Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce524e36-ff76-3592-b5b3-bddc7d4708f4.roa
File:                     ce524e36-ff76-3592-b5b3-bddc7d4708f4.roa (raw, json)
Hash identifier:          xaWtz6d8yfM10vsV3eoK6OkdjlX5UNhN9Xt5AZpqVP4=
Subject key identifier:   0A:D0:F3:5D:EC:C4:BC:89:A7:6C:F0:01:25:1A:6B:76:19:BA:BE:6B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E6DED1F5E11DCAB2528B0800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce524e36-ff76-3592-b5b3-bddc7d4708f4.roa
Signing time:             Fri 17 May 2024 10:30:57 +0000
ROA not before:           Fri 17 May 2024 10:30:57 +0000
ROA not after:            Thu 15 Aug 2024 10:30:57 +0000
asID:                     20940
IP address blocks:        23.53.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e6:de:d1:f5:e1:1d:ca:b2:52:8b:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 10:30:57 2024 GMT
            Not After : Aug 15 10:30:57 2024 GMT
        Subject: CN=6be3bf3f-1d92-46fc-9ec4-862a45f2c962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:67:59:98:a9:16:0f:09:b5:92:3a:d0:8c:57:
                    a3:ea:fd:c0:04:06:29:6e:ca:4a:ae:71:6f:b0:2a:
                    f8:19:a0:09:db:d3:30:29:ee:d2:92:44:2d:6d:22:
                    bc:0f:b6:1a:d6:ef:d8:26:87:bd:68:18:f0:77:89:
                    8c:54:b1:95:84:0b:19:3f:22:ab:d4:4c:6b:96:88:
                    74:07:fb:ff:8e:4f:39:bd:c3:ee:6f:16:1d:d5:b9:
                    50:0b:66:25:47:d8:db:00:61:18:e0:fa:c1:e3:d7:
                    60:91:a5:8c:95:9c:c9:4a:aa:54:b9:97:ab:23:2b:
                    94:2b:48:a6:09:4d:9f:1f:64:36:06:b5:f5:20:38:
                    a8:7b:a7:f0:6a:7c:2e:d8:e8:1c:c7:8a:d6:2b:40:
                    c9:3d:65:55:ca:c1:3f:ee:ae:f1:d8:d4:52:5a:ed:
                    36:9a:14:a8:79:76:9c:fc:93:f3:09:c4:6d:6f:8c:
                    0e:7b:a5:d6:ae:9f:aa:67:1d:47:30:b3:9c:cf:a8:
                    bb:8f:01:2b:27:4c:11:01:48:ef:49:0f:2f:fc:42:
                    1d:ff:bb:2b:60:5e:24:cd:54:55:a6:15:3b:79:46:
                    26:4f:91:26:57:69:73:e9:70:af:c4:4b:c5:1c:7b:
                    7a:4e:23:30:04:c3:b0:07:0c:ef:0c:72:08:00:17:
                    72:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D0:F3:5D:EC:C4:BC:89:A7:6C:F0:01:25:1A:6B:76:19:BA:BE:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce524e36-ff76-3592-b5b3-bddc7d4708f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.53.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:72:62:98:22:34:ee:2c:dc:b3:69:f1:70:ea:fe:4c:b5:48:
         ba:ce:c4:05:b3:46:c4:bc:dd:ae:c5:ee:09:06:64:a5:1c:3d:
         11:99:b3:14:23:0a:2e:82:c7:46:03:e0:98:3e:d8:cf:63:da:
         ee:ff:76:ae:cf:0a:fd:fe:ae:03:5a:65:2d:a2:17:56:e6:e7:
         59:d4:13:8a:13:39:5d:ae:ee:bc:58:5b:f9:39:42:53:8b:71:
         66:d8:c3:b7:89:aa:f3:f0:9c:96:3a:1b:3c:0b:41:40:ef:fe:
         f8:b9:f1:35:42:db:ee:c8:00:9d:ce:b2:1b:3f:59:cb:74:39:
         af:2b:c7:60:e3:9e:c2:84:7e:e2:6b:10:a2:c8:82:ec:f3:77:
         d2:21:61:0d:17:07:40:3d:12:19:69:c8:20:25:0b:71:2e:e8:
         59:37:f9:37:66:dc:6e:5f:56:a6:e0:d7:8f:02:82:57:03:8f:
         94:25:aa:b9:ef:e6:7d:58:f0:a8:ed:79:fc:79:f4:8e:55:f8:
         26:0b:e9:08:be:65:4d:8f:82:bb:6c:15:60:07:e9:88:33:ab:
         42:1f:26:5e:c2:ed:5d:53:33:f7:f9:57:40:ef:73:dd:9d:01:
         8d:41:87:50:9f:d1:56:92:96:16:f7:29:43:04:a1:28:f5:b0:
         a7:a8:09:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXm3tH14R3KslKLCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxNzEwMzA1N1oXDTI0MDgxNTEwMzA1N1owLzEtMCsGA1UEAxMk
NmJlM2JmM2YtMWQ5Mi00NmZjLTllYzQtODYyYTQ1ZjJjOTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GdZmKkWDwm1kjrQjFej6v3ABAYpbspKrnFv
sCr4GaAJ29MwKe7SkkQtbSK8D7Ya1u/YJoe9aBjwd4mMVLGVhAsZPyKr1Exrloh0
B/v/jk85vcPubxYd1blQC2YlR9jbAGEY4PrB49dgkaWMlZzJSqpUuZerIyuUK0im
CU2fH2Q2BrX1IDioe6fwanwu2Ogcx4rWK0DJPWVVysE/7q7x2NRSWu02mhSoeXac
/JPzCcRtb4wOe6XWrp+qZx1HMLOcz6i7jwErJ0wRAUjvSQ8v/EId/7srYF4kzVRV
phU7eUYmT5EmV2lz6XCvxEvFHHt6TiMwBMOwBwzvDHIIABdyzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArQ813sxLyJp2zwASUaa3YZur5rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2U1MjRlMzYtZmY3Ni0z
NTkyLWI1YjMtYmRkYzdkNDcwOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJyYpgiNO4s3LNp8XDq/ky1SLrOxAWzRsS83a7F7gkGZKUcPRGZsxQj
Ci6Cx0YD4Jg+2M9j2u7/dq7PCv3+rgNaZS2iF1bm51nUE4oTOV2u7rxYW/k5QlOL
cWbYw7eJqvPwnJY6GzwLQUDv/vi58TVC2+7IAJ3Oshs/Wct0Oa8rx2DjnsKEfuJr
EKLIguzzd9IhYQ0XB0A9EhlpyCAlC3Eu6Fk3+Tdm3G5fVqbg148CglcDj5Qlqrnv
5n1Y8Kjtefx59I5V+CYL6Qi+ZU2PgrtsFWAH6Ygzq0IfJl7C7V1TM/f5V0Dvc92d
AY1Bh1Cf0VaSlhb3KUMEoSj1sKeoCY8=
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:01:19 2024 by rpki-client on console-ams.rpki-client.org