Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a099f2e-f8da-30e4-9bcb-5b4ff46cb9f6.roa
File:                     3a099f2e-f8da-30e4-9bcb-5b4ff46cb9f6.roa (raw, json)
Hash identifier:          2Ywt1qbwx9Em4nEtBe2UBMmaDRVRXS7i5xcohq0ag0I=
Subject key identifier:   F3:1A:F4:85:9A:74:71:34:E4:FA:07:15:8A:57:3E:6A:2F:DD:7E:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C4AA2A7E3C5761DFC90CE840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a099f2e-f8da-30e4-9bcb-5b4ff46cb9f6.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     20940
IP address blocks:        23.195.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:2a:7e:3c:57:61:df:c9:0c:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=e944c835-aa0c-4f8b-b337-4d3d6911412a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:bf:75:7c:bc:0b:a8:8c:48:62:11:fa:aa:
                    f2:40:af:c5:40:1e:78:76:49:a3:f9:5d:6a:87:d4:
                    22:32:4e:f3:6c:87:f3:95:2b:5f:f4:66:b7:e1:3a:
                    0b:05:5b:f9:f6:9b:10:1b:0e:6a:8f:d3:e5:38:97:
                    fe:04:14:aa:99:75:2a:63:13:23:a0:86:d3:f5:30:
                    08:d1:d4:eb:88:ef:80:13:d5:23:35:f4:4b:b6:fd:
                    4b:25:cc:5e:28:3c:d3:d5:c9:7f:7a:31:ae:c2:3e:
                    ca:46:d1:c8:d3:37:c3:19:69:2d:47:03:3d:4b:52:
                    f7:29:9b:c3:55:c1:a1:a2:3d:1b:3b:09:49:26:32:
                    00:b3:77:0f:bc:ba:85:8a:68:88:34:0b:ff:32:9a:
                    b5:a9:6c:9b:08:86:dd:3f:cd:89:b4:35:80:c9:fe:
                    09:bd:12:dc:47:4c:22:fc:80:ed:90:78:48:62:b0:
                    56:a2:1f:fd:6b:c8:fe:54:05:e7:d5:ed:46:af:ee:
                    d1:6d:61:ff:03:d2:41:66:66:6b:69:4a:76:30:8e:
                    46:30:5f:5c:7b:5a:db:3a:52:c3:79:f0:c2:91:58:
                    29:f2:b4:3b:16:81:48:a3:3d:fc:5d:07:1c:be:0c:
                    a1:0c:8f:b0:28:5b:a2:ed:3d:e9:c2:66:11:b0:3b:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1A:F4:85:9A:74:71:34:E4:FA:07:15:8A:57:3E:6A:2F:DD:7E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a099f2e-f8da-30e4-9bcb-5b4ff46cb9f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:37:4b:42:7e:aa:da:a9:5d:c8:02:1d:14:08:b5:50:b1:d7:
         9b:e7:41:66:4b:36:21:bc:e4:f2:2c:18:98:f3:db:2c:c0:0b:
         eb:e4:72:d6:03:53:c3:2d:c6:75:ec:b2:c0:c8:28:0f:2b:a6:
         43:91:27:d8:24:ce:b0:20:ce:21:a7:f5:be:4a:26:c1:cf:f4:
         95:d2:31:07:71:67:8a:a8:af:d8:df:6b:e6:d5:99:78:fc:76:
         fc:12:44:3a:d7:78:b7:84:a4:63:f1:eb:89:7f:e3:e5:ef:83:
         3e:6b:87:57:28:fd:7c:32:18:fc:b2:02:f0:90:d5:5f:70:2c:
         97:82:68:86:ca:6c:26:98:08:ec:7a:22:1d:30:e6:51:b8:c2:
         c3:0d:a3:0a:5d:7b:ba:d3:c0:3a:18:0b:31:16:a6:9e:08:fb:
         62:6b:f1:c5:a8:2a:23:4d:39:60:ed:4c:45:d7:7c:ef:6d:24:
         2c:42:87:65:c8:da:88:eb:1f:df:97:6f:7a:e0:85:52:de:4a:
         7d:6a:12:56:2e:1d:8b:14:f5:25:cd:be:a3:9f:8c:55:b8:00:
         be:ae:3c:86:ce:aa:8a:26:8e:8c:53:3c:82:0d:4c:df:bb:36:
         06:83:73:bd:d2:b2:4e:68:36:11:b5:cd:ad:91:a1:36:e6:a1:
         2c:82:ec:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfEqip+PFdh38kM6EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
ZTk0NGM4MzUtYWEwYy00ZjhiLWIzMzctNGQzZDY5MTE0MTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fe/dXy8C6iMSGIR+qryQK/FQB54dkmj+V1q
h9QiMk7zbIfzlStf9Ga34ToLBVv59psQGw5qj9PlOJf+BBSqmXUqYxMjoIbT9TAI
0dTriO+AE9UjNfRLtv1LJcxeKDzT1cl/ejGuwj7KRtHI0zfDGWktRwM9S1L3KZvD
VcGhoj0bOwlJJjIAs3cPvLqFimiINAv/Mpq1qWybCIbdP82JtDWAyf4JvRLcR0wi
/IDtkHhIYrBWoh/9a8j+VAXn1e1Gr+7RbWH/A9JBZmZraUp2MI5GMF9ce1rbOlLD
efDCkVgp8rQ7FoFIoz38XQccvgyhDI+wKFui7T3pwmYRsDv5zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMa9IWadHE05PoHFYpXPmov3X7mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2EwOTlmMmUtZjhkYS0z
MGU0LTliY2ItNWI0ZmY0NmNiOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8N3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQ3S0J+qtqpXcgCHRQItVCx15vnQWZLNiG85PIsGJjz2yzAC+vkctYD
U8MtxnXsssDIKA8rpkORJ9gkzrAgziGn9b5KJsHP9JXSMQdxZ4qor9jfa+bVmXj8
dvwSRDrXeLeEpGPx64l/4+Xvgz5rh1co/XwyGPyyAvCQ1V9wLJeCaIbKbCaYCOx6
Ih0w5lG4wsMNowpde7rTwDoYCzEWpp4I+2Jr8cWoKiNNOWDtTEXXfO9tJCxCh2XI
2ojrH9+Xb3rghVLeSn1qElYuHYsU9SXNvqOfjFW4AL6uPIbOqoomjoxTPIINTN+7
NgaDc73Ssk5oNhG1za2RoTbmoSyC7F4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:36 2024 by rpki-client on console-fra.rpki-client.org