Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/060567f2-2020-33c5-ad21-73fb1c8bd19d.roa
File:                     060567f2-2020-33c5-ad21-73fb1c8bd19d.roa (raw, json)
Hash identifier:          BqWYyeHt7yUbNrCpQG8C250Uw+8tgc4AfsnK2T4URVc=
Subject key identifier:   89:DB:A4:4B:00:B5:CB:73:66:96:E0:B7:5E:D8:BD:FD:BD:FE:B2:2D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858494039764B03EA42274D8C5A39
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/060567f2-2020-33c5-ad21-73fb1c8bd19d.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     55836
IP address blocks:        23.59.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:76:4b:03:ea:42:27:4d:8c:5a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=21f6441b-2a48-4c44-bdf5-a2df39761e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:89:c8:cf:b9:b8:a6:d3:18:cf:37:ce:32:
                    c8:4f:25:4b:f1:a3:64:73:c3:b0:a4:93:f0:7b:2d:
                    e7:a5:1a:21:c0:37:09:f0:b4:0c:4a:c0:00:26:46:
                    10:dd:7c:80:81:6c:b4:58:06:2d:9a:fa:7a:02:79:
                    c2:51:0b:c1:81:15:cf:26:45:6a:46:8b:7a:fe:11:
                    27:db:5b:0c:0d:a7:2a:3a:02:82:44:47:af:62:81:
                    9d:42:e6:71:c3:32:a9:c3:a9:f5:e6:a3:8e:f3:30:
                    b1:28:21:58:be:75:d7:a2:e3:05:be:8e:6b:6b:84:
                    86:c8:c8:7a:b2:88:7b:17:f6:c6:88:f8:fc:4e:c2:
                    79:23:9c:f9:f5:38:97:5b:6b:17:46:d9:cc:47:f6:
                    ef:9d:b0:48:b8:e7:18:82:49:02:e7:fd:f4:2b:8e:
                    fd:7c:98:f4:e8:db:00:77:dc:37:f0:6d:36:fa:69:
                    f9:ec:1a:0b:ef:7d:08:fb:2e:d5:a3:d0:2d:a8:45:
                    86:96:41:cd:45:9b:7b:ba:6f:cd:74:4c:3f:4e:dc:
                    25:2b:87:30:7a:1d:93:ab:89:d4:fd:55:c8:4b:4f:
                    3f:ec:4d:85:76:f0:9c:17:7e:2d:a5:d1:bf:64:fe:
                    ba:e7:a8:af:90:06:35:c8:b1:fc:8f:45:de:15:8a:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DB:A4:4B:00:B5:CB:73:66:96:E0:B7:5E:D8:BD:FD:BD:FE:B2:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/060567f2-2020-33c5-ad21-73fb1c8bd19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:50:c3:b4:eb:14:ee:f6:72:f3:fc:3a:3b:15:17:18:dd:15:
         00:e9:3b:c0:b9:ee:1b:56:f9:fc:6d:9a:71:38:7c:cb:ec:44:
         6e:57:1e:c4:9e:3b:b4:f4:ba:11:08:d8:a2:db:6a:8a:cc:08:
         9f:07:3f:d1:dd:63:5f:0e:ea:0e:b9:3c:9a:c4:5d:bc:dd:1b:
         55:5e:c3:01:cf:68:62:bf:c9:58:96:cf:e6:04:e8:23:d3:11:
         32:4a:99:5c:74:e3:77:38:de:8f:45:10:8b:8b:26:68:d9:d5:
         28:4c:f2:3c:bc:5e:9f:f8:80:ad:a2:66:5e:03:87:2e:8b:64:
         b5:ba:68:85:30:3c:f8:bc:43:6f:1d:35:41:a9:c1:ae:98:65:
         a4:55:3f:0a:6e:4f:06:40:24:a5:97:67:2a:d6:53:b9:ed:8d:
         fe:77:2c:bd:e0:52:c0:22:42:d6:0a:54:81:fb:85:d9:7a:49:
         1d:db:87:29:e6:11:e7:d3:18:99:d3:6f:56:a2:9a:52:b6:98:
         b4:37:b5:68:a4:e6:16:9b:85:8c:a3:b3:df:7c:c9:26:f1:9b:
         c4:fc:43:89:38:80:22:fc:fb:85:05:c8:83:5c:0a:c8:e3:6f:
         5c:0c:4f:80:c3:bc:c4:cd:c1:a2:69:e2:f5:80:e9:cf:25:d1:
         cc:01:49:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXZLA+pCJ02MWjkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
MjFmNjQ0MWItMmE0OC00YzQ0LWJkZjUtYTJkZjM5NzYxZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZSJyM+5uKbTGM83zjLITyVL8aNkc8OwpJPw
ey3npRohwDcJ8LQMSsAAJkYQ3XyAgWy0WAYtmvp6AnnCUQvBgRXPJkVqRot6/hEn
21sMDacqOgKCREevYoGdQuZxwzKpw6n15qOO8zCxKCFYvnXXouMFvo5ra4SGyMh6
soh7F/bGiPj8TsJ5I5z59TiXW2sXRtnMR/bvnbBIuOcYgkkC5/30K479fJj06NsA
d9w38G02+mn57BoL730I+y7Vo9AtqEWGlkHNRZt7um/NdEw/TtwlK4cweh2Tq4nU
/VXIS08/7E2FdvCcF34tpdG/ZP6656ivkAY1yLH8j0XeFYp8FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInbpEsAtctzZpbgt17Yvf29/rItMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDYwNTY3ZjItMjAyMC0z
M2M1LWFkMjEtNzNmYjFjOGJkMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzu4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENQw7TrFO72cvP8OjsVFxjdFQDpO8C57htW+fxtmnE4fMvsRG5XHsSe
O7T0uhEI2KLbaorMCJ8HP9HdY18O6g65PJrEXbzdG1VewwHPaGK/yViWz+YE6CPT
ETJKmVx043c43o9FEIuLJmjZ1ShM8jy8Xp/4gK2iZl4Dhy6LZLW6aIUwPPi8Q28d
NUGpwa6YZaRVPwpuTwZAJKWXZyrWU7ntjf53LL3gUsAiQtYKVIH7hdl6SR3bhynm
EefTGJnTb1aimlK2mLQ3tWik5habhYyjs998ySbxm8T8Q4k4gCL8+4UFyINcCsjj
b1wMT4DDvMTNwaJp4vWA6c8l0cwBSTE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:26 2025 by rpki-client