Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7943d69d-e4e4-314c-b67b-4e28ffaf7f34.roa
File:                     7943d69d-e4e4-314c-b67b-4e28ffaf7f34.roa (raw, json)
Hash identifier:          S1qdQ1FpFGxlq30zopKv3VVsI9gd9EEeSrj2VduNqQc=
Subject key identifier:   ED:43:FD:53:53:2E:8C:28:A1:5E:05:04:D6:89:62:36:8D:07:8B:67
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845777DC1A900BED58E12E6B300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7943d69d-e4e4-314c-b67b-4e28ffaf7f34.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16625
IP address blocks:        23.36.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c1:a9:00:be:d5:8e:12:e6:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=1aa049f3-8c8a-47c8-b968-daebae347c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:a1:51:2a:d1:de:60:c5:1c:80:a7:06:c8:
                    82:9c:df:bc:e0:c2:f3:36:c8:a5:ac:f6:1f:a5:95:
                    60:bf:de:ca:0b:97:ed:05:b2:bb:30:f4:4b:4a:c9:
                    78:0b:da:48:f4:9b:1e:53:3c:f4:ca:5c:94:c7:29:
                    5c:9c:41:81:9f:35:fa:cd:19:fc:e9:f1:4f:07:14:
                    24:9e:cc:c2:27:4b:05:aa:ea:c3:1d:d7:17:da:37:
                    05:36:b6:58:4d:dd:70:94:ab:89:92:24:7b:71:49:
                    70:a5:f1:66:fe:e1:ed:a9:e6:9d:61:9f:6c:1b:c7:
                    cb:5f:a0:d6:5c:25:2e:7f:ca:40:4e:23:56:2b:d1:
                    c1:c5:29:90:d8:b2:4a:fa:58:b3:38:cb:b1:46:43:
                    9b:5f:65:cc:a6:47:b0:e0:bc:86:0a:10:49:99:a1:
                    e2:a4:fb:e8:f4:b1:3e:87:eb:2e:f2:da:2a:78:ae:
                    5b:33:06:f9:35:03:69:d5:3f:db:bb:9e:bc:3b:35:
                    c9:ce:2a:ed:b9:f6:f1:08:43:6e:88:fb:5c:df:76:
                    0f:ec:76:33:3e:41:cc:fe:f6:5a:f8:43:52:0d:1c:
                    1b:3f:ce:ca:2f:fa:f9:4f:bf:19:5f:1e:a4:95:f5:
                    1c:77:a1:b8:ba:02:b8:78:28:b0:70:d4:48:f4:08:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:43:FD:53:53:2E:8C:28:A1:5E:05:04:D6:89:62:36:8D:07:8B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7943d69d-e4e4-314c-b67b-4e28ffaf7f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:a2:f1:f5:5d:3a:bd:ce:56:af:d3:bf:5d:82:ab:c8:0d:
         af:d4:ac:08:5a:87:af:23:4b:56:8f:b9:66:17:8c:8c:75:5b:
         9f:82:ac:1c:1e:47:06:35:37:aa:e3:07:47:c1:48:62:3f:a9:
         3d:1a:62:f4:a5:04:fd:35:55:bd:ad:1f:2e:ee:f1:9a:df:c7:
         f1:a4:96:23:c5:55:8e:31:e2:6e:55:59:e5:1e:8b:78:dc:9a:
         49:7e:56:43:1d:df:42:aa:98:75:c0:1e:64:38:63:bd:a5:18:
         22:8f:63:3c:43:59:15:b8:bf:30:64:7a:a0:6d:ec:ec:36:40:
         74:4f:58:df:5c:6e:12:87:d4:cf:39:c1:e6:75:88:a0:6c:55:
         d4:42:cf:cb:b1:67:18:c7:87:23:25:d5:ba:45:27:f2:cc:04:
         7f:02:fc:93:31:35:71:3e:30:8b:a3:39:e2:28:92:51:67:b9:
         f6:2c:f5:59:b2:5e:1c:d0:3a:19:cd:4f:2a:61:df:30:d7:56:
         18:2f:49:79:a6:7a:12:4d:05:59:f3:5d:19:b6:2f:7b:be:e7:
         d4:9e:5d:4c:7e:e5:b0:5b:44:82:be:28:0c:af:3c:00:60:da:
         1e:d7:a6:01:89:1f:ff:66:e4:fc:4a:52:f8:a2:ed:34:51:bd:
         51:93:a3:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fcGpAL7VjhLmswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
MWFhMDQ5ZjMtOGM4YS00N2M4LWI5NjgtZGFlYmFlMzQ3Yzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvGhUSrR3mDFHICnBsiCnN+84MLzNsilrPYf
pZVgv97KC5ftBbK7MPRLSsl4C9pI9JseUzz0ylyUxylcnEGBnzX6zRn86fFPBxQk
nszCJ0sFqurDHdcX2jcFNrZYTd1wlKuJkiR7cUlwpfFm/uHtqeadYZ9sG8fLX6DW
XCUuf8pATiNWK9HBxSmQ2LJK+lizOMuxRkObX2XMpkew4LyGChBJmaHipPvo9LE+
h+su8toqeK5bMwb5NQNp1T/bu568OzXJzirtufbxCENuiPtc33YP7HYzPkHM/vZa
+ENSDRwbP87KL/r5T78ZXx6klfUcd6G4ugK4eCiwcNRI9AiKRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1D/VNTLowooV4FBNaJYjaNB4tnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzk0M2Q2OWQtZTRlNC0z
MTRjLWI2N2ItNGUyOGZmYWY3ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyTkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9hovH1XTq9zlav079dgqvIDa/UrAhah68jS1aPuWYXjIx1W5+CrBwe
RwY1N6rjB0fBSGI/qT0aYvSlBP01Vb2tHy7u8Zrfx/GkliPFVY4x4m5VWeUei3jc
mkl+VkMd30KqmHXAHmQ4Y72lGCKPYzxDWRW4vzBkeqBt7Ow2QHRPWN9cbhKH1M85
weZ1iKBsVdRCz8uxZxjHhyMl1bpFJ/LMBH8C/JMxNXE+MIujOeIoklFnufYs9Vmy
XhzQOhnNTyph3zDXVhgvSXmmehJNBVnzXRm2L3u+59SeXUx+5bBbRIK+KAyvPABg
2h7XpgGJH/9m5PxKUvii7TRRvVGTo74=
-----END CERTIFICATE-----
Generated at Fri May 17 01:57:55 2024 by rpki-client on console-fra.rpki-client.org