Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24a6c8-c8b8-3e0c-80db-d94358f13532.roa
File:                     1e24a6c8-c8b8-3e0c-80db-d94358f13532.roa (raw, json)
Hash identifier:          0cbpF46k6EaC4qdTKHQhI8uuV9ggaC5KVeqd8J7/KRw=
Subject key identifier:   41:A3:9B:ED:0C:00:A8:C3:2C:D7:B2:56:5A:08:BB:D8:80:3C:AF:B7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479AABF962647528CF3FC901B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24a6c8-c8b8-3e0c-80db-d94358f13532.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     16625
IP address blocks:        23.37.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:f9:62:64:75:28:cf:3f:c9:01:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=b39a3651-43e7-48e1-b66a-f221f453db5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:76:66:b4:68:53:4b:8a:8d:b4:f8:ee:0f:
                    5a:ed:b5:cc:d6:e0:87:97:5a:a4:de:00:f8:79:8b:
                    ce:62:83:60:44:3e:20:be:11:3e:60:46:72:6f:94:
                    aa:11:70:f3:09:7e:3d:a6:d4:5c:05:cd:e0:35:b1:
                    ca:00:8a:e1:c8:38:6d:22:6e:dc:99:f9:61:17:a9:
                    95:21:9a:f0:26:5d:ed:ea:4c:02:a0:5d:93:0c:07:
                    18:16:b0:10:b7:fc:1c:4b:ab:6c:55:cd:b5:23:67:
                    2c:f1:1d:a5:79:c9:17:9a:98:9b:53:34:18:17:e1:
                    f1:f5:fd:6b:55:5c:ce:c6:3f:45:4b:18:26:b1:4a:
                    88:24:d3:e8:87:d1:40:b9:0f:68:e7:67:aa:19:9f:
                    ef:66:40:f0:cd:b1:ec:fc:f3:13:cb:64:18:7c:22:
                    fe:81:d1:73:d1:ce:03:cd:27:c1:ef:76:68:76:41:
                    1a:8a:c9:e7:31:2a:2c:8b:1a:0b:09:2b:e7:5f:95:
                    42:8b:ab:47:1c:01:ca:d3:7a:66:39:3a:10:69:a7:
                    f7:eb:28:c1:89:d1:e8:60:85:35:d5:cf:dd:bb:2e:
                    67:c9:1c:31:19:bc:eb:bc:3e:1a:f9:bd:25:aa:9b:
                    78:bb:ef:d6:d4:d6:b5:5e:1a:7d:d6:93:ae:f1:8f:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:9B:ED:0C:00:A8:C3:2C:D7:B2:56:5A:08:BB:D8:80:3C:AF:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24a6c8-c8b8-3e0c-80db-d94358f13532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.37.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:98:bd:d6:80:c4:d1:96:6a:f3:a0:8f:5a:39:93:d5:9e:
         b7:8d:a7:09:17:18:c0:3a:3d:b3:02:9f:9b:76:d8:42:aa:0b:
         e1:8b:22:cc:e7:9a:e7:d0:28:e3:e9:13:de:39:1f:d0:17:7e:
         fe:ed:ad:03:e2:5f:ed:9d:4e:ec:0a:ef:94:26:bc:f1:95:2e:
         cd:13:fe:75:0e:d9:a6:fc:d2:39:76:38:ea:b0:dc:df:6d:46:
         39:cd:a6:77:01:07:32:da:a5:09:51:8c:2f:99:e1:c8:a2:a8:
         bb:f2:04:34:bd:b1:32:5b:ef:2f:60:24:b5:0c:c9:19:fd:08:
         13:e2:d5:37:f3:69:26:9a:a6:f6:ee:1b:6c:cf:4a:1c:5d:ea:
         80:ef:d5:ca:45:6f:cf:c8:82:06:53:b7:82:09:da:06:0f:ce:
         72:6d:e9:47:27:a4:80:2e:aa:d9:5b:07:86:73:f7:b9:df:4f:
         29:bf:31:3e:cd:5e:70:69:45:d5:66:12:96:62:b5:84:45:76:
         e4:45:02:26:e8:10:b6:79:7c:77:c1:02:08:dc:61:b2:f1:2d:
         76:1c:72:c5:cd:c5:f0:0c:df:fe:ac:92:76:da:67:e9:dd:10:
         a4:5b:9e:73:79:46:90:4f:2f:4e:60:16:41:c8:af:cd:62:36:
         54:c2:c4:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq/liZHUozz/JAbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk
YjM5YTM2NTEtNDNlNy00OGUxLWI2NmEtZjIyMWY0NTNkYjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0d2ZrRoU0uKjbT47g9a7bXM1uCHl1qk3gD4
eYvOYoNgRD4gvhE+YEZyb5SqEXDzCX49ptRcBc3gNbHKAIrhyDhtIm7cmflhF6mV
IZrwJl3t6kwCoF2TDAcYFrAQt/wcS6tsVc21I2cs8R2leckXmpibUzQYF+Hx9f1r
VVzOxj9FSxgmsUqIJNPoh9FAuQ9o52eqGZ/vZkDwzbHs/PMTy2QYfCL+gdFz0c4D
zSfB73ZodkEaisnnMSosixoLCSvnX5VCi6tHHAHK03pmOToQaaf36yjBidHoYIU1
1c/duy5nyRwxGbzrvD4a+b0lqpt4u+/W1Na1Xhp91pOu8Y9GTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGjm+0MAKjDLNeyVloIu9iAPK+3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUyNGE2YzgtYzhiOC0z
ZTBjLTgwZGItZDk0MzU4ZjEzNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyXoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGx3mL3WgMTRlmrzoI9aOZPVnreNpwkXGMA6PbMCn5t22EKqC+GLIszn
mufQKOPpE945H9AXfv7trQPiX+2dTuwK75QmvPGVLs0T/nUO2ab80jl2OOqw3N9t
RjnNpncBBzLapQlRjC+Z4ciiqLvyBDS9sTJb7y9gJLUMyRn9CBPi1TfzaSaapvbu
G2zPShxd6oDv1cpFb8/IggZTt4IJ2gYPznJt6UcnpIAuqtlbB4Zz97nfTym/MT7N
XnBpRdVmEpZitYRFduRFAiboELZ5fHfBAgjcYbLxLXYccsXNxfAM3/6sknbaZ+nd
EKRbnnN5RpBPL05gFkHIr81iNlTCxAY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:32 2024 by rpki-client on console-ams.rpki-client.org