Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77236768-feaf-3f8e-bc28-267b9b02d59a.roa
File:                     77236768-feaf-3f8e-bc28-267b9b02d59a.roa (raw, json)
Hash identifier:          CyVIe3YxgrgtLtBzsDV0RoBSphtLAJxBBLDqyCpMQU8=
Subject key identifier:   C0:96:81:C2:69:2C:C6:C8:69:FE:61:EC:2B:62:4C:93:25:85:45:C5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848C6E63971D5233891E22E5040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77236768-feaf-3f8e-bc28-267b9b02d59a.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     21342
IP address blocks:        23.61.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:39:71:d5:23:38:91:e2:2e:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=46bb31ee-37bf-47ff-b0a9-8584507389ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:7c:bd:8f:fc:db:8a:f9:4f:59:44:17:82:
                    62:8c:39:29:ed:4d:24:fb:89:39:ba:a1:7b:b6:68:
                    be:80:9a:da:ca:02:33:31:31:a4:41:f0:9c:c4:a2:
                    50:4e:8d:9f:51:74:5e:dc:ee:5d:21:d6:ec:85:63:
                    fc:43:b4:60:fc:9a:3a:6c:ec:f0:c7:1c:52:da:08:
                    07:94:6c:18:aa:a0:ac:fa:fb:39:98:21:e4:4d:23:
                    63:63:4f:5c:70:6a:86:3e:5c:b8:77:ca:c3:98:87:
                    46:07:3a:f2:e6:9e:ea:c0:eb:20:7b:c4:6f:8b:ec:
                    84:91:f9:05:72:80:37:10:ec:f2:6a:0e:41:b6:67:
                    87:58:20:cc:22:cb:d1:14:bb:f1:aa:51:e2:b2:0e:
                    d8:20:05:70:f3:e5:c2:8d:21:d3:25:ff:21:d8:c8:
                    43:50:ac:7e:da:84:6e:e5:0c:5b:80:b5:42:00:6f:
                    ef:86:27:ac:bb:0b:1c:b7:50:a8:3f:85:56:8d:46:
                    d9:4a:7f:f3:70:ed:bd:7d:c2:2f:6f:3d:78:a1:f9:
                    b1:4a:a8:59:ce:55:3e:5e:10:be:2c:2a:40:0f:de:
                    c8:4b:61:b3:ee:b0:dd:eb:04:ee:42:a1:94:42:e8:
                    fd:2f:9e:e3:42:7a:5b:a3:a2:aa:7f:cc:fd:a2:be:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:81:C2:69:2C:C6:C8:69:FE:61:EC:2B:62:4C:93:25:85:45:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77236768-feaf-3f8e-bc28-267b9b02d59a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:87:76:63:7d:c9:bb:5d:74:8d:5c:b7:fa:15:7c:fc:8a:0b:
         c9:64:9f:49:d9:61:51:bb:54:ce:6d:ec:09:df:93:d5:98:a0:
         5f:8a:a7:f5:d9:97:d5:2e:a9:0a:b0:37:35:ad:2f:49:5c:4f:
         e2:2c:e4:57:1a:c3:02:9c:f9:d9:91:b7:6a:f2:de:07:9b:34:
         c0:b4:80:0d:32:8d:02:e9:37:8b:60:d4:1a:72:45:99:8f:31:
         b4:6b:ff:93:02:4e:e5:b2:b9:b0:39:65:23:ef:8b:83:18:49:
         a5:80:a9:c2:f5:95:2d:47:3b:cf:87:cc:fc:3f:13:f1:35:a6:
         ce:42:7d:3e:48:73:32:09:3e:7d:9d:75:f8:4a:49:2e:52:40:
         3a:4a:08:43:e4:13:27:30:2c:33:89:c7:a4:3d:ac:c8:5c:59:
         e0:0b:4e:19:c2:16:6a:f2:20:41:61:57:9e:85:7a:a2:9e:39:
         18:51:98:47:86:27:53:ec:c4:75:63:fd:d0:60:a0:e4:3c:db:
         92:03:76:2b:2d:9e:50:a7:8f:b5:68:df:47:e7:40:ac:38:7d:
         38:90:29:ac:62:a4:77:0b:31:99:96:3e:35:df:d1:6a:21:83:
         5a:75:7e:84:5d:f5:e7:8c:04:70:20:b3:ab:8f:fd:d7:bb:e8:
         ff:7a:0b:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jlx1SM4keIuUEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
NDZiYjMxZWUtMzdiZi00N2ZmLWIwYTktODU4NDUwNzM4OWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09R8vY/824r5T1lEF4JijDkp7U0k+4k5uqF7
tmi+gJraygIzMTGkQfCcxKJQTo2fUXRe3O5dIdbshWP8Q7Rg/Jo6bOzwxxxS2ggH
lGwYqqCs+vs5mCHkTSNjY09ccGqGPly4d8rDmIdGBzry5p7qwOsge8Rvi+yEkfkF
coA3EOzyag5BtmeHWCDMIsvRFLvxqlHisg7YIAVw8+XCjSHTJf8h2MhDUKx+2oRu
5QxbgLVCAG/vhiesuwsct1CoP4VWjUbZSn/zcO29fcIvbz14ofmxSqhZzlU+XhC+
LCpAD97IS2Gz7rDd6wTuQqGUQuj9L57jQnpbo6Kqf8z9or5bMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCWgcJpLMbIaf5h7CtiTJMlhUXFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzcyMzY3NjgtZmVhZi0z
ZjhlLWJjMjgtMjY3YjliMDJkNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz31MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeHdmN9ybtddI1ct/oVfPyKC8lkn0nZYVG7VM5t7Anfk9WYoF+Kp/XZ
l9UuqQqwNzWtL0lcT+Is5FcawwKc+dmRt2ry3gebNMC0gA0yjQLpN4tg1BpyRZmP
MbRr/5MCTuWyubA5ZSPvi4MYSaWAqcL1lS1HO8+HzPw/E/E1ps5CfT5IczIJPn2d
dfhKSS5SQDpKCEPkEycwLDOJx6Q9rMhcWeALThnCFmryIEFhV56FeqKeORhRmEeG
J1PsxHVj/dBgoOQ825IDdistnlCnj7Vo30fnQKw4fTiQKaxipHcLMZmWPjXf0Woh
g1p1foRd9eeMBHAgs6uP/de76P96C80=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:26 2025 by rpki-client