Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b5021f2-df1a-3ce4-af65-175758534422.roa
File:                     8b5021f2-df1a-3ce4-af65-175758534422.roa (raw, json)
Hash identifier:          lWJ/cbKp+uJ7NGadrHdiO61gZNuF+ImLiVX+8iL9LZs=
Subject key identifier:   8D:AD:FC:64:21:5B:84:BA:C1:1D:BD:9A:01:6F:6A:54:01:E6:1D:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584845159B72FC4C3230C8E677A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b5021f2-df1a-3ce4-af65-175758534422.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.15.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:9b:72:fc:4c:32:30:c8:e6:77:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=cf8762b3-b086-4a21-94f9-09af7ee20a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:73:c0:aa:e6:4c:1e:c3:3c:b9:f3:1f:f3:
                    f9:5d:51:38:78:2d:f9:d9:55:18:5c:4a:3f:4a:05:
                    33:40:14:50:0e:ee:54:08:87:9f:e7:0a:17:9b:aa:
                    b5:d9:32:6f:6c:5f:d6:9a:53:78:64:c6:e7:33:74:
                    2d:12:ea:51:0a:88:de:ef:ac:47:94:f6:73:b2:f4:
                    ab:9f:47:b5:d1:29:82:3a:af:02:97:9b:a7:f4:bc:
                    43:89:a9:b7:b8:59:e8:12:f0:8c:ce:a0:9b:3b:c3:
                    b3:55:85:22:2e:da:31:7c:0c:74:4e:fa:b5:70:29:
                    16:9f:57:cf:11:99:78:09:69:f5:48:21:11:75:b4:
                    ea:ca:e4:d0:32:04:cd:93:9d:68:0d:95:32:4a:7e:
                    c6:72:87:b3:0d:e6:e5:5f:0d:ef:37:63:92:be:e3:
                    a3:92:53:0e:4e:16:fc:9f:11:84:12:d7:e7:52:59:
                    6c:a3:6a:a8:7b:84:d6:e2:b3:3f:3d:f1:be:14:ef:
                    ee:bc:0c:7f:4d:d9:ac:82:c7:9e:5e:05:c6:57:2a:
                    4f:f6:23:5d:9b:89:d8:f8:04:3f:ba:88:46:1b:5d:
                    69:c7:36:61:f4:ee:a1:53:77:90:2a:7f:8c:ed:25:
                    13:86:44:4b:4b:79:44:ec:22:ec:78:03:39:82:a0:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AD:FC:64:21:5B:84:BA:C1:1D:BD:9A:01:6F:6A:54:01:E6:1D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b5021f2-df1a-3ce4-af65-175758534422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.15.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:8b:0c:48:12:0b:e8:75:10:3d:96:58:fd:96:c6:17:5c:
         a4:3b:50:c6:fe:50:bf:dc:f2:cf:e7:8e:d8:7a:b4:49:c0:6b:
         2d:28:2a:18:5b:31:30:b9:02:d6:ef:fa:5d:84:20:5e:78:78:
         10:7e:00:a2:75:57:da:af:8c:51:c9:9d:87:eb:3e:dd:a4:a4:
         d3:a0:81:d9:63:83:3a:24:32:1d:30:d1:ad:44:20:b9:bc:ed:
         43:1c:cf:2f:3e:71:85:a0:bf:7a:bf:f5:5b:cf:55:42:85:4b:
         c1:a2:bc:c8:0c:f9:a8:44:6f:a3:f8:33:95:c9:a7:57:d8:0b:
         ba:e4:13:65:6a:f8:63:60:dc:0a:9f:9a:e8:d4:b8:6c:0b:06:
         e8:2e:ec:42:04:20:db:1e:f6:1f:7b:fd:9c:0c:38:bf:1a:76:
         a0:7d:61:d6:83:8b:b9:d1:ac:6f:54:da:7f:3e:0f:21:f0:af:
         ea:15:96:71:21:95:6f:b3:61:b2:d2:12:ae:89:15:87:0c:76:
         d8:e0:7d:94:8e:91:47:e7:62:29:83:96:df:fc:e1:46:9d:2e:
         e5:68:a2:f4:b9:4e:2d:9f:37:32:c0:2d:cf:21:37:d9:3b:6c:
         45:18:5e:bf:0e:2a:ab:e6:69:02:a6:bb:8e:96:8f:0e:47:a8:
         91:40:47:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFZty/EwyMMjmd6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
Y2Y4NzYyYjMtYjA4Ni00YTIxLTk0ZjktMDlhZjdlZTIwYTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoFzwKrmTB7DPLnzH/P5XVE4eC352VUYXEo/
SgUzQBRQDu5UCIef5woXm6q12TJvbF/WmlN4ZMbnM3QtEupRCoje76xHlPZzsvSr
n0e10SmCOq8Cl5un9LxDiam3uFnoEvCMzqCbO8OzVYUiLtoxfAx0Tvq1cCkWn1fP
EZl4CWn1SCERdbTqyuTQMgTNk51oDZUySn7GcoezDeblXw3vN2OSvuOjklMOThb8
nxGEEtfnUllso2qoe4TW4rM/PfG+FO/uvAx/TdmsgseeXgXGVypP9iNdm4nY+AQ/
uohGG11pxzZh9O6hU3eQKn+M7SUThkRLS3lE7CLseAM5gqDliQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2t/GQhW4S6wR29mgFvalQB5h2FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI1MDIxZjItZGYxYS0z
Y2U0LWFmNjUtMTc1NzU4NTM0NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFw+EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4iiwxIEgvodRA9llj9lsYXXKQ7UMb+UL/c8s/njth6tEnAay0oKhhb
MTC5Atbv+l2EIF54eBB+AKJ1V9qvjFHJnYfrPt2kpNOggdljgzokMh0w0a1EILm8
7UMczy8+cYWgv3q/9VvPVUKFS8GivMgM+ahEb6P4M5XJp1fYC7rkE2Vq+GNg3Aqf
mujUuGwLBugu7EIEINse9h97/ZwMOL8adqB9YdaDi7nRrG9U2n8+DyHwr+oVlnEh
lW+zYbLSEq6JFYcMdtjgfZSOkUfnYimDlt/84UadLuVoovS5Ti2fNzLALc8hN9k7
bEUYXr8OKqvmaQKmu46Wjw5HqJFAR+M=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:51 2025 by rpki-client