Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9823e70e-f7d4-3172-a2c2-96a44bf0c0f1.roa
File:                     9823e70e-f7d4-3172-a2c2-96a44bf0c0f1.roa (raw, json)
Hash identifier:          9ERELnxXjNLJxYDtpvJ/lWFUmgUXccqVqV97Q/L0Dhg=
Subject key identifier:   28:17:30:EF:35:80:DB:0A:1A:F5:BB:52:FA:B3:03:E8:3F:3D:3C:8B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A10ED80C4758A51D174A2570
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9823e70e-f7d4-3172-a2c2-96a44bf0c0f1.roa
Signing time:             Mon 22 Apr 2024 10:21:08 +0000
ROA not before:           Mon 22 Apr 2024 10:21:08 +0000
ROA not after:            Sun 21 Jul 2024 10:21:08 +0000
asID:                     20940
IP address blocks:        23.72.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:0e:d8:0c:47:58:a5:1d:17:4a:25:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 10:21:08 2024 GMT
            Not After : Jul 21 10:21:08 2024 GMT
        Subject: CN=d0b82b67-3ecd-4fe8-ba0a-8f89f9db03dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:54:d8:40:c2:46:41:eb:8d:65:c0:9d:6a:
                    a4:11:95:5c:a5:d7:3e:af:f0:40:1c:00:8a:bf:5e:
                    da:99:d6:0f:c4:66:02:47:35:0d:ff:cf:38:c5:3f:
                    58:46:36:66:c1:f5:eb:45:35:34:22:99:ef:34:c3:
                    b4:80:c0:78:50:02:9e:e2:19:31:a6:6a:e0:de:5d:
                    97:62:90:7a:44:6b:a5:0d:2f:88:f9:22:3f:94:a6:
                    7d:b4:23:a6:6c:03:3c:2c:10:29:80:9e:70:33:0e:
                    c5:fd:3c:fa:92:d5:71:ed:ad:a4:6f:34:af:dd:61:
                    76:c4:28:10:73:a3:45:87:ec:ec:44:0f:aa:cc:0e:
                    13:28:a5:ce:5b:86:c0:2a:ef:a8:e4:c4:05:09:b4:
                    d8:a4:f5:17:89:52:75:b9:b7:b5:65:91:c8:e3:0d:
                    5b:53:97:6f:7e:00:87:91:cf:97:a6:05:e6:ef:ec:
                    e5:d6:43:b0:1e:8b:8a:0b:d1:af:90:9b:08:ed:95:
                    10:6b:53:4a:e0:31:17:c4:66:60:7f:53:e7:5f:fd:
                    2f:b9:7b:18:0c:6f:2c:dd:90:fa:4b:8e:9e:ac:4d:
                    e9:0a:b0:e5:3a:39:4f:46:03:4c:ad:c3:4d:5d:27:
                    e7:f5:3b:a2:fa:b3:bb:a2:18:3b:e6:c7:bf:33:0c:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:17:30:EF:35:80:DB:0A:1A:F5:BB:52:FA:B3:03:E8:3F:3D:3C:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9823e70e-f7d4-3172-a2c2-96a44bf0c0f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.72.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ba:f9:de:57:90:9c:8b:78:4d:44:eb:dc:77:f3:48:5d:ba:
         3c:50:3a:d3:56:48:9d:99:e2:ca:4b:61:fc:fb:4b:35:28:75:
         05:c9:3e:61:6b:5e:53:ab:b5:d7:57:2a:d8:24:5e:95:f8:c8:
         63:a7:16:6c:65:68:1a:0a:d5:c4:2b:bc:1b:68:e5:3d:4f:6f:
         44:b1:98:e8:d6:67:9b:73:d2:2a:b4:20:08:85:ce:b1:f4:1e:
         25:46:20:b3:a7:fe:ed:c1:1f:87:a5:4c:dc:08:4b:01:4c:2f:
         f4:81:eb:b2:02:c6:47:85:7c:89:33:59:cd:1e:cc:24:7c:97:
         06:f5:d8:07:c0:e1:ad:3c:3c:d7:27:d3:b5:4e:79:90:35:e7:
         54:41:cc:86:f7:53:12:47:47:cc:bf:fe:fe:d8:19:1f:ff:5f:
         a7:0e:f9:5e:ac:49:a4:10:cd:2d:88:24:87:20:d2:20:08:3d:
         34:c2:d6:39:62:29:3f:42:94:7d:2f:5f:69:11:b8:41:43:8f:
         c8:4b:d1:c1:78:0d:0e:24:1a:d4:6f:11:b2:ae:47:7d:f0:2f:
         f3:c4:90:f9:da:ec:74:f6:96:8a:82:7d:80:13:e6:2d:9d:50:
         92:6f:1c:31:12:7c:d8:a9:38:1a:69:e6:43:51:be:19:d5:b3:
         d4:a0:4f:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhDtgMR1ilHRdKJXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQyMjEwMjEwOFoXDTI0MDcyMTEwMjEwOFowLzEtMCsGA1UEAxMk
ZDBiODJiNjctM2VjZC00ZmU4LWJhMGEtOGY4OWY5ZGIwM2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNhU2EDCRkHrjWXAnWqkEZVcpdc+r/BAHACK
v17amdYPxGYCRzUN/884xT9YRjZmwfXrRTU0IpnvNMO0gMB4UAKe4hkxpmrg3l2X
YpB6RGulDS+I+SI/lKZ9tCOmbAM8LBApgJ5wMw7F/Tz6ktVx7a2kbzSv3WF2xCgQ
c6NFh+zsRA+qzA4TKKXOW4bAKu+o5MQFCbTYpPUXiVJ1ube1ZZHI4w1bU5dvfgCH
kc+XpgXm7+zl1kOwHouKC9GvkJsI7ZUQa1NK4DEXxGZgf1PnX/0vuXsYDG8s3ZD6
S46erE3pCrDlOjlPRgNMrcNNXSfn9Tui+rO7ohg75se/MwxFuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgXMO81gNsKGvW7UvqzA+g/PTyLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTgyM2U3MGUtZjdkNC0z
MTcyLWEyYzItOTZhNDRiZjBjMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0jjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIi6+d5XkJyLeE1E69x380hdujxQOtNWSJ2Z4spLYfz7SzUodQXJPmFr
XlOrtddXKtgkXpX4yGOnFmxlaBoK1cQrvBto5T1Pb0SxmOjWZ5tz0iq0IAiFzrH0
HiVGILOn/u3BH4elTNwISwFML/SB67ICxkeFfIkzWc0ezCR8lwb12AfA4a08PNcn
07VOeZA151RBzIb3UxJHR8y//v7YGR//X6cO+V6sSaQQzS2IJIcg0iAIPTTC1jli
KT9ClH0vX2kRuEFDj8hL0cF4DQ4kGtRvEbKuR33wL/PEkPna7HT2loqCfYAT5i2d
UJJvHDESfNipOBpp5kNRvhnVs9SgTxc=
-----END CERTIFICATE-----
Generated at Fri May 17 21:41:17 2024 by rpki-client on console-fra.rpki-client.org