Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9eab948-9210-3cc6-9b92-c00c1fde42a7.roa
File:                     e9eab948-9210-3cc6-9b92-c00c1fde42a7.roa (raw, json)
Hash identifier:          7mB5OozykVMsHNevIAWhv+MlzNgCVQaADmO95TKv0kY=
Subject key identifier:   11:44:A3:90:1D:B3:D7:69:74:60:DB:98:4C:33:74:6E:DF:16:96:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A6751B9D80DFA1606D986200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9eab948-9210-3cc6-9b92-c00c1fde42a7.roa
Signing time:             Wed 24 Apr 2024 08:46:13 +0000
ROA not before:           Wed 24 Apr 2024 08:46:13 +0000
ROA not after:            Tue 23 Jul 2024 08:46:13 +0000
asID:                     16625
IP address blocks:        23.1.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:75:1b:9d:80:df:a1:60:6d:98:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 24 08:46:13 2024 GMT
            Not After : Jul 23 08:46:13 2024 GMT
        Subject: CN=97d55800-3ba8-46c9-aac1-b64040dcc004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:eb:ef:16:91:f6:a0:0e:00:c6:0a:6c:11:
                    6a:28:44:cf:3e:b9:b9:90:49:3b:87:5b:34:85:aa:
                    b3:04:e1:e8:40:30:86:cf:9a:83:90:74:07:1f:d7:
                    dd:f6:a6:46:60:43:67:a3:23:a3:1d:ae:ba:cf:a1:
                    69:72:8f:b8:1d:2d:b1:f0:1d:77:5e:ab:48:a9:b6:
                    55:fb:3d:38:a5:d6:6d:3f:d8:bc:ab:36:e0:26:5f:
                    25:c8:e3:eb:56:ea:90:3e:4e:ef:10:7a:a8:9f:6d:
                    3b:cc:85:98:25:0c:37:31:70:ee:5c:a0:92:9f:35:
                    9e:8f:71:e1:a5:a9:d6:c1:a3:ae:1a:9a:58:17:03:
                    94:fa:e4:2d:04:f6:d1:86:85:98:30:38:57:a7:64:
                    4e:33:4b:de:4e:8c:9f:7c:a0:ab:7c:b3:ee:5b:d8:
                    52:70:ca:5c:23:cb:dc:f3:93:27:6d:ba:b2:1d:76:
                    f1:9f:76:48:99:c1:ae:0d:db:84:87:a0:d5:4d:15:
                    7f:16:60:c6:e9:33:5f:d7:f7:e4:45:2c:3d:71:fb:
                    33:b3:67:18:2e:a5:d3:ed:7a:5a:64:a5:65:02:47:
                    a8:ba:ba:a0:14:98:05:3a:86:e2:7f:19:1f:1e:b1:
                    6e:e1:9d:aa:44:44:3e:51:74:5b:0f:d8:62:23:83:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:44:A3:90:1D:B3:D7:69:74:60:DB:98:4C:33:74:6E:DF:16:96:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9eab948-9210-3cc6-9b92-c00c1fde42a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.1.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:0a:5e:39:0d:d0:e0:5b:98:53:4d:a6:3a:9f:f8:1c:74:
         52:ef:73:31:75:a0:d3:b3:4d:df:37:81:92:37:2a:f8:b0:15:
         da:c4:95:31:b5:e0:c6:d2:ed:1e:95:b6:3f:8c:40:72:4e:af:
         f0:40:29:b7:37:1b:5c:e1:78:04:68:ab:33:c4:50:51:80:63:
         57:f0:32:f2:af:df:66:bd:cb:ff:a9:0a:75:f9:79:65:17:e7:
         7e:91:9f:b2:29:48:7d:49:98:74:03:1a:d1:ea:7d:1c:f4:bd:
         33:e9:0e:e5:b0:08:05:e0:bd:d8:71:88:2b:ff:55:62:5c:98:
         31:db:68:50:11:7f:83:cd:27:18:b8:5b:e9:1c:56:d7:46:0d:
         12:c8:4c:37:1c:3c:ac:f7:da:a4:0f:63:e1:00:34:fd:68:6a:
         c2:82:6b:6f:e3:58:4e:db:f1:cf:71:a5:79:15:db:53:71:3f:
         9e:62:06:4d:3b:ad:ec:4b:fd:1b:c1:ff:c9:84:b4:95:47:4e:
         f3:5f:b4:75:a4:74:2a:cc:31:9b:f2:9c:be:3a:0c:8b:32:36:
         4e:de:29:68:cd:6b:cb:93:d3:19:ce:75:6c:a6:de:94:5d:ee:
         c9:10:52:f0:f7:32:67:c5:35:9f:b8:a6:c9:91:c0:cd:cd:34:
         cf:b0:ca:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWmdRudgN+hYG2YYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQyNDA4NDYxM1oXDTI0MDcyMzA4NDYxM1owLzEtMCsGA1UEAxMk
OTdkNTU4MDAtM2JhOC00NmM5LWFhYzEtYjY0MDQwZGNjMDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFLr7xaR9qAOAMYKbBFqKETPPrm5kEk7h1s0
haqzBOHoQDCGz5qDkHQHH9fd9qZGYENnoyOjHa66z6Fpco+4HS2x8B13XqtIqbZV
+z04pdZtP9i8qzbgJl8lyOPrVuqQPk7vEHqon207zIWYJQw3MXDuXKCSnzWej3Hh
panWwaOuGppYFwOU+uQtBPbRhoWYMDhXp2ROM0veToyffKCrfLPuW9hScMpcI8vc
85MnbbqyHXbxn3ZImcGuDduEh6DVTRV/FmDG6TNf1/fkRSw9cfszs2cYLqXT7Xpa
ZKVlAkeourqgFJgFOobifxkfHrFu4Z2qREQ+UXRbD9hiI4N+owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFEo5Ads9dpdGDbmEwzdG7fFpZ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTllYWI5NDgtOTIxMC0z
Y2M2LTliOTItYzAwYzFmZGU0MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmjCl45DdDgW5hTTaY6n/gcdFLvczF1oNOzTd83gZI3KviwFdrElTG1
4MbS7R6Vtj+MQHJOr/BAKbc3G1zheARoqzPEUFGAY1fwMvKv32a9y/+pCnX5eWUX
536Rn7IpSH1JmHQDGtHqfRz0vTPpDuWwCAXgvdhxiCv/VWJcmDHbaFARf4PNJxi4
W+kcVtdGDRLITDccPKz32qQPY+EANP1oasKCa2/jWE7b8c9xpXkV21NxP55iBk07
rexL/RvB/8mEtJVHTvNftHWkdCrMMZvynL46DIsyNk7eKWjNa8uT0xnOdWym3pRd
7skQUvD3MmfFNZ+4psmRwM3NNM+wykk=
-----END CERTIFICATE-----
Generated at Fri May 17 20:05:39 2024 by rpki-client on console-ams.rpki-client.org