Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58333c01-4d13-3620-9b5e-3f5d35b06acc.roa
File:                     58333c01-4d13-3620-9b5e-3f5d35b06acc.roa (raw, json)
Hash identifier:          3Vb30ZPod8sKFY9+cEJuDJ+5pmMyCSIr5GsleP+Qwjk=
Subject key identifier:   E5:8C:67:81:15:98:86:92:41:51:B8:C7:09:D1:79:51:D5:5E:D9:3E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845E191DF9C9F76C6D1700776E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58333c01-4d13-3620-9b5e-3f5d35b06acc.roa
Signing time:             Wed 15 May 2024 12:56:52 +0000
ROA not before:           Wed 15 May 2024 12:56:52 +0000
ROA not after:            Tue 13 Aug 2024 12:56:52 +0000
asID:                     20940
IP address blocks:        23.48.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:91:df:9c:9f:76:c6:d1:70:07:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 12:56:52 2024 GMT
            Not After : Aug 13 12:56:52 2024 GMT
        Subject: CN=f60a71e7-4438-4858-b3e6-cdeb6692c0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:2c:2d:10:17:cb:2d:f9:ca:20:5d:a9:c1:
                    c9:62:cc:b8:ce:e9:f5:1d:17:23:9b:ec:2b:36:3d:
                    e0:8b:e2:23:e4:cf:f0:c7:1b:86:22:6d:bd:52:77:
                    63:d7:73:31:a3:a6:19:0f:ee:aa:3a:ad:75:06:5a:
                    79:b7:86:ea:8e:45:22:7b:3e:8c:cd:de:57:b0:3b:
                    cc:3d:f5:8d:91:9b:e0:d4:6c:4e:a2:43:75:84:7a:
                    99:1a:27:29:4f:11:58:4a:a6:0c:71:44:b7:79:90:
                    b3:67:0d:ed:32:f2:74:52:e5:a9:7a:28:53:6b:ec:
                    be:f6:21:52:76:c2:a6:a5:41:b1:e1:76:2f:10:b3:
                    94:f6:25:9b:f6:a2:7e:9b:62:e3:4d:a6:e6:86:60:
                    0c:c8:56:41:92:5c:07:04:ef:e5:ba:d1:08:5e:a2:
                    d3:32:c0:7b:c9:f7:80:18:91:50:d5:1a:35:25:08:
                    9d:60:94:8f:58:54:30:88:60:d2:cf:51:a2:e4:b6:
                    c1:53:03:a1:48:ae:1e:e2:9b:79:ce:91:05:72:99:
                    df:d9:e0:97:35:bf:0e:21:da:f7:b7:da:bc:27:bc:
                    7b:dc:d1:92:bb:92:45:b0:6f:7d:c4:c6:58:f4:32:
                    85:3d:ad:0a:58:0a:71:4a:fc:ee:ce:76:ca:39:ab:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8C:67:81:15:98:86:92:41:51:B8:C7:09:D1:79:51:D5:5E:D9:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58333c01-4d13-3620-9b5e-3f5d35b06acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ce:4a:0d:42:8a:85:d3:00:e7:12:38:53:38:ce:b9:1c:fd:
         8b:d8:23:82:77:51:87:21:ec:a5:7f:f6:9e:89:6c:db:3a:54:
         0e:a0:02:81:15:a7:56:1a:06:d4:e8:14:40:dc:01:ef:5b:f4:
         ca:9f:f1:34:2f:03:3a:d5:b4:41:5c:3e:d6:fe:66:d7:7b:5b:
         3c:e2:0e:c8:a3:ca:f2:48:f9:c5:ed:d6:1d:05:25:7e:5a:ed:
         43:8a:ca:61:67:2a:c6:23:be:a1:32:e4:bf:b4:ef:cb:24:41:
         c8:2f:75:3f:a3:ee:35:db:75:27:12:12:e7:48:5b:bf:99:18:
         21:72:cd:a6:66:7e:27:32:76:9d:6e:f6:30:8f:6d:ab:f5:e8:
         26:f5:52:98:c9:24:90:d0:d5:fe:bb:8a:6f:39:f2:d5:99:bb:
         de:8a:46:d1:f9:f8:72:05:42:2c:2f:fe:80:9e:64:5a:a0:1c:
         12:1d:9c:59:76:80:2a:d6:76:00:8b:03:45:40:b6:4a:dc:02:
         6d:89:5c:df:b9:00:14:e4:ee:20:d1:bb:c9:94:2e:fe:6a:84:
         d4:d8:1b:ae:08:20:b3:8f:ad:ea:6f:62:64:2a:40:ba:c9:07:
         c0:2c:9d:70:cd:b7:32:34:1d:56:ee:bc:ea:7d:da:63:e6:ce:
         b5:e7:a7:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXhkd+cn3bG0XAHduAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxNTEyNTY1MloXDTI0MDgxMzEyNTY1MlowLzEtMCsGA1UEAxMk
ZjYwYTcxZTctNDQzOC00ODU4LWIzZTYtY2RlYjY2OTJjMGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkMsLRAXyy35yiBdqcHJYsy4zun1HRcjm+wr
Nj3gi+Ij5M/wxxuGIm29Undj13Mxo6YZD+6qOq11Blp5t4bqjkUiez6Mzd5XsDvM
PfWNkZvg1GxOokN1hHqZGicpTxFYSqYMcUS3eZCzZw3tMvJ0UuWpeihTa+y+9iFS
dsKmpUGx4XYvELOU9iWb9qJ+m2LjTabmhmAMyFZBklwHBO/lutEIXqLTMsB7yfeA
GJFQ1Ro1JQidYJSPWFQwiGDSz1Gi5LbBUwOhSK4e4pt5zpEFcpnf2eCXNb8OIdr3
t9q8J7x73NGSu5JFsG99xMZY9DKFPa0KWApxSvzuznbKOatzUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWMZ4EVmIaSQVG4xwnReVHVXtk+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTgzMzNjMDEtNGQxMy0z
NjIwLTliNWUtM2Y1ZDM1YjA2YWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzCmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbOSg1CioXTAOcSOFM4zrkc/YvYI4J3UYch7KV/9p6JbNs6VA6gAoEV
p1YaBtToFEDcAe9b9Mqf8TQvAzrVtEFcPtb+Ztd7WzziDsijyvJI+cXt1h0FJX5a
7UOKymFnKsYjvqEy5L+078skQcgvdT+j7jXbdScSEudIW7+ZGCFyzaZmficydp1u
9jCPbav16Cb1UpjJJJDQ1f67im858tWZu96KRtH5+HIFQiwv/oCeZFqgHBIdnFl2
gCrWdgCLA0VAtkrcAm2JXN+5ABTk7iDRu8mULv5qhNTYG64IILOPrepvYmQqQLrJ
B8AsnXDNtzI0HVbuvOp92mPmzrXnp2g=
-----END CERTIFICATE-----
Generated at Wed May 29 03:15:28 2024 by rpki-client on console-fra.rpki-client.org