Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/836beaec-4ac1-3060-9f86-98cf929d48dc.roa
File:                     836beaec-4ac1-3060-9f86-98cf929d48dc.roa (raw, json)
Hash identifier:          AGIBgOgqf1WRZY96ZN5affvBQApnJiUk8vjpftT9jB8=
Subject key identifier:   C7:FA:01:BB:EC:3B:0C:E3:67:EE:C1:9A:10:1C:3B:4F:AA:20:6D:8A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A69910FF724FE1A67AD0BF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/836beaec-4ac1-3060-9f86-98cf929d48dc.roa
Signing time:             Wed 24 Apr 2024 09:58:40 +0000
ROA not before:           Wed 24 Apr 2024 09:58:40 +0000
ROA not after:            Tue 23 Jul 2024 09:58:40 +0000
asID:                     16625
IP address blocks:        23.5.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:99:10:ff:72:4f:e1:a6:7a:d0:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 24 09:58:40 2024 GMT
            Not After : Jul 23 09:58:40 2024 GMT
        Subject: CN=e280d92e-e7a9-41dc-9e42-33dd7a8f20b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:b0:1a:cf:49:cd:fb:3b:0b:61:92:84:9e:
                    b7:7a:59:1d:47:02:4f:3d:05:2d:a0:18:4c:da:ca:
                    eb:00:e5:c1:2d:b7:2c:9c:79:29:8e:eb:cb:e5:98:
                    2f:f7:6e:49:23:51:8d:72:71:ee:0b:10:a4:e4:ff:
                    d7:15:2b:d1:52:00:8a:06:f2:10:28:a3:38:35:a9:
                    07:5b:8e:bd:c2:c3:cc:4a:78:d4:2d:4b:83:35:96:
                    f7:ae:db:e7:90:95:31:e6:e6:39:9b:48:6a:a4:89:
                    52:d7:e1:d1:93:ba:79:3e:76:52:9b:5e:4e:74:a7:
                    83:24:b4:b7:3c:d6:62:df:9c:77:df:61:d5:e1:ab:
                    fd:d2:57:e1:8e:9d:c3:75:21:9b:04:92:d0:d6:b2:
                    78:f8:19:ab:59:3c:14:0a:f3:a3:e2:3d:41:76:3f:
                    e9:36:c0:99:6f:0f:31:1b:05:9f:cf:81:ba:ab:8f:
                    5b:47:e7:e5:d0:79:5e:2a:53:5c:61:d5:30:fc:b3:
                    87:86:31:1f:5c:f9:c9:7e:b2:87:0d:2a:ba:91:6c:
                    d2:ed:6b:93:52:27:7b:f3:ad:f8:81:df:2f:e0:dc:
                    a1:6c:5f:14:da:0b:3b:cb:8f:31:46:d2:62:62:d6:
                    37:7e:e9:80:a8:bd:ba:2d:9b:55:36:e2:b8:12:dc:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FA:01:BB:EC:3B:0C:E3:67:EE:C1:9A:10:1C:3B:4F:AA:20:6D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/836beaec-4ac1-3060-9f86-98cf929d48dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.5.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a2:d4:65:95:f6:df:ad:55:8f:49:d1:72:fd:50:6e:78:bb:
         cb:9e:8a:34:f8:fe:93:56:2a:d5:80:c6:0f:d6:1b:1f:c0:65:
         13:c3:c3:cc:8f:f7:65:60:6c:ff:de:3d:da:49:11:f2:4b:52:
         1a:38:b5:a3:e4:3a:5e:6e:7b:63:35:29:f2:b7:5e:0b:91:da:
         38:5e:6f:03:2b:77:40:34:0d:a3:28:72:b0:37:e6:c3:58:14:
         87:c2:57:66:21:cc:6c:e9:2a:8d:49:26:f1:af:67:f7:32:97:
         6f:aa:f6:b7:d9:ee:f3:35:34:81:9c:02:15:10:7f:bf:c1:2f:
         f5:cf:2b:4a:be:37:dd:5a:3f:a2:cd:b7:27:6d:24:65:f6:d4:
         b5:bb:42:08:3b:85:67:f2:92:7e:5f:0c:cf:ca:3a:7e:9c:23:
         db:68:9a:09:5f:d7:3d:90:56:a6:ce:fc:83:37:a6:0d:b1:3b:
         1e:6a:f6:64:4c:8a:d9:6e:58:53:da:7a:57:3c:32:2d:c3:6c:
         51:25:f4:0e:83:ab:19:c8:d2:d1:7a:94:16:4f:85:c4:74:d6:
         ed:36:4f:15:c4:68:9f:ca:8f:a6:90:fe:69:32:de:b3:ba:fb:
         a8:34:f0:c7:c6:1a:98:cf:d7:a6:49:00:69:d7:93:62:ee:89:
         2f:34:98:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWmmRD/ck/hpnrQv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQyNDA5NTg0MFoXDTI0MDcyMzA5NTg0MFowLzEtMCsGA1UEAxMk
ZTI4MGQ5MmUtZTdhOS00MWRjLTllNDItMzNkZDdhOGYyMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC6wGs9Jzfs7C2GShJ63elkdRwJPPQUtoBhM
2srrAOXBLbcsnHkpjuvL5Zgv925JI1GNcnHuCxCk5P/XFSvRUgCKBvIQKKM4NakH
W469wsPMSnjULUuDNZb3rtvnkJUx5uY5m0hqpIlS1+HRk7p5PnZSm15OdKeDJLS3
PNZi35x332HV4av90lfhjp3DdSGbBJLQ1rJ4+BmrWTwUCvOj4j1Bdj/pNsCZbw8x
GwWfz4G6q49bR+fl0HleKlNcYdUw/LOHhjEfXPnJfrKHDSq6kWzS7WuTUid78634
gd8v4NyhbF8U2gs7y48xRtJiYtY3fumAqL26LZtVNuK4Etz8WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMf6AbvsOwzjZ+7BmhAcO0+qIG2KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODM2YmVhZWMtNGFjMS0z
MDYwLTlmODYtOThjZjkyOWQ0OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACei1GWV9t+tVY9J0XL9UG54u8ueijT4/pNWKtWAxg/WGx/AZRPDw8yP
92VgbP/ePdpJEfJLUho4taPkOl5ue2M1KfK3XguR2jhebwMrd0A0DaMocrA35sNY
FIfCV2YhzGzpKo1JJvGvZ/cyl2+q9rfZ7vM1NIGcAhUQf7/BL/XPK0q+N91aP6LN
tydtJGX21LW7Qgg7hWfykn5fDM/KOn6cI9tomglf1z2QVqbO/IM3pg2xOx5q9mRM
itluWFPaelc8Mi3DbFEl9A6DqxnI0tF6lBZPhcR01u02TxXEaJ/Kj6aQ/mky3rO6
+6g08MfGGpjP16ZJAGnXk2LuiS80mF8=
-----END CERTIFICATE-----
Generated at Fri May 17 01:57:56 2024 by rpki-client on console-fra.rpki-client.org