Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa
File:                     b6bdc6ff-ac51-300f-8948-308bb0783629.roa (raw, json)
Hash identifier:          BvzmVBI1dGmCATgw5xze2XnsZ3LnLe+FWDXnW42oTTQ=
Subject key identifier:   BF:A1:74:F4:06:F1:74:77:2D:1E:76:E9:C8:AC:2D:94:2C:86:B3:EE
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F4328584582A88D54B4578A2E5A74BB80
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     36318
IP address blocks:        23.160.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:8d:54:b4:57:8a:2e:5a:74:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=2b7b98df-96ea-4db9-a7d2-9ab5aae70fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:8d:a4:12:5d:6d:29:e0:7f:ee:d8:89:6a:
                    1a:f9:b8:c3:81:25:7c:11:53:35:07:17:56:cc:72:
                    8d:cb:da:d6:bf:7e:25:30:66:25:d1:2b:b5:33:9a:
                    fa:2a:38:b4:fa:63:ac:1b:c7:94:5f:ce:9e:25:b9:
                    c1:fe:0e:9e:5d:02:e0:98:d7:52:d1:7a:38:d4:8f:
                    a9:e5:34:de:6e:76:65:c1:40:7a:cf:2b:f0:76:7a:
                    b8:11:b3:38:ce:43:7c:a2:dd:a6:7f:03:1e:2a:d5:
                    6c:a6:6b:41:e5:e0:ba:70:f3:8b:47:af:5c:27:53:
                    f7:05:16:a7:ae:09:36:6a:ba:50:31:fc:75:88:45:
                    e2:c7:db:ac:aa:8f:89:6a:d6:17:d9:22:cc:6f:d6:
                    30:0e:1f:29:a8:62:b7:2a:1a:90:69:24:92:e4:e5:
                    50:8f:0c:01:22:c7:fb:7e:11:47:d6:b3:f2:5d:45:
                    40:55:73:de:dc:85:e7:3a:37:23:c6:51:71:55:78:
                    e8:58:e3:b1:5e:5c:23:a9:4d:9f:ca:2f:9a:41:8a:
                    7f:15:10:c3:4e:f5:4f:72:a3:6a:e1:9c:2c:6f:09:
                    4a:1e:59:cb:39:90:34:a7:1d:ad:8c:2c:81:9c:52:
                    6a:6f:b1:02:73:2b:a3:48:fb:7d:48:bf:0d:b9:13:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A1:74:F4:06:F1:74:77:2D:1E:76:E9:C8:AC:2D:94:2C:86:B3:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/b6bdc6ff-ac51-300f-8948-308bb0783629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:87:0d:d5:a0:c4:b7:ad:8d:b1:72:58:b2:c3:10:f1:47:a4:
         57:49:b9:bb:f4:ed:66:fb:f9:c6:62:d4:6c:b9:94:4d:e5:d8:
         34:4a:70:43:a3:23:00:2f:4d:61:13:c3:81:77:07:b0:e7:f5:
         68:b1:24:57:fb:ea:9c:9a:6a:93:12:9b:8d:7d:7f:e8:dc:96:
         33:50:74:b4:a0:36:6d:e0:61:aa:f2:44:be:82:ba:c7:a9:12:
         92:32:aa:b4:64:09:20:bf:61:16:7f:3e:ca:19:ae:5f:be:8f:
         e0:5a:87:f6:09:e1:0b:78:f6:83:e5:d0:8e:4b:43:16:2d:15:
         f0:f4:66:28:2f:cf:00:70:6d:82:da:67:4e:5b:98:86:0c:dd:
         4e:35:67:ff:39:b2:90:79:73:c3:74:c5:37:b3:5d:71:51:b8:
         8b:93:fe:36:61:bd:7f:5b:78:a7:81:3f:fc:63:30:c3:d8:c9:
         0e:0f:df:b0:88:47:96:75:66:72:86:8c:29:6c:e9:d8:32:cb:
         b2:67:25:77:72:5b:29:0d:fe:95:27:09:91:80:5e:46:f3:4b:
         1b:e6:58:d2:1d:ec:23:5a:63:22:1a:90:a1:ef:d3:1b:78:eb:
         4d:1d:45:15:a5:c0:6c:75:ac:91:e7:ad:ac:b9:52:e0:b8:26:
         b8:29:b0:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqI1UtFeKLlp0u4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFlZjVjYzEtOTY5Ny00MDE2LWE3YjEtODQxMDY1MjAx
MjhhMB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
MmI3Yjk4ZGYtOTZlYS00ZGI5LWE3ZDItOWFiNWFhZTcwZmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI2NpBJdbSngf+7YiWoa+bjDgSV8EVM1BxdW
zHKNy9rWv34lMGYl0Su1M5r6Kji0+mOsG8eUX86eJbnB/g6eXQLgmNdS0Xo41I+p
5TTebnZlwUB6zyvwdnq4EbM4zkN8ot2mfwMeKtVspmtB5eC6cPOLR69cJ1P3BRan
rgk2arpQMfx1iEXix9usqo+JatYX2SLMb9YwDh8pqGK3KhqQaSSS5OVQjwwBIsf7
fhFH1rPyXUVAVXPe3IXnOjcjxlFxVXjoWOOxXlwjqU2fyi+aQYp/FRDDTvVPcqNq
4ZwsbwlKHlnLOZA0px2tjCyBnFJqb7ECcyujSPt9SL8NuRN7UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+hdPQG8XR3LR526cisLZQshrPuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYWVm
NWNjMS05Njk3LTQwMTYtYTdiMS04NDEwNjUyMDEyOGEvYjZiZGM2ZmYtYWM1MS0z
MDBmLTg5NDgtMzA4YmIwNzgzNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGFlZjVjYzEtOTY5Ny00MDE2LWE3
YjEtODQxMDY1MjAxMjhhL2RhZWY1Y2MxLTk2OTctNDAxNi1hN2IxLTg0MTA2NTIw
MTI4YS5jcmwwHwYDVR0jBBgwFoAUU5ElfGQKg+eUefKE5srTZ00KJZAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYWVmNWNjMS05Njk3LTQwMTYtYTdiMS04NDEw
NjUyMDEyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6BYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWHDdWgxLetjbFyWLLDEPFHpFdJubv07Wb7+cZi1Gy5lE3l2DRKcEOj
IwAvTWETw4F3B7Dn9WixJFf76pyaapMSm419f+jcljNQdLSgNm3gYaryRL6Cusep
EpIyqrRkCSC/YRZ/PsoZrl++j+Bah/YJ4Qt49oPl0I5LQxYtFfD0ZigvzwBwbYLa
Z05bmIYM3U41Z/85spB5c8N0xTezXXFRuIuT/jZhvX9beKeBP/xjMMPYyQ4P37CI
R5Z1ZnKGjCls6dgyy7JnJXdyWykN/pUnCZGAXkbzSxvmWNId7CNaYyIakKHv0xt4
600dRRWlwGx1rJHnray5UuC4JrgpsCs=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:48 2024 by rpki-client on console-fra.rpki-client.org