Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c61588-74c1-3d64-a90f-d4f275438e75.roa
File:                     25c61588-74c1-3d64-a90f-d4f275438e75.roa (raw, json)
Hash identifier:          JbunFHmKXb0n+3MmAxngUS9oURv0sYc1XPDyMXIr4KU=
Subject key identifier:   3D:93:92:34:AD:42:1C:89:AB:98:8F:36:DA:1D:21:72:60:80:29:A7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DB9802C32D4CF69CE391A080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c61588-74c1-3d64-a90f-d4f275438e75.roa
Signing time:             Mon 13 May 2024 09:34:23 +0000
ROA not before:           Mon 13 May 2024 09:34:23 +0000
ROA not after:            Sun 11 Aug 2024 09:34:23 +0000
asID:                     20940
IP address blocks:        23.36.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:98:02:c3:2d:4c:f6:9c:e3:91:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 09:34:23 2024 GMT
            Not After : Aug 11 09:34:23 2024 GMT
        Subject: CN=8c8cca5d-7524-43b3-ad49-9665462ebcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4a:1f:38:f4:a5:13:96:9b:16:e2:11:a9:67:
                    5e:8f:e8:91:ce:31:c0:67:a8:bd:65:a9:c2:c3:b3:
                    41:3a:c8:00:03:52:35:49:8b:55:96:fa:e6:d6:2b:
                    a2:e9:f5:b8:0b:ad:54:88:44:8e:f7:4f:1c:ee:25:
                    0b:6f:c3:d6:07:3f:d2:3a:37:9f:8e:d9:c5:37:31:
                    45:e1:f8:e6:b5:5e:59:ce:51:ed:eb:b4:a6:bb:9b:
                    4b:eb:83:fc:e4:e2:2e:07:55:a9:22:31:07:83:a8:
                    a7:0e:0f:2f:cb:86:9a:04:d1:7a:85:a9:78:d9:76:
                    5b:08:5a:3c:b2:05:90:11:21:88:09:9f:84:5c:b4:
                    d2:28:c6:c8:82:d5:57:27:2b:5f:a6:6e:44:97:51:
                    76:e0:1d:43:e0:d8:60:68:fb:d8:74:8a:c1:0d:33:
                    42:9d:27:bd:21:31:bf:c5:85:b9:11:10:74:61:b0:
                    90:91:32:c1:cf:21:e1:fd:63:d1:18:cb:0d:5f:77:
                    50:46:7b:c7:fb:ac:7c:08:d9:a2:47:71:78:cf:cd:
                    e1:a7:b6:a9:1d:a9:b0:69:dc:ce:10:4b:b3:97:3a:
                    ee:c7:42:65:e4:1d:11:14:f3:1f:40:24:31:77:1a:
                    f8:fd:43:55:92:c0:89:cc:d6:d9:d8:d9:67:15:23:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:93:92:34:AD:42:1C:89:AB:98:8F:36:DA:1D:21:72:60:80:29:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c61588-74c1-3d64-a90f-d4f275438e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:9f:0e:ca:85:9d:bb:56:c8:a0:c8:dc:21:49:17:05:e3:
         4a:62:f3:b9:6e:88:66:b1:b7:4b:17:ed:db:8e:26:a5:ab:47:
         0d:30:75:ee:2b:27:74:42:d8:25:16:54:6e:cc:3e:c5:63:ab:
         91:c7:6b:37:b6:00:37:df:9a:22:48:7b:75:78:c2:61:cf:72:
         98:89:b0:2d:2f:e4:89:5a:ee:d7:7e:e1:89:e2:75:f7:81:11:
         f5:82:fd:3b:62:0b:47:72:d9:95:02:60:fd:f9:ea:10:76:97:
         20:57:a6:a4:30:a4:49:69:5b:40:d1:49:4d:eb:cb:18:d3:61:
         d6:33:4f:a2:a3:3e:06:a9:24:30:aa:bc:9c:ae:fd:be:51:e6:
         0a:0c:b5:e9:72:4b:cc:6c:d6:13:10:04:b8:69:b6:5a:d5:6a:
         e7:25:fd:fe:82:0a:c6:90:0e:16:b5:e1:f4:92:c9:1b:55:22:
         42:dd:db:01:c9:31:82:56:74:8a:8c:2e:5f:12:7d:28:bc:2d:
         bf:3a:b6:71:68:32:6c:f2:1d:e8:32:01:87:e2:b2:e8:62:1d:
         ac:8a:27:22:83:60:2f:eb:e5:0e:ef:14:72:b6:8b:7c:35:64:
         26:b3:e2:68:b0:6d:e1:ff:c9:73:2e:df:bf:3f:d7:b0:c2:ce:
         bd:a5:ea:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXbmALDLUz2nOORoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxMzA5MzQyM1oXDTI0MDgxMTA5MzQyM1owLzEtMCsGA1UEAxMk
OGM4Y2NhNWQtNzUyNC00M2IzLWFkNDktOTY2NTQ2MmViY2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkofOPSlE5abFuIRqWdej+iRzjHAZ6i9ZanC
w7NBOsgAA1I1SYtVlvrm1iui6fW4C61UiESO908c7iULb8PWBz/SOjefjtnFNzFF
4fjmtV5ZzlHt67Smu5tL64P85OIuB1WpIjEHg6inDg8vy4aaBNF6hal42XZbCFo8
sgWQESGICZ+EXLTSKMbIgtVXJytfpm5El1F24B1D4NhgaPvYdIrBDTNCnSe9ITG/
xYW5ERB0YbCQkTLBzyHh/WPRGMsNX3dQRnvH+6x8CNmiR3F4z83hp7apHamwadzO
EEuzlzrux0Jl5B0RFPMfQCQxdxr4/UNVksCJzNbZ2NlnFSMKdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2TkjStQhyJq5iPNtodIXJggCmnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjVjNjE1ODgtNzRjMS0z
ZDY0LWE5MGYtZDRmMjc1NDM4ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyTGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIenw7KhZ27VsigyNwhSRcF40pi87luiGaxt0sX7duOJqWrRw0wde4r
J3RC2CUWVG7MPsVjq5HHaze2ADffmiJIe3V4wmHPcpiJsC0v5Ila7td+4YnidfeB
EfWC/TtiC0dy2ZUCYP356hB2lyBXpqQwpElpW0DRSU3ryxjTYdYzT6KjPgapJDCq
vJyu/b5R5goMtelyS8xs1hMQBLhptlrVaucl/f6CCsaQDha14fSSyRtVIkLd2wHJ
MYJWdIqMLl8SfSi8Lb86tnFoMmzyHegyAYfisuhiHayKJyKDYC/r5Q7vFHK2i3w1
ZCaz4miwbeH/yXMu378/17DCzr2l6q8=
-----END CERTIFICATE-----
Generated at Wed May 29 03:12:56 2024 by rpki-client on console-ams.rpki-client.org