Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a72be209-9077-38dd-86b4-19449ccca47d.roa
File:                     a72be209-9077-38dd-86b4-19449ccca47d.roa (raw, json)
Hash identifier:          GcIt3jB+r63sexfEo+PneZmMOzY/HrbQQYwJGp/DCAo=
Subject key identifier:   61:04:80:E0:21:AF:B9:AE:09:22:27:C3:71:C8:2F:5B:EF:6F:EF:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848BBBB98C83CB7B89AEA57EC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a72be209-9077-38dd-86b4-19449ccca47d.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.213.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:98:c8:3c:b7:b8:9a:ea:57:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=b67f2181-65a7-412e-ad3e-2f4535ffcf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:7f:04:5c:cf:a4:32:a4:53:6e:6a:c5:7e:
                    d0:9b:7b:30:0a:81:0b:69:e9:82:de:73:9e:29:87:
                    a2:60:8c:ae:d7:48:7b:68:8c:c9:14:b5:22:b3:97:
                    9b:67:10:e6:38:68:15:6b:be:b7:65:19:8b:35:3a:
                    7a:4f:e4:97:c3:12:cd:31:52:da:fe:83:cd:d4:7e:
                    23:c8:2a:02:36:07:1f:c7:52:42:78:8f:21:fc:68:
                    db:e3:db:8e:b1:f1:0f:e9:72:22:64:65:10:75:70:
                    7e:cf:2d:45:af:2d:ae:be:32:d8:d2:f8:80:71:f7:
                    f6:b5:08:6e:da:e9:0e:d3:c1:33:b7:76:8e:70:6e:
                    7e:31:92:3f:bc:9d:03:3d:34:de:4e:d4:f3:ea:5d:
                    da:0f:cf:5b:d6:a3:b3:97:2a:61:da:cb:71:87:2b:
                    41:98:fe:d1:09:6c:5a:78:44:38:33:b3:36:b6:a4:
                    8f:0b:25:09:90:4a:9e:4e:43:98:ed:33:1f:e9:ef:
                    80:d3:50:b8:de:59:ae:72:b8:f9:7d:f0:97:76:c0:
                    91:05:96:50:9a:8c:d2:da:10:fa:e3:9e:f4:95:63:
                    55:d9:83:42:bd:7d:69:c5:0a:53:15:0e:c8:b8:e8:
                    f5:d5:66:e0:63:1d:ee:cc:ee:72:7e:0b:95:95:7b:
                    4c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:04:80:E0:21:AF:B9:AE:09:22:27:C3:71:C8:2F:5B:EF:6F:EF:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a72be209-9077-38dd-86b4-19449ccca47d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9d:68:7f:89:3c:b1:ce:dd:41:f0:3f:87:3f:07:12:91:af:
         07:8d:fa:e1:fe:44:d6:72:18:f9:1f:49:19:85:e9:59:cd:4a:
         7e:be:29:95:69:dc:73:50:e1:79:23:1c:3d:09:61:96:41:42:
         73:51:cc:13:bb:eb:35:15:4c:6e:89:55:dc:95:4a:d0:38:aa:
         14:14:2c:b7:4f:8b:bd:18:ff:27:9d:e0:48:e5:8d:68:a9:19:
         fa:ca:f9:74:d1:48:12:fc:9f:8c:03:c4:87:c0:72:1c:88:30:
         45:7f:fd:a4:23:85:c3:ee:a3:a5:13:02:e6:61:30:3b:94:11:
         f2:31:24:ff:87:ef:d1:12:cd:30:fb:34:90:b2:0e:20:b2:b7:
         1c:97:ee:03:16:54:2a:7f:43:b9:38:46:e8:39:2c:32:95:65:
         cc:d7:cf:92:d0:bf:7c:15:f0:e7:b5:8a:23:c6:05:52:d3:93:
         ed:bf:e8:bb:56:bd:08:3d:f7:d6:15:52:84:1b:7a:d0:d2:f7:
         97:46:6a:7f:ab:f4:42:87:0d:d2:08:95:40:34:5a:a0:97:6a:
         23:02:61:e0:23:a1:4b:02:1f:e3:74:76:96:28:04:b2:0c:09:
         30:c0:22:ff:f3:4c:28:85:37:fe:6d:f3:cd:c9:b0:79:64:33:
         ed:a7:5b:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u5jIPLe4mupX7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
YjY3ZjIxODEtNjVhNy00MTJlLWFkM2UtMmY0NTM1ZmZjZjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKR/BFzPpDKkU25qxX7Qm3swCoELaemC3nOe
KYeiYIyu10h7aIzJFLUis5ebZxDmOGgVa763ZRmLNTp6T+SXwxLNMVLa/oPN1H4j
yCoCNgcfx1JCeI8h/Gjb49uOsfEP6XIiZGUQdXB+zy1Fry2uvjLY0viAcff2tQhu
2ukO08Ezt3aOcG5+MZI/vJ0DPTTeTtTz6l3aD89b1qOzlyph2stxhytBmP7RCWxa
eEQ4M7M2tqSPCyUJkEqeTkOY7TMf6e+A01C43lmucrj5ffCXdsCRBZZQmozS2hD6
4570lWNV2YNCvX1pxQpTFQ7IuOj11WbgYx3uzO5yfguVlXtMswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEEgOAhr7muCSInw3HIL1vvb+9WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTcyYmUyMDktOTA3Ny0z
OGRkLTg2YjQtMTk0NDljY2NhNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9VgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABidaH+JPLHO3UHwP4c/BxKRrweN+uH+RNZyGPkfSRmF6VnNSn6+KZVp
3HNQ4XkjHD0JYZZBQnNRzBO76zUVTG6JVdyVStA4qhQULLdPi70Y/yed4EjljWip
GfrK+XTRSBL8n4wDxIfAchyIMEV//aQjhcPuo6UTAuZhMDuUEfIxJP+H79ESzTD7
NJCyDiCytxyX7gMWVCp/Q7k4Rug5LDKVZczXz5LQv3wV8Oe1iiPGBVLTk+2/6LtW
vQg999YVUoQbetDS95dGan+r9EKHDdIIlUA0WqCXaiMCYeAjoUsCH+N0dpYoBLIM
CTDAIv/zTCiFN/5t883JsHlkM+2nW/8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:00 2025 by rpki-client