Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46d54d69-bbe9-311b-847e-0cc0d310478f.roa
File:                     46d54d69-bbe9-311b-847e-0cc0d310478f.roa (raw, json)
Hash identifier:          cDOvrbiLQaBGon+RG/pH1Fotqf67m3Hd4c8t79DqWzY=
Subject key identifier:   21:E7:86:67:82:65:43:99:11:89:1B:B0:E3:7D:E8:A9:74:72:51:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474850BC78937E4DA3BAFD87C5
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46d54d69-bbe9-311b-847e-0cc0d310478f.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     12222
IP address blocks:        23.79.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:bc:78:93:7e:4d:a3:ba:fd:87:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=78fdf93a-57e9-49d9-b7d4-11e0a52136c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:ba:00:86:a3:e1:bb:c9:9e:81:3c:45:52:
                    cd:73:c5:cf:20:9e:02:63:5e:3d:3b:cc:f0:f1:06:
                    71:fb:59:3e:3b:4a:cd:9d:99:24:06:a5:29:de:9f:
                    ef:47:78:30:1f:5a:7c:df:73:b9:23:52:57:13:ef:
                    a1:59:55:1e:c2:d9:cf:4a:ac:af:83:b0:a5:9f:74:
                    38:16:3f:60:f1:b7:8e:af:32:54:36:de:1c:d8:e9:
                    1b:c0:c1:e0:4c:43:6f:88:83:ee:11:c9:e7:58:94:
                    e3:c2:00:b2:93:bd:c7:c6:75:6e:99:18:f8:b0:7b:
                    52:d0:de:b6:f2:fc:69:75:7e:e2:35:c9:3c:8f:c9:
                    66:9f:60:41:f4:92:68:55:75:fe:57:84:9a:e2:be:
                    3d:68:62:4b:47:70:d5:ff:75:c0:ee:8a:fc:74:42:
                    05:5b:03:3d:ac:0a:85:b5:47:af:39:9b:91:27:f5:
                    70:f8:d0:17:c9:31:52:d7:92:c9:8f:74:b0:94:f5:
                    c4:fd:69:a1:3f:b7:f7:f6:a5:58:c5:da:23:e9:21:
                    69:4a:13:d3:26:d3:e1:00:35:85:ca:27:c5:50:04:
                    b0:61:bc:42:e1:e7:58:ff:86:d4:60:7c:d6:59:b8:
                    18:e3:80:1d:29:ed:a8:24:af:32:0d:d7:b0:f4:05:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E7:86:67:82:65:43:99:11:89:1B:B0:E3:7D:E8:A9:74:72:51:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46d54d69-bbe9-311b-847e-0cc0d310478f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.79.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:42:64:c9:70:22:36:e2:4b:79:3f:5c:0f:6a:98:00:fe:fc:
         85:af:c3:49:3c:33:15:a9:93:d2:5c:3c:61:e6:2d:34:39:ab:
         e8:b3:30:70:8d:9a:93:14:9d:ad:bd:c2:ad:3e:26:92:0f:eb:
         50:a9:20:84:a8:e3:97:3f:af:cc:56:4d:53:7a:b9:3c:77:75:
         54:81:14:ba:5c:88:da:b7:93:b3:58:db:12:20:b7:59:66:83:
         6e:5e:e8:ea:80:66:e3:3e:ce:76:10:cd:73:4e:2b:79:57:07:
         d1:55:03:95:67:08:a5:90:aa:5e:45:48:96:00:43:e0:54:e0:
         4b:c1:30:85:3a:0e:0a:8e:f4:07:5a:17:9a:b5:15:b0:ef:74:
         2e:e1:17:89:a6:10:11:32:6f:8a:ff:1f:1f:5d:4a:fa:be:31:
         82:90:d7:33:08:fa:78:da:96:64:03:fc:d4:0b:21:55:93:57:
         63:b4:52:fa:a2:56:7b:6d:3b:dc:04:a3:54:d2:3d:0e:38:ae:
         0e:1f:43:62:0d:f2:24:52:1b:10:8d:ff:00:cc:fe:5f:f7:2a:
         69:45:54:68:a5:f4:ee:eb:0c:fb:ef:31:c2:fd:06:2f:aa:d5:
         65:0d:60:39:c0:55:8a:be:e0:ef:c8:28:6c:f2:bb:53:dc:71:
         0a:8e:88:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIULx4k35No7r9h8UwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk
NzhmZGY5M2EtNTdlOS00OWQ5LWI3ZDQtMTFlMGE1MjEzNmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRK6AIaj4bvJnoE8RVLNc8XPIJ4CY149O8zw
8QZx+1k+O0rNnZkkBqUp3p/vR3gwH1p833O5I1JXE++hWVUewtnPSqyvg7Cln3Q4
Fj9g8beOrzJUNt4c2OkbwMHgTENviIPuEcnnWJTjwgCyk73HxnVumRj4sHtS0N62
8vxpdX7iNck8j8lmn2BB9JJoVXX+V4Sa4r49aGJLR3DV/3XA7or8dEIFWwM9rAqF
tUevOZuRJ/Vw+NAXyTFS15LJj3SwlPXE/WmhP7f39qVYxdoj6SFpShPTJtPhADWF
yifFUASwYbxC4edY/4bUYHzWWbgY44AdKe2oJK8yDdew9AWx5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHnhmeCZUOZEYkbsON96Kl0clEDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDZkNTRkNjktYmJlOS0z
MTFiLTg0N2UtMGNjMGQzMTA0NzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0/oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABCZMlwIjbiS3k/XA9qmAD+/IWvw0k8MxWpk9JcPGHmLTQ5q+izMHCN
mpMUna29wq0+JpIP61CpIISo45c/r8xWTVN6uTx3dVSBFLpciNq3k7NY2xIgt1lm
g25e6OqAZuM+znYQzXNOK3lXB9FVA5VnCKWQql5FSJYAQ+BU4EvBMIU6DgqO9Ada
F5q1FbDvdC7hF4mmEBEyb4r/Hx9dSvq+MYKQ1zMI+njalmQD/NQLIVWTV2O0Uvqi
VnttO9wEo1TSPQ44rg4fQ2IN8iRSGxCN/wDM/l/3KmlFVGil9O7rDPvvMcL9Bi+q
1WUNYDnAVYq+4O/IKGzyu1PccQqOiNw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:16:47 2024 by rpki-client on console-fra.rpki-client.org