Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eae61362-e170-3f44-9163-d5e1771ab6ea.roa
File:                     eae61362-e170-3f44-9163-d5e1771ab6ea.roa (raw, json)
Hash identifier:          CpFZ/XpZLkVcq4pxVAhxZlKLmCeT7RkWGXK5SLlwPg4=
Subject key identifier:   B4:EA:32:DB:92:28:4E:86:25:42:E9:2F:2F:B2:A1:E0:E9:3F:76:7E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584582A89616DF4ED1578944D100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eae61362-e170-3f44-9163-d5e1771ab6ea.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     35994
IP address blocks:        23.212.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:96:16:df:4e:d1:57:89:44:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=118d3779-e328-487b-a04d-c466976745a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:9f:4b:7d:58:71:22:a5:c5:65:ed:e4:f2:
                    f3:cf:ca:ee:c4:fd:70:d8:4f:67:9d:e9:14:6a:31:
                    9a:0b:1b:43:71:3c:71:10:8a:d1:37:dc:45:d8:b8:
                    62:ae:c7:cb:1b:a8:5b:6b:d7:ca:a3:bb:41:46:79:
                    51:c2:47:2c:c8:ec:97:f4:ec:c7:de:67:88:6e:95:
                    15:a7:78:b7:a7:e3:f1:3f:f5:d1:43:ab:9d:5d:5e:
                    57:4e:ba:48:be:0d:df:12:27:88:6b:00:df:5d:dc:
                    d7:cb:ce:90:7f:17:20:a6:8f:c8:16:a1:8c:04:aa:
                    f7:88:33:8e:ba:63:46:4a:6f:d4:69:a6:90:8c:73:
                    98:d9:ee:5d:27:f5:f7:68:3d:fa:8e:2c:7e:86:97:
                    2e:b9:29:f7:37:3a:78:ed:87:31:48:7b:87:7a:85:
                    a3:c4:10:b1:fb:48:47:2a:ff:17:10:2a:53:90:eb:
                    0b:24:b4:08:13:54:14:4c:ff:40:f8:36:41:ee:f7:
                    a7:a0:86:8e:bf:a7:50:9e:db:ee:fa:81:f7:72:a8:
                    16:b4:12:23:27:82:76:67:dd:ba:f6:21:24:d2:3a:
                    a7:62:db:fe:d4:b4:5f:14:c5:9d:de:6a:1e:ac:95:
                    11:e7:f0:13:8d:97:a9:05:27:02:ec:8c:f3:da:94:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EA:32:DB:92:28:4E:86:25:42:E9:2F:2F:B2:A1:E0:E9:3F:76:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eae61362-e170-3f44-9163-d5e1771ab6ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:89:94:ed:d5:0e:58:6b:56:97:3e:a8:2e:c3:1c:93:76:0a:
         08:d3:5c:19:12:83:22:cb:e2:2e:76:dc:a7:ed:90:7d:6b:d9:
         7c:db:08:42:38:db:75:02:b7:6b:6e:c9:04:e3:1a:d7:f2:52:
         0e:e4:83:b6:b9:50:48:d6:a5:98:9a:58:39:0e:c5:86:1d:e3:
         ce:92:64:ab:76:eb:45:f0:19:82:c5:a4:e5:3f:36:ad:ef:a8:
         9b:af:02:ca:89:19:e5:b0:84:90:3b:a8:80:f1:15:e7:33:9b:
         fd:8e:30:0f:d5:c3:57:d5:d7:df:dc:05:a7:e8:7c:84:cc:c0:
         32:97:5a:21:94:b2:7e:46:2f:6e:81:82:fb:d1:3e:2f:a6:e3:
         f3:98:a5:67:7d:1f:a5:dd:e9:f3:cb:20:0f:68:4f:b5:9a:c4:
         42:b9:e0:f8:4c:74:95:3d:1b:7a:57:58:44:89:83:84:35:3b:
         25:70:66:ef:aa:13:f2:5a:f4:67:29:34:59:b2:e8:bb:5e:16:
         0e:b4:65:db:5b:ba:bd:58:d3:36:d1:c2:28:8e:80:22:30:9f:
         7e:9c:9a:e7:7f:72:56:db:79:01:29:0a:0d:27:14:e1:94:05:
         35:53:61:ed:fc:9d:af:4f:0b:75:41:65:aa:44:d1:1d:87:29:
         87:75:88:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqJYW307RV4lE0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
MTE4ZDM3NzktZTMyOC00ODdiLWEwNGQtYzQ2Njk3Njc0NWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK6fS31YcSKlxWXt5PLzz8ruxP1w2E9nnekU
ajGaCxtDcTxxEIrRN9xF2LhirsfLG6hba9fKo7tBRnlRwkcsyOyX9OzH3meIbpUV
p3i3p+PxP/XRQ6udXV5XTrpIvg3fEieIawDfXdzXy86Qfxcgpo/IFqGMBKr3iDOO
umNGSm/UaaaQjHOY2e5dJ/X3aD36jix+hpcuuSn3Nzp47YcxSHuHeoWjxBCx+0hH
Kv8XECpTkOsLJLQIE1QUTP9A+DZB7venoIaOv6dQntvu+oH3cqgWtBIjJ4J2Z926
9iEk0jqnYtv+1LRfFMWd3moerJUR5/ATjZepBScC7Izz2pQb8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTqMtuSKE6GJULpLy+yoeDpP3Z+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWFlNjEzNjItZTE3MC0z
ZjQ0LTkxNjMtZDVlMTc3MWFiNmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9TtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOJlO3VDlhrVpc+qC7DHJN2CgjTXBkSgyLL4i523KftkH1r2XzbCEI4
23UCt2tuyQTjGtfyUg7kg7a5UEjWpZiaWDkOxYYd486SZKt260XwGYLFpOU/Nq3v
qJuvAsqJGeWwhJA7qIDxFeczm/2OMA/Vw1fV19/cBafofITMwDKXWiGUsn5GL26B
gvvRPi+m4/OYpWd9H6Xd6fPLIA9oT7WaxEK54PhMdJU9G3pXWESJg4Q1OyVwZu+q
E/Ja9GcpNFmy6LteFg60Zdtbur1Y0zbRwiiOgCIwn36cmud/clbbeQEpCg0nFOGU
BTVTYe38na9PC3VBZapE0R2HKYd1iHM=
-----END CERTIFICATE-----
Generated at Fri May 17 22:03:20 2024 by rpki-client on console-ams.rpki-client.org