Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56922474-c093-3531-a558-165b87d329f0.roa
File:                     56922474-c093-3531-a558-165b87d329f0.roa (raw, json)
Hash identifier:          CBX+cCzouJDbvGsO1CUOxrX7SUJVCsVCaqouBv/R3Xk=
Subject key identifier:   9E:A9:0A:8C:E5:FD:69:B5:D6:93:BA:41:43:6B:1D:2B:21:A8:E4:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D999FE9143E30BAC833DA440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56922474-c093-3531-a558-165b87d329f0.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     16625
IP address blocks:        23.206.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:fe:91:43:e3:0b:ac:83:3d:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=fd71be29-4f86-47d7-a50c-ec7eb75cbbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:13:d8:36:0a:69:7a:55:66:e6:f6:09:63:
                    fc:41:47:90:f0:01:a4:93:35:b4:41:43:3a:00:df:
                    de:1f:c2:69:24:30:e6:70:ba:f4:05:3e:6d:85:78:
                    ad:30:16:ca:7f:17:51:03:88:aa:0b:2f:36:5f:2f:
                    95:3e:27:c7:98:b9:ce:1b:6e:a8:5a:b0:f2:9b:fd:
                    05:71:27:68:22:c2:a4:f6:59:46:01:c3:79:f4:ce:
                    3c:61:ab:82:cb:b3:89:cd:42:1c:c1:bd:ec:97:0a:
                    8e:eb:69:4c:c5:d6:73:dd:83:97:8e:39:ce:47:58:
                    92:63:52:95:0e:45:50:88:d2:78:27:27:2d:fd:06:
                    2a:ef:46:25:4c:53:e1:fe:85:fa:bf:ad:11:6d:fa:
                    9f:02:34:18:fc:38:9d:69:bf:b1:12:e4:39:8f:1d:
                    50:db:c4:07:fa:33:9a:b7:5f:77:11:e5:48:eb:64:
                    48:ae:07:95:4a:53:29:05:52:07:b2:cf:55:08:3f:
                    f3:25:60:2f:4c:95:13:1c:c6:9c:47:a5:87:a8:cb:
                    20:7e:d1:83:0e:00:a6:86:9e:db:75:1e:ce:5c:ac:
                    3e:19:b9:68:9c:f9:82:3e:d3:b6:e5:82:7d:d4:7f:
                    a6:ad:3a:5c:85:7b:e3:42:e1:9f:4a:b2:b6:e7:62:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A9:0A:8C:E5:FD:69:B5:D6:93:BA:41:43:6B:1D:2B:21:A8:E4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56922474-c093-3531-a558-165b87d329f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:97:51:d4:0d:f8:3b:26:d6:1d:b1:dd:53:55:77:6e:72:a5:
         cf:07:01:bf:05:5d:e0:b8:86:95:3a:54:1a:55:ca:6f:71:1e:
         0a:77:af:3f:0f:ec:41:97:bc:44:4c:d4:7f:19:dc:44:a7:85:
         c2:f9:c0:61:bc:87:8d:75:03:00:86:33:58:94:82:74:32:d0:
         0d:b0:1d:de:cb:31:9b:c0:8a:39:d5:f4:fe:b7:40:be:c6:46:
         12:d6:55:fa:42:27:d1:80:6e:38:4d:d7:10:fa:37:61:65:67:
         16:59:b3:36:a1:cf:3e:e8:90:fe:92:f5:48:66:88:3a:89:e5:
         44:94:d5:7f:53:eb:cd:fc:48:6f:00:1e:28:18:83:60:11:81:
         c5:82:5e:bd:01:40:c2:00:0e:9d:e3:68:e2:d1:09:69:db:57:
         20:21:2b:cc:18:ab:83:3b:58:05:21:e1:04:00:2b:5e:91:03:
         0b:cd:85:b1:ef:cc:2c:d3:d5:41:66:ef:1c:72:57:fb:8c:a8:
         b3:dc:66:38:d4:46:b4:b7:50:7c:fe:6e:fd:aa:11:11:e9:dd:
         7d:4d:02:d7:ae:8d:21:78:c2:1b:1b:1e:d9:64:e6:ad:3b:57:
         d9:00:08:00:8b:8c:b2:f1:69:f5:1c:f2:a1:c1:d2:12:34:4d:
         3f:6e:47:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmf6RQ+MLrIM9pEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
ZmQ3MWJlMjktNGY4Ni00N2Q3LWE1MGMtZWM3ZWI3NWNiYmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3ET2DYKaXpVZub2CWP8QUeQ8AGkkzW0QUM6
AN/eH8JpJDDmcLr0BT5thXitMBbKfxdRA4iqCy82Xy+VPifHmLnOG26oWrDym/0F
cSdoIsKk9llGAcN59M48YauCy7OJzUIcwb3slwqO62lMxdZz3YOXjjnOR1iSY1KV
DkVQiNJ4Jyct/QYq70YlTFPh/oX6v60RbfqfAjQY/Didab+xEuQ5jx1Q28QH+jOa
t193EeVI62RIrgeVSlMpBVIHss9VCD/zJWAvTJUTHMacR6WHqMsgftGDDgCmhp7b
dR7OXKw+GblonPmCPtO25YJ91H+mrTpchXvjQuGfSrK252IUSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6pCozl/Wm11pO6QUNrHSshqOS6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTY5MjI0NzQtYzA5My0z
NTMxLWE1NTgtMTY1Yjg3ZDMyOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF84QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICXUdQN+Dsm1h2x3VNVd25ypc8HAb8FXeC4hpU6VBpVym9xHgp3rz8P
7EGXvERM1H8Z3ESnhcL5wGG8h411AwCGM1iUgnQy0A2wHd7LMZvAijnV9P63QL7G
RhLWVfpCJ9GAbjhN1xD6N2FlZxZZszahzz7okP6S9UhmiDqJ5USU1X9T6838SG8A
HigYg2ARgcWCXr0BQMIADp3jaOLRCWnbVyAhK8wYq4M7WAUh4QQAK16RAwvNhbHv
zCzT1UFm7xxyV/uMqLPcZjjURrS3UHz+bv2qERHp3X1NAteujSF4whsbHtlk5q07
V9kACACLjLLxafUc8qHB0hI0TT9uR6U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:43 2024 by rpki-client on console-fra.rpki-client.org