Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa
File:                     8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa (raw, json)
Hash identifier:          5p+iZUjPC0J4v5frZSEL9UDP8PoHbn+NwtErEKgs9/w=
Subject key identifier:   9F:DC:7A:DF:8B:3B:FE:AE:BE:BB:21:8C:1E:60:34:4D:99:06:62:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858479D76CEAB1241FE7E337CD4D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.43.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:ce:ab:12:41:fe:7e:33:7c:d4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=e29b94b5-1f7f-43ee-8a5c-c8670da38ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:63:07:ab:23:9c:5f:c9:a0:c5:3c:d7:ca:e2:
                    49:5a:d8:7b:df:30:7f:6d:d1:74:c5:07:c9:37:3e:
                    41:5d:6d:7e:cf:97:58:ef:8d:d1:88:80:0f:db:79:
                    55:55:9a:b7:dc:1e:3e:4a:78:77:10:00:bb:6e:d2:
                    88:01:b1:4f:3a:ab:9d:7d:70:c1:83:5d:ca:97:5a:
                    f9:34:4a:f0:2e:1d:7f:58:1f:3f:b7:e0:69:33:4d:
                    81:da:c5:fd:a9:c1:eb:b6:72:5a:4b:f7:16:66:59:
                    7b:7d:fe:a0:41:ca:be:0c:06:d8:2d:62:93:b6:ee:
                    bd:8f:17:ab:8b:e7:07:0b:c5:15:3e:f7:22:4b:04:
                    9a:89:81:d5:48:e1:20:bc:7d:18:82:89:0b:75:28:
                    67:7c:08:50:d2:b0:ca:65:82:33:13:83:3b:62:22:
                    6a:41:84:76:fb:ba:b2:5b:ad:9d:b8:07:55:60:38:
                    77:7e:cf:b9:0f:7b:8f:90:ec:ee:49:3c:b7:b5:63:
                    70:62:20:c1:90:7a:62:44:b6:46:4f:1c:4d:46:88:
                    e0:31:45:66:e0:f6:f0:69:31:f5:38:1a:a0:42:43:
                    02:ad:80:df:ae:6a:4a:5e:c9:46:bc:4c:93:c0:d3:
                    c1:17:33:8a:14:40:0a:a8:2b:8b:b3:15:69:25:0f:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DC:7A:DF:8B:3B:FE:AE:BE:BB:21:8C:1E:60:34:4D:99:06:62:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c7:15:0f:5a:3b:ee:16:e1:13:1e:33:39:41:bb:e8:cc:47:
         fc:7c:be:44:a0:a3:da:88:70:6e:f2:22:20:70:8d:ea:54:cb:
         05:42:d9:eb:99:e5:70:50:67:f0:34:98:a9:62:41:ec:89:6e:
         bd:34:0f:72:f5:04:b6:7d:ca:7e:97:3b:bd:bc:d7:5c:e9:d1:
         37:4d:19:c6:a4:8b:1c:41:38:84:b0:11:a5:d3:1d:64:ae:8e:
         d0:70:70:01:87:d2:9f:ed:5c:f3:1a:66:58:3c:a4:7d:cf:b3:
         4f:0d:44:e8:38:78:25:a6:c8:ca:08:a3:e5:28:a9:74:be:c0:
         01:95:3a:ed:ab:f3:93:27:cd:2f:9b:62:fc:aa:22:32:9f:b9:
         af:56:b2:09:43:7a:5a:d1:e3:6c:a6:c2:49:18:c3:bd:2b:81:
         31:f2:32:20:c7:de:c5:6e:0a:65:1d:40:bf:31:8a:73:69:2c:
         85:71:7d:f1:2b:0e:3a:61:95:43:68:b2:00:fa:de:e2:47:3f:
         87:c6:07:2d:0d:79:96:dc:d5:c5:5b:b6:e2:ab:12:4b:3b:89:
         30:4b:1c:a8:75:e5:b1:b6:cb:65:b0:94:e9:06:32:57:63:ca:
         57:12:81:85:4c:d1:18:91:f1:c1:a1:ac:97:1b:af:ce:8d:f6:
         87:d7:60:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedds6rEkH+fjN81NAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTI5Yjk0YjUtMWY3Zi00M2VlLThhNWMtYzg2NzBkYTM4Y2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmMHqyOcX8mgxTzXyuJJWth73zB/bdF0xQfJ
Nz5BXW1+z5dY743RiIAP23lVVZq33B4+Snh3EAC7btKIAbFPOqudfXDBg13Kl1r5
NErwLh1/WB8/t+BpM02B2sX9qcHrtnJaS/cWZll7ff6gQcq+DAbYLWKTtu69jxer
i+cHC8UVPvciSwSaiYHVSOEgvH0YgokLdShnfAhQ0rDKZYIzE4M7YiJqQYR2+7qy
W62duAdVYDh3fs+5D3uPkOzuSTy3tWNwYiDBkHpiRLZGTxxNRojgMUVm4PbwaTH1
OBqgQkMCrYDfrmpKXslGvEyTwNPBFzOKFEAKqCuLsxVpJQ+lRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/cet+LO/6uvrshjB5gNE2ZBmLzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJmMDI5MGEtM2UzYy0z
NzEwLWE5OGEtMTRjOWIxYTY4OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFys8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHHFQ9aO+4W4RMeMzlBu+jMR/x8vkSgo9qIcG7yIiBwjepUywVC2euZ
5XBQZ/A0mKliQeyJbr00D3L1BLZ9yn6XO72811zp0TdNGcakixxBOISwEaXTHWSu
jtBwcAGH0p/tXPMaZlg8pH3Ps08NROg4eCWmyMoIo+UoqXS+wAGVOu2r85MnzS+b
YvyqIjKfua9WsglDelrR42ymwkkYw70rgTHyMiDH3sVuCmUdQL8xinNpLIVxffEr
DjphlUNosgD63uJHP4fGBy0NeZbc1cVbtuKrEks7iTBLHKh15bG2y2WwlOkGMldj
ylcSgYVM0RiR8cGhrJcbr86N9ofXYO8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:05 2024 by rpki-client on console-fra.rpki-client.org