05:85:62:d8:4d:0c:0c:33:bc:e1:a3:60:
         dc:3b:40:65:93:a7:48:6d:f1:ee:98:07:78:d7:22:20:d5:5e:
         89:0b:27:6c:f2:b2:8a:fe:01:24:06:1d:85:4e:69:04:9b:84:
         56:1d:cc:96:bf:aa:97:1d:f7:b9:9a:22:d9:46:04:99:e7:64:
         c8:63:cb:68:fa:d0:52:1e:13:dd:20:bf:90:31:13:62:fc:7a:
         9b:ab:0c:32:d8:3c:d5:05:c7:f8:d3:59:ec:c3:1a:37:96:81:
         5e:d8:25:c1:32:2e:9b:b1:4c:ca:5c:f8:4b:42:19:52:1f:9a:
         35:18:6c:e0:14:3d:48:3b:d0:ed:c5:34:cd:8d:84:1b:98:2c:
         48:c8:01:8c:06:4f:df:24:57:ee:30:28:6f:46:33:65:79:af:
         34:b9:24:48:4d:56:ce:4e:be:5c:07:40:78:c2:45:1b:4f:29:
         c7:83:97:01:ce:7c:87:a6:2a:02:37:9b:ba:c3:13:48:d5:f8:
         da:88:e7:77:df:b7:e3:42:b2:d8:9f:bd:c9:e4:d0:5b:4c:b6:
         9e:6e:8c:26:28:3d:89:c2:08:a8:51:bb:9c:c3:48:03:5c:08:
         ef:2e:08:49:27:72:0b:03:84:f1:6c:49:9d:ec:9b:6c:6f:b1:
         ab:15:a6:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb3Q7L2cg8KLd1gmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxMzExNTMzMFoXDTI0MDgxMTExNTMzMFowLzEtMCsGA1UEAxMk
ODc1MGI2M2UtZTBlOC00ZTRlLTg2YzktNWM4MmJlZDE4YWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseO7MCjMu0baxQPECTG7PkzV7NLbhxSCcUqT
G4vdbnp4HTHuYO3vZqtA22RmDWTlCwKIhQqwRxwtNKd6HHAg5X0sCo0PeofMTo+1
hE4l7YLx66fBF12tDDrL5KdgqwOj2/8zyDceCtXE/R08hdZs1Ae1QOodtuWTHHSb
BCdQkMWBqwBhfd/4LGIXsyc4Cv3agSrvCI71+cIagbO8pwTziIndFWPT8SzbRVML
VgzVbdm9A8bAlwohJeME0zPyuHa55T37To/zLtUaaApcrTVAKtfGZwcF3bo1mq6T
42igxo0xafls71b7q+7NxDOym+3KtvWp3IP2wgo05tYawfvNCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3V9BXEL7xF4gnIKFUxhzvcFuhAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFjZGY2YTEtMTRkOC0z
ZWFjLWIwNDctZjgxZjk3NGQwODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyhgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABp1EFTJJAWFYthNDAwzvOGjYNw7QGWTp0ht8e6YB3jXIiDVXokLJ2zy
sor+ASQGHYVOaQSbhFYdzJa/qpcd97maItlGBJnnZMhjy2j60FIeE90gv5AxE2L8
epurDDLYPNUFx/jTWezDGjeWgV7YJcEyLpuxTMpc+EtCGVIfmjUYbOAUPUg70O3F
NM2NhBuYLEjIAYwGT98kV+4wKG9GM2V5rzS5JEhNVs5OvlwHQHjCRRtPKceDlwHO
fIemKgI3m7rDE0jV+NqI53fft+NCstifvcnk0FtMtp5ujCYoPYnCCKhRu5zDSANc
CO8uCEkncgsDhPFsSZ3sm2xvsasVpoY=
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:47:10 2024 by rpki-client on console-ams.rpki-client.org