Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e58a5b3-ba06-3808-9fd2-b99320a1b625.roa
File:                     6e58a5b3-ba06-3808-9fd2-b99320a1b625.roa (raw, json)
Hash identifier:          MZWQacDwDIH+YOiLIhmlQX/72aAL51FHjcCpBsS+dmc=
Subject key identifier:   98:19:DE:F7:51:7D:6C:8A:EF:32:DA:A0:72:3F:16:DC:0D:04:BB:1D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DEDF1F90B64AFDB099CE5080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e58a5b3-ba06-3808-9fd2-b99320a1b625.roa
Signing time:             Tue 14 May 2024 13:45:06 +0000
ROA not before:           Tue 14 May 2024 13:45:06 +0000
ROA not after:            Mon 12 Aug 2024 13:45:06 +0000
asID:                     20940
IP address blocks:        23.46.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:df:1f:90:b6:4a:fd:b0:99:ce:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 13:45:06 2024 GMT
            Not After : Aug 12 13:45:06 2024 GMT
        Subject: CN=bb61598e-bfec-4bbb-a527-c639fda01df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fa:41:da:df:1c:d2:69:d1:32:75:12:98:d5:
                    f6:52:86:10:6b:22:59:f4:f3:f0:ca:09:c3:7c:a5:
                    1a:9b:fe:b5:b1:e0:43:b0:ce:34:0a:4b:dc:70:79:
                    61:81:1d:c0:11:85:93:14:fb:8d:ce:3a:88:4f:73:
                    39:61:26:a5:4f:1b:23:6b:d2:06:4b:49:88:33:28:
                    d3:d2:cc:d3:5c:7f:12:a1:2c:9a:82:2b:b2:69:3e:
                    70:9b:a7:ee:34:79:67:3e:5a:77:dd:42:61:c2:70:
                    d3:5b:d4:dd:d3:80:d1:76:f9:52:76:85:67:a8:fb:
                    26:16:d6:51:b4:04:f4:e1:35:33:ad:16:80:3b:ab:
                    52:b0:a6:1b:1b:7c:31:85:3f:eb:16:47:7a:4a:73:
                    68:bb:c3:cf:fe:4f:e4:d5:42:85:1c:45:e5:bd:d3:
                    6a:b2:4a:a1:1c:d3:3b:16:c2:00:1b:c5:e1:37:9b:
                    ad:a1:2f:d0:ae:d5:4b:fa:23:96:7d:cd:6e:a1:15:
                    6b:c2:f5:68:aa:a2:ad:1b:8d:ab:f5:e2:bf:aa:d1:
                    9f:ac:f6:6c:79:43:45:b1:a4:30:c0:67:5f:31:ce:
                    2c:d8:1b:fc:08:4f:c3:6b:ad:67:cf:8e:a0:c1:1f:
                    cb:20:4b:f2:d2:e8:11:41:38:84:0b:a6:32:97:6d:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:19:DE:F7:51:7D:6C:8A:EF:32:DA:A0:72:3F:16:DC:0D:04:BB:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e58a5b3-ba06-3808-9fd2-b99320a1b625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:da:04:95:29:e4:79:57:30:f5:4b:e3:8b:d0:40:8c:48:4d:
         81:a1:5e:ad:c7:e8:28:5c:ff:b0:e9:23:6c:3e:63:78:ff:32:
         db:be:d2:28:80:7a:ce:98:f2:78:23:d5:5d:c5:86:85:d8:a9:
         a6:b3:3f:af:e4:1a:a4:77:13:aa:92:c2:c3:50:40:06:a2:2e:
         74:ec:cd:d0:84:a8:c5:c5:c7:38:13:c1:ed:c9:90:a7:7e:82:
         38:2d:ea:75:a6:1b:dc:02:49:99:ed:8f:30:b9:a7:cd:38:5d:
         18:8a:98:76:a9:fb:55:ed:9b:b9:be:52:71:9b:51:25:31:69:
         77:25:73:41:db:8e:25:3f:54:ba:24:b7:8c:8c:85:ff:7d:2e:
         20:d9:f2:20:80:5c:cb:ed:47:5c:8e:aa:c8:79:c0:60:5b:58:
         e2:fa:99:dd:2a:cf:be:88:7f:94:4a:d2:79:c9:b8:97:af:07:
         9c:73:ab:ea:b1:aa:84:df:f5:0d:8a:05:3a:98:ea:5f:f5:a8:
         36:4c:b6:da:11:fc:1e:49:31:36:37:b1:bf:03:a7:f5:b7:86:
         17:ff:78:c2:11:b5:c3:b3:3a:2f:ce:6b:6f:66:b0:08:d1:48:
         bb:d4:be:b7:75:d4:93:2d:0f:31:94:36:7c:12:ae:f2:94:78:
         d5:b3:f6:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXe3x+Qtkr9sJnOUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxNDEzNDUwNloXDTI0MDgxMjEzNDUwNlowLzEtMCsGA1UEAxMk
YmI2MTU5OGUtYmZlYy00YmJiLWE1MjctYzYzOWZkYTAxZGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/pB2t8c0mnRMnUSmNX2UoYQayJZ9PPwygnD
fKUam/61seBDsM40CkvccHlhgR3AEYWTFPuNzjqIT3M5YSalTxsja9IGS0mIMyjT
0szTXH8SoSyagiuyaT5wm6fuNHlnPlp33UJhwnDTW9Td04DRdvlSdoVnqPsmFtZR
tAT04TUzrRaAO6tSsKYbG3wxhT/rFkd6SnNou8PP/k/k1UKFHEXlvdNqskqhHNM7
FsIAG8XhN5utoS/QrtVL+iOWfc1uoRVrwvVoqqKtG42r9eK/qtGfrPZseUNFsaQw
wGdfMc4s2Bv8CE/Da61nz46gwR/LIEvy0ugRQTiEC6Yyl20btQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgZ3vdRfWyK7zLaoHI/FtwNBLsdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmU1OGE1YjMtYmEwNi0z
ODA4LTlmZDItYjk5MzIwYTFiNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy62MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzaBJUp5HlXMPVL44vQQIxITYGhXq3H6Chc/7DpI2w+Y3j/Mtu+0iiA
es6Y8ngj1V3FhoXYqaazP6/kGqR3E6qSwsNQQAaiLnTszdCEqMXFxzgTwe3JkKd+
gjgt6nWmG9wCSZntjzC5p804XRiKmHap+1Xtm7m+UnGbUSUxaXclc0HbjiU/VLok
t4yMhf99LiDZ8iCAXMvtR1yOqsh5wGBbWOL6md0qz76If5RK0nnJuJevB5xzq+qx
qoTf9Q2KBTqY6l/1qDZMttoR/B5JMTY3sb8Dp/W3hhf/eMIRtcOzOi/Oa29msAjR
SLvUvrd11JMtDzGUNnwSrvKUeNWz9j0=
-----END CERTIFICATE-----
Generated at Wed May 29 03:15:32 2024 by rpki-client on console-fra.rpki-client.org