Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65b6367e-13d5-39af-8a65-9ad6da67acfb.roa
File:                     65b6367e-13d5-39af-8a65-9ad6da67acfb.roa (raw, json)
Hash identifier:          /FV2cF7yXTjL+8+HZ35tOQzLfWrgV15zP6mIxAYBJ4c=
Subject key identifier:   EA:6C:6D:90:1B:EA:BF:91:3A:79:A7:A4:94:EA:EF:BB:B0:98:A5:64
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479D76CFC9D8A3CBAE6C2FA0B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65b6367e-13d5-39af-8a65-9ad6da67acfb.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.44.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:cf:c9:d8:a3:cb:ae:6c:2f:a0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=ba7cbd09-7080-458e-8fab-090a3d8867af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f0:3e:c1:c9:84:ec:a1:31:09:ea:3a:7c:e8:
                    49:3e:e7:80:38:a8:f0:ca:de:bc:10:61:bc:ee:5a:
                    e6:87:ce:fd:12:ec:36:f0:46:c0:cc:7d:7e:58:39:
                    e0:a5:ac:89:2e:a2:65:c1:27:30:3c:a5:01:44:e0:
                    00:0b:2d:b8:77:ac:8d:d8:0b:d8:84:f5:9b:d7:cf:
                    64:1b:32:33:ba:77:a8:33:96:5b:66:ed:ff:3c:d9:
                    c1:c8:91:68:2d:22:9f:d7:45:16:4f:39:e1:3e:f1:
                    90:0f:df:4d:bb:ab:d1:03:a9:f0:3c:cb:12:51:72:
                    d5:4d:bc:63:ac:c3:3c:13:af:f5:d4:7f:1e:b8:10:
                    68:53:88:23:5a:69:2c:2b:94:6d:a5:72:31:3f:dd:
                    a2:aa:ba:72:13:c3:01:c8:05:e1:dc:dd:ca:62:33:
                    75:ac:80:88:31:bc:b2:bf:ae:7f:39:e1:03:48:fc:
                    76:81:e1:df:66:44:73:3a:11:84:a8:dc:a6:9b:03:
                    f5:41:c0:8f:87:6d:af:6d:61:32:d5:9b:3c:37:f2:
                    b7:e8:33:f3:03:ee:c4:1b:3a:58:96:2a:78:f5:26:
                    89:92:53:43:c1:3e:ff:51:db:56:63:d5:0f:da:fc:
                    10:c7:a5:68:fd:bc:0d:62:38:9c:50:f4:46:83:1b:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:6D:90:1B:EA:BF:91:3A:79:A7:A4:94:EA:EF:BB:B0:98:A5:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65b6367e-13d5-39af-8a65-9ad6da67acfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:1d:62:d9:c7:e0:80:6d:10:6b:85:03:c1:43:b5:be:63:
         ff:62:01:bc:5b:4b:7a:d2:58:3f:3f:6f:cc:80:c1:b6:6a:8a:
         d7:60:55:84:02:9c:58:0f:4b:ca:64:97:73:3c:c7:53:41:0c:
         72:0f:c0:e1:da:44:5b:b3:aa:ac:e7:06:00:02:d0:6a:bf:36:
         ec:b3:7f:14:a0:65:9a:70:66:39:d3:99:de:2b:70:70:07:82:
         1b:4f:c4:e4:c0:4b:92:90:ea:c5:b6:ef:05:92:eb:90:d1:be:
         62:9c:2a:1e:ca:b1:74:46:93:d4:db:94:50:e4:b2:0e:93:78:
         7b:23:4b:e0:e6:38:3a:1f:12:61:e2:33:8a:ee:8e:34:d4:dd:
         1a:86:cf:f3:88:b7:6c:ab:9a:04:70:1b:fc:78:32:e2:95:1f:
         e6:26:a0:79:48:76:32:6e:a4:e4:31:59:7c:5d:f3:ee:9c:90:
         a2:2c:21:4c:fe:e2:2f:7a:09:a6:34:bd:5e:4d:21:a3:11:dd:
         b8:1a:0f:41:14:92:e4:d8:46:b6:e7:7c:de:0c:8d:7b:4d:2d:
         4f:1b:3a:3f:ab:a3:f8:fd:df:15:f6:58:41:32:80:2d:5e:9f:
         78:34:34:1d:86:e0:1f:83:3f:95:7b:c9:8b:9e:25:f1:4a:70:
         21:39:ba:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedds/J2KPLrmwvoLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
YmE3Y2JkMDktNzA4MC00NThlLThmYWItMDkwYTNkODg2N2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/A+wcmE7KExCeo6fOhJPueAOKjwyt68EGG8
7lrmh879Euw28EbAzH1+WDngpayJLqJlwScwPKUBROAACy24d6yN2AvYhPWb189k
GzIzuneoM5ZbZu3/PNnByJFoLSKf10UWTznhPvGQD99Nu6vRA6nwPMsSUXLVTbxj
rMM8E6/11H8euBBoU4gjWmksK5RtpXIxP92iqrpyE8MByAXh3N3KYjN1rICIMbyy
v65/OeEDSPx2geHfZkRzOhGEqNymmwP1QcCPh22vbWEy1Zs8N/K36DPzA+7EGzpY
lip49SaJklNDwT7/UdtWY9UP2vwQx6Vo/bwNYjicUPRGgxsKywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOpsbZAb6r+ROnmnpJTq77uwmKVkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjViNjM2N2UtMTNkNS0z
OWFmLThhNjUtOWFkNmRhNjdhY2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFywEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZ6HWLZx+CAbRBrhQPBQ7W+Y/9iAbxbS3rSWD8/b8yAwbZqitdgVYQC
nFgPS8pkl3M8x1NBDHIPwOHaRFuzqqznBgAC0Gq/NuyzfxSgZZpwZjnTmd4rcHAH
ghtPxOTAS5KQ6sW27wWS65DRvmKcKh7KsXRGk9TblFDksg6TeHsjS+DmODofEmHi
M4rujjTU3RqGz/OIt2yrmgRwG/x4MuKVH+YmoHlIdjJupOQxWXxd8+6ckKIsIUz+
4i96CaY0vV5NIaMR3bgaD0EUkuTYRrbnfN4MjXtNLU8bOj+ro/j93xX2WEEygC1e
n3g0NB2G4B+DP5V7yYueJfFKcCE5uoM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:39:38 2024 by rpki-client on console-ams.rpki-client.org