Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fedae1e3-4967-31bb-8eac-e501927478ba.roa
File:                     fedae1e3-4967-31bb-8eac-e501927478ba.roa (raw, json)
Hash identifier:          HZbkRKxVCuPA+77gDfp42Rv9ZqwLs4glzMXBhLqI7fU=
Subject key identifier:   6A:41:52:2D:55:6C:4F:A7:E5:29:00:65:18:86:27:33:0B:EC:29:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E11FDFA23BFBB178F29F2240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fedae1e3-4967-31bb-8eac-e501927478ba.roa
Signing time:             Wed 15 May 2024 09:07:10 +0000
ROA not before:           Wed 15 May 2024 09:07:10 +0000
ROA not after:            Tue 13 Aug 2024 09:07:10 +0000
asID:                     20940
IP address blocks:        23.47.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:1f:df:a2:3b:fb:b1:78:f2:9f:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 09:07:10 2024 GMT
            Not After : Aug 13 09:07:10 2024 GMT
        Subject: CN=2ce250f3-06a3-4616-9925-c2c0ced933a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:2a:d9:ae:55:2d:ab:c7:47:15:22:02:f5:
                    4e:cb:4e:96:cd:2c:99:4a:f1:d6:26:d7:2f:cf:e5:
                    76:f5:48:6a:5b:91:b0:8c:a0:68:2c:20:0a:e5:9d:
                    05:d7:bb:0d:1b:68:92:0a:2f:f9:39:1c:63:f3:27:
                    6b:b8:3b:51:b1:be:63:5c:d6:10:21:dd:12:5a:12:
                    25:80:46:fa:a9:f3:90:d5:62:59:05:60:78:3f:88:
                    20:83:72:b0:a1:2e:49:c7:11:03:83:b3:c8:4d:08:
                    bc:06:08:22:9a:75:73:92:b6:a0:04:a4:a8:34:31:
                    b6:15:13:cc:0a:ab:2d:5f:0d:9a:17:85:98:af:c1:
                    e8:f1:1e:bd:57:ae:c7:dc:29:8e:c2:62:6a:52:7e:
                    70:4c:5a:6f:83:18:7f:38:70:3c:e0:9d:80:cf:22:
                    86:fa:de:0d:bc:91:c4:d7:64:94:44:21:fb:5f:19:
                    69:f2:3b:66:98:dc:87:79:2c:f5:a6:7d:52:94:86:
                    f1:56:cf:12:83:87:46:12:f7:7b:4d:12:74:b8:e8:
                    82:3b:a1:47:cb:77:85:25:1a:cc:54:bf:5b:67:a2:
                    96:7e:a8:87:bd:ed:49:6a:51:f5:91:c4:f3:40:af:
                    a3:56:ff:ad:4a:e8:9f:1c:00:95:3d:89:42:47:cb:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:41:52:2D:55:6C:4F:A7:E5:29:00:65:18:86:27:33:0B:EC:29:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fedae1e3-4967-31bb-8eac-e501927478ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e5:fe:01:6e:c9:01:5a:64:62:f7:ac:e6:2c:67:53:46:c3:
         bf:2f:3c:55:a1:96:41:ef:db:01:fb:9f:e7:28:84:c2:ca:ca:
         d6:c4:f4:8c:6b:4f:06:19:a8:d2:38:80:48:4c:87:be:fa:d2:
         94:97:bf:bd:04:c7:48:17:9d:a4:0d:1c:2d:54:e1:21:07:44:
         1b:8b:7c:4b:6e:9f:de:b0:20:a8:7d:ba:08:de:c2:df:29:00:
         b4:0d:93:46:81:74:af:ac:de:1d:24:43:da:2c:e3:1e:f7:04:
         b7:b0:87:99:62:4b:95:71:82:ae:74:fb:42:16:1e:e8:75:3c:
         8e:0f:0d:0c:f5:3d:12:36:74:a6:37:c6:88:23:2f:8b:11:fb:
         09:5f:e9:f5:c3:76:70:5b:81:9c:ed:0f:06:86:30:40:68:ad:
         e1:8b:df:78:1c:25:b5:56:b5:55:d0:4e:55:83:24:8b:f1:fc:
         66:16:49:20:7e:06:93:89:99:c0:37:67:2b:1e:4e:6c:10:5e:
         2a:5e:f0:7c:47:b9:2e:03:be:73:f9:47:83:79:49:24:42:a9:
         0c:b4:75:bd:2f:b7:b5:ae:d4:d2:3d:25:52:9d:74:79:6f:26:
         9e:f1:69:dd:0b:b8:fa:fa:66:fb:7e:b3:0d:70:63:6f:3d:7e:
         9c:0f:a2:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXhH9+iO/uxePKfIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxNTA5MDcxMFoXDTI0MDgxMzA5MDcxMFowLzEtMCsGA1UEAxMk
MmNlMjUwZjMtMDZhMy00NjE2LTk5MjUtYzJjMGNlZDkzM2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Eq2a5VLavHRxUiAvVOy06WzSyZSvHWJtcv
z+V29UhqW5GwjKBoLCAK5Z0F17sNG2iSCi/5ORxj8ydruDtRsb5jXNYQId0SWhIl
gEb6qfOQ1WJZBWB4P4ggg3KwoS5JxxEDg7PITQi8BggimnVzkragBKSoNDG2FRPM
CqstXw2aF4WYr8Ho8R69V67H3CmOwmJqUn5wTFpvgxh/OHA84J2AzyKG+t4NvJHE
12SURCH7Xxlp8jtmmNyHeSz1pn1SlIbxVs8Sg4dGEvd7TRJ0uOiCO6FHy3eFJRrM
VL9bZ6KWfqiHve1JalH1kcTzQK+jVv+tSuifHACVPYlCR8u5uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpBUi1VbE+n5SkAZRiGJzML7CnmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmVkYWUxZTMtNDk2Ny0z
MWJiLThlYWMtZTUwMTkyNzQ3OGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy8wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/l/gFuyQFaZGL3rOYsZ1NGw78vPFWhlkHv2wH7n+cohMLKytbE9Ixr
TwYZqNI4gEhMh7760pSXv70Ex0gXnaQNHC1U4SEHRBuLfEtun96wIKh9ugjewt8p
ALQNk0aBdK+s3h0kQ9os4x73BLewh5liS5Vxgq50+0IWHuh1PI4PDQz1PRI2dKY3
xogjL4sR+wlf6fXDdnBbgZztDwaGMEBoreGL33gcJbVWtVXQTlWDJIvx/GYWSSB+
BpOJmcA3ZyseTmwQXipe8HxHuS4DvnP5R4N5SSRCqQy0db0vt7Wu1NI9JVKddHlv
Jp7xad0LuPr6Zvt+sw1wY289fpwPosw=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:51:11 2024 by rpki-client on console-fra.rpki-client.org