Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0717f1f4-a7eb-3122-982c-eb34abf703ca.roa
File:                     0717f1f4-a7eb-3122-982c-eb34abf703ca.roa (raw, json)
Hash identifier:          qiY3CBHu4O0efLp37HktO+Ah0TcWIrURWD2Sh0Q2kcQ=
Subject key identifier:   AD:15:33:10:16:72:24:EA:50:1D:D9:90:9F:13:E2:B5:34:47:10:3B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB666DE2D67B609D8E3F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0717f1f4-a7eb-3122-982c-eb34abf703ca.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        23.54.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:66:6d:e2:d6:7b:60:9d:8e:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=e35f0739-d709-4b15-b4da-29db7c13d9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:6a:59:f1:86:96:e6:5a:78:4b:42:06:bb:
                    17:80:c6:06:fb:53:75:00:ff:26:59:34:f6:de:4c:
                    43:88:1e:2d:51:de:54:b4:64:ad:95:d5:b3:24:17:
                    8d:d6:f1:12:3a:43:9e:51:58:67:af:4b:9f:51:0d:
                    c9:9a:f6:bc:d2:ad:70:4c:8a:e5:8d:8d:b2:9f:f8:
                    34:e6:4a:52:0a:03:1b:46:9b:07:cc:49:7a:48:76:
                    e7:18:28:7e:60:c6:d9:c0:38:e4:ad:c2:d9:27:20:
                    6b:ea:8e:0d:83:e4:09:84:5e:60:99:db:5a:3a:cc:
                    d8:a8:3c:64:ec:ae:26:8c:0f:80:37:73:cf:64:23:
                    ef:b3:30:54:19:40:b9:22:35:b0:f3:c2:12:6e:2f:
                    e9:40:f9:62:43:76:87:0d:52:13:20:87:4a:5b:a0:
                    e4:f2:a4:2e:97:87:7e:4c:8d:17:8c:20:3c:b6:b6:
                    b7:b9:5e:aa:58:25:c9:88:b5:89:7d:c1:3d:b5:af:
                    b8:8e:44:74:e9:79:4d:67:a2:4f:66:54:00:fc:0a:
                    67:96:1b:e9:f3:ee:ec:87:15:e3:5e:95:b4:d7:67:
                    7c:14:0a:43:fa:11:3d:f7:39:12:e4:46:90:b3:ed:
                    b6:53:93:14:ed:3a:ef:1e:ac:05:fa:7f:b2:5e:64:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:33:10:16:72:24:EA:50:1D:D9:90:9F:13:E2:B5:34:47:10:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0717f1f4-a7eb-3122-982c-eb34abf703ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:10:70:23:35:21:d0:62:e3:2a:37:9d:b5:7f:7b:b9:6d:
         28:07:e5:a5:8e:e4:be:19:42:7f:38:1b:3e:50:25:89:4b:a4:
         60:4c:72:2b:6b:ba:f5:20:47:45:a2:3b:02:b2:5f:af:b4:3f:
         9a:89:45:f1:5b:7d:ce:88:5e:8f:89:c8:14:3e:71:2b:26:33:
         1e:94:af:ec:7b:f8:4d:18:45:d7:49:f4:36:e6:97:ee:fd:a5:
         4c:37:8e:45:04:b0:75:61:51:f2:6e:4c:fe:8d:5f:bf:76:88:
         94:48:23:03:8b:39:2b:50:8d:3e:12:83:29:c8:7e:cb:fe:e2:
         53:37:34:34:c5:cd:5e:22:eb:89:ab:f9:74:33:b2:76:51:81:
         6a:bf:90:69:53:d9:46:0f:30:e9:86:bd:97:9c:b6:cb:1f:42:
         3b:21:e5:ae:35:30:b9:e7:cb:77:80:c5:fd:12:f4:a2:28:10:
         5c:9d:06:14:0c:79:f9:fc:48:9b:ca:1a:3d:ec:1c:4c:49:30:
         e3:46:74:a8:42:5e:7c:a9:cb:af:dd:5f:eb:f3:3d:12:97:c0:
         8e:6f:10:07:5e:77:c0:44:f2:f7:0c:3e:88:9c:eb:8c:6e:c3:
         21:fc:8b:bd:7f:4e:1c:38:83:b2:af:69:78:5d:eb:c6:fc:aa:
         28:c6:ed:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2Zt4tZ7YJ2OP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
ZTM1ZjA3MzktZDcwOS00YjE1LWI0ZGEtMjlkYjdjMTNkOWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8VqWfGGluZaeEtCBrsXgMYG+1N1AP8mWTT2
3kxDiB4tUd5UtGStldWzJBeN1vESOkOeUVhnr0ufUQ3Jmva80q1wTIrljY2yn/g0
5kpSCgMbRpsHzEl6SHbnGCh+YMbZwDjkrcLZJyBr6o4Ng+QJhF5gmdtaOszYqDxk
7K4mjA+AN3PPZCPvszBUGUC5IjWw88ISbi/pQPliQ3aHDVITIIdKW6Dk8qQul4d+
TI0XjCA8tra3uV6qWCXJiLWJfcE9ta+4jkR06XlNZ6JPZlQA/Apnlhvp8+7shxXj
XpW012d8FApD+hE99zkS5EaQs+22U5MU7TrvHqwF+n+yXmTD4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0VMxAWciTqUB3ZkJ8T4rU0RxA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDcxN2YxZjQtYTdlYi0z
MTIyLTk4MmMtZWIzNGFiZjcwM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzZKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxEEHAjNSHQYuMqN521f3u5bSgH5aWO5L4ZQn84Gz5QJYlLpGBMcitr
uvUgR0WiOwKyX6+0P5qJRfFbfc6IXo+JyBQ+cSsmMx6Ur+x7+E0YRddJ9Dbml+79
pUw3jkUEsHVhUfJuTP6NX792iJRIIwOLOStQjT4SgynIfsv+4lM3NDTFzV4i64mr
+XQzsnZRgWq/kGlT2UYPMOmGvZectssfQjsh5a41MLnny3eAxf0S9KIoEFydBhQM
efn8SJvKGj3sHExJMONGdKhCXnypy6/dX+vzPRKXwI5vEAded8BE8vcMPoic64xu
wyH8i71/Thw4g7KvaXhd68b8qijG7T4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:47 2025 by rpki-client