Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ff0224a-1e8e-3f75-a518-8e3ba09496e4.roa
File:                     2ff0224a-1e8e-3f75-a518-8e3ba09496e4.roa (raw, json)
Hash identifier:          pCVUxQtIIrP2HhXLQzv3eTtaBvYDUJkLBSClkSDfaik=
Subject key identifier:   BA:49:41:F9:60:D5:5C:9C:54:66:9A:84:EA:36:1C:EA:34:8B:B8:BD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858459340426DFBD11BFA57FB7300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ff0224a-1e8e-3f75-a518-8e3ba09496e4.roa
Signing time:             Wed 17 Apr 2024 11:39:23 +0000
ROA not before:           Wed 17 Apr 2024 11:39:23 +0000
ROA not after:            Tue 16 Jul 2024 11:39:23 +0000
asID:                     16625
IP address blocks:        23.64.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:40:42:6d:fb:d1:1b:fa:57:fb:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 11:39:23 2024 GMT
            Not After : Jul 16 11:39:23 2024 GMT
        Subject: CN=9d1bc835-b16e-42ef-babb-9ec7910dcf7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d9:14:c4:b3:80:d9:cd:f4:cd:1c:84:69:6f:
                    2c:6e:79:25:16:1f:d4:24:db:97:f3:d8:67:a9:1f:
                    cd:8c:45:ee:f9:af:33:ec:9d:1c:09:a5:ab:89:86:
                    8b:94:ed:17:f7:bf:5f:c7:8b:ad:df:65:da:96:78:
                    0e:71:93:78:d4:aa:52:89:19:c5:46:ce:fc:ab:82:
                    19:7e:9e:8c:53:2b:48:8f:dd:ad:33:a5:82:56:30:
                    b9:3b:44:63:50:dd:d4:f0:97:4a:c7:42:54:ea:e9:
                    71:4c:05:a1:84:64:08:29:02:a0:fd:38:96:2e:a1:
                    c3:1d:d1:1e:b4:e0:cb:7f:f1:56:24:16:c2:94:01:
                    5d:f4:e3:ce:e9:b8:04:80:98:5d:66:10:da:8b:c0:
                    d3:a6:dc:ea:01:f7:d4:05:cd:1f:53:89:f2:d6:80:
                    01:b1:e6:21:18:0a:c9:34:37:82:c2:99:7e:d8:81:
                    e8:bc:25:69:7c:9d:18:a4:62:81:8a:4e:10:47:f1:
                    0d:ef:8c:da:85:c1:72:5e:aa:69:f7:47:f7:bf:85:
                    33:4e:49:1f:de:57:0c:9e:36:6d:ee:be:4b:68:26:
                    2e:39:62:a2:57:b8:61:05:cd:8f:d1:ff:34:37:b0:
                    74:4a:66:71:8f:e8:46:98:78:44:74:8e:9c:74:57:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:49:41:F9:60:D5:5C:9C:54:66:9A:84:EA:36:1C:EA:34:8B:B8:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ff0224a-1e8e-3f75-a518-8e3ba09496e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.64.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4a:e9:da:d7:a9:23:af:ce:cb:78:48:ce:13:bb:29:f8:c1:
         a1:01:4b:6b:7a:32:91:de:20:65:57:bf:08:5d:fa:fd:cf:d5:
         ae:7e:bd:3c:fa:cb:01:ae:4a:bb:1b:73:b0:e4:2a:14:fe:58:
         04:4e:0a:1a:60:91:0d:0c:56:6e:56:25:c9:52:f8:bb:e9:98:
         bf:e2:90:d3:85:49:65:fb:d2:f4:d8:d3:99:a1:9c:81:47:b7:
         18:69:d1:5c:a3:74:5a:3e:74:2c:fe:f3:bd:1b:b7:64:b9:83:
         3d:f3:19:a3:46:91:ec:17:dc:28:87:99:98:b1:74:9f:81:e5:
         b4:81:d3:8b:66:f9:db:c8:44:38:ef:f0:0c:01:d9:58:da:f2:
         ee:eb:20:1f:0e:03:0e:5c:7a:aa:f3:24:10:ef:44:4b:e7:bd:
         6c:ee:fc:b6:0f:2f:12:d5:cf:bc:c1:dc:02:92:46:75:de:9b:
         94:67:32:ab:31:88:b2:0f:dc:fd:cc:df:0a:16:ec:6c:8a:72:
         f5:86:78:0f:9b:b2:06:42:4a:57:b1:ea:54:fa:71:32:55:ee:
         8b:ae:94:3f:86:b2:66:f9:51:36:7c:a2:d0:07:a1:db:77:33:
         52:62:31:d5:79:47:c4:31:d8:7f:17:4c:7e:3c:fc:6c:a8:6d:
         c5:a3:c4:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTQEJt+9Eb+lf7cwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQxNzExMzkyM1oXDTI0MDcxNjExMzkyM1owLzEtMCsGA1UEAxMk
OWQxYmM4MzUtYjE2ZS00MmVmLWJhYmItOWVjNzkxMGRjZjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidkUxLOA2c30zRyEaW8sbnklFh/UJNuX89hn
qR/NjEXu+a8z7J0cCaWriYaLlO0X979fx4ut32XalngOcZN41KpSiRnFRs78q4IZ
fp6MUytIj92tM6WCVjC5O0RjUN3U8JdKx0JU6ulxTAWhhGQIKQKg/TiWLqHDHdEe
tODLf/FWJBbClAFd9OPO6bgEgJhdZhDai8DTptzqAffUBc0fU4ny1oABseYhGArJ
NDeCwpl+2IHovCVpfJ0YpGKBik4QR/EN74zahcFyXqpp90f3v4UzTkkf3lcMnjZt
7r5LaCYuOWKiV7hhBc2P0f80N7B0SmZxj+hGmHhEdI6cdFdTwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpJQflg1VycVGaahOo2HOo0i7i9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmZmMDIyNGEtMWU4ZS0z
Zjc1LWE1MTgtOGUzYmEwOTQ5NmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0BgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFK6drXqSOvzst4SM4Tuyn4waEBS2t6MpHeIGVXvwhd+v3P1a5+vTz6
ywGuSrsbc7DkKhT+WAROChpgkQ0MVm5WJclS+LvpmL/ikNOFSWX70vTY05mhnIFH
txhp0VyjdFo+dCz+870bt2S5gz3zGaNGkewX3CiHmZixdJ+B5bSB04tm+dvIRDjv
8AwB2Vja8u7rIB8OAw5ceqrzJBDvREvnvWzu/LYPLxLVz7zB3AKSRnXem5RnMqsx
iLIP3P3M3woW7GyKcvWGeA+bsgZCSlex6lT6cTJV7ouulD+Gsmb5UTZ8otAHodt3
M1JiMdV5R8Qx2H8XTH48/GyobcWjxEI=
-----END CERTIFICATE-----
Generated at Fri May 17 01:57:48 2024 by rpki-client on console-fra.rpki-client.org