Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7d6b86d-d13b-3627-814f-cee98dcdbd39.roa
File:                     a7d6b86d-d13b-3627-814f-cee98dcdbd39.roa (raw, json)
Hash identifier:          cvYghXLnkmkTMZG58WUt6FfhytfQQhFbPHZbYdV18kw=
Subject key identifier:   E6:E9:53:F6:7C:B9:1B:C2:7D:9B:DA:23:68:7D:DB:A2:45:80:D5:B0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488F1081C626E1CFB429803CC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7d6b86d-d13b-3627-814f-cee98dcdbd39.roa
Signing time:             Thu 16 Jan 2025 02:00:39 +0000
ROA not before:           Thu 16 Jan 2025 02:00:39 +0000
ROA not after:            Wed 16 Apr 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.62.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:10:81:c6:26:e1:cf:b4:29:80:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 16 02:00:39 2025 GMT
            Not After : Apr 16 01:00:39 2025 GMT
        Subject: CN=bab45767-37ab-4f3f-8cef-9da8235b19f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fd:45:7c:5e:1b:f5:5f:21:b8:4b:22:16:4a:
                    59:65:95:f3:6a:47:fe:9d:fd:69:04:b4:05:6e:54:
                    bb:95:76:c5:43:3d:97:1b:87:1f:1e:f1:f0:f6:8b:
                    5b:fe:b6:02:19:b3:6f:eb:1d:53:66:48:46:da:a9:
                    d8:61:6d:92:96:bc:5e:80:6e:c3:25:e0:ce:6a:04:
                    37:97:37:08:ff:5c:38:f1:7f:ec:d5:db:90:44:de:
                    91:75:2f:f8:11:ff:28:78:7e:4c:9c:22:ed:7f:f0:
                    a5:4e:16:fb:26:81:e1:65:2e:7c:da:78:0f:d3:ae:
                    7e:21:68:d0:3d:96:79:b5:97:c2:1f:b7:38:47:87:
                    67:ed:31:d9:09:ca:bd:a6:c3:a6:27:f2:5c:3a:fe:
                    20:74:fe:63:c8:87:b1:6d:98:2c:1e:6b:97:13:17:
                    0f:f4:e0:6c:89:50:4d:f3:0d:06:ec:14:2a:54:75:
                    bc:6d:05:b5:45:b5:c7:64:cf:13:89:a4:d6:3f:49:
                    8b:67:da:1b:2e:12:29:50:79:fb:97:9c:7e:d6:55:
                    8e:c8:0f:41:5b:2c:a9:f4:33:2c:5c:da:67:35:a1:
                    98:da:a2:da:f8:cc:c6:58:ad:fe:84:f2:b7:29:59:
                    21:bb:4b:db:70:f4:95:c8:61:25:f6:fe:2c:df:03:
                    9d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E9:53:F6:7C:B9:1B:C2:7D:9B:DA:23:68:7D:DB:A2:45:80:D5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7d6b86d-d13b-3627-814f-cee98dcdbd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:6b:0c:b0:4a:5c:0a:3d:8d:fb:d1:c2:98:8f:1c:67:74:
         77:08:24:dc:d4:18:79:08:f1:82:ae:cc:15:e1:9c:30:e2:dd:
         35:a1:7d:9e:8d:2b:dd:5d:c1:f1:1b:b4:d4:e0:e3:fa:01:a7:
         b5:6c:54:85:04:a9:f8:10:88:84:6f:e7:03:54:8d:9d:2b:e8:
         1f:26:0d:39:cb:ef:db:d2:7c:e7:70:60:ce:c8:f1:b0:89:b1:
         94:ce:c2:d3:57:71:19:9e:67:55:ae:3d:85:16:99:ab:36:43:
         ea:0f:65:78:db:13:9c:34:92:75:ed:03:c6:2b:54:57:36:32:
         41:fa:90:4a:0b:b7:ba:c1:39:5b:d0:31:42:11:0b:67:0c:e2:
         7b:3d:d2:0d:9f:9a:a5:8d:94:f6:d3:ad:27:50:34:a7:26:03:
         53:6e:f5:da:6b:0b:fa:bb:3a:8b:29:f0:14:db:fc:be:85:09:
         8b:45:92:13:3f:75:61:1a:4a:4b:4b:41:f1:99:23:54:ec:65:
         e2:27:8d:79:bc:a6:5e:c1:28:3c:28:3e:03:b6:5f:d1:f1:ca:
         a9:36:90:3e:fa:85:ca:ad:6d:25:01:77:01:17:25:ac:41:4d:
         2c:8d:2f:08:b5:65:76:90:0f:f3:15:53:0c:15:44:6a:25:9d:
         64:2c:b6:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEIHGJuHPtCmAPMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YmFiNDU3NjctMzdhYi00ZjNmLThjZWYtOWRhODIzNWIxOWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP1FfF4b9V8huEsiFkpZZZXzakf+nf1pBLQF
blS7lXbFQz2XG4cfHvHw9otb/rYCGbNv6x1TZkhG2qnYYW2SlrxegG7DJeDOagQ3
lzcI/1w48X/s1duQRN6RdS/4Ef8oeH5MnCLtf/ClThb7JoHhZS582ngP065+IWjQ
PZZ5tZfCH7c4R4dn7THZCcq9psOmJ/JcOv4gdP5jyIexbZgsHmuXExcP9OBsiVBN
8w0G7BQqVHW8bQW1RbXHZM8TiaTWP0mLZ9obLhIpUHn7l5x+1lWOyA9BWyyp9DMs
XNpnNaGY2qLa+MzGWK3+hPK3KVkhu0vbcPSVyGEl9v4s3wOddQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObpU/Z8uRvCfZvaI2h926JFgNWwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTdkNmI4NmQtZDEzYi0z
NjI3LTgxNGYtY2VlOThkY2RiZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz5hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEbawywSlwKPY370cKYjxxndHcIJNzUGHkI8YKuzBXhnDDi3TWhfZ6N
K91dwfEbtNTg4/oBp7VsVIUEqfgQiIRv5wNUjZ0r6B8mDTnL79vSfOdwYM7I8bCJ
sZTOwtNXcRmeZ1WuPYUWmas2Q+oPZXjbE5w0knXtA8YrVFc2MkH6kEoLt7rBOVvQ
MUIRC2cM4ns90g2fmqWNlPbTrSdQNKcmA1Nu9dprC/q7Oosp8BTb/L6FCYtFkhM/
dWEaSktLQfGZI1TsZeInjXm8pl7BKDwoPgO2X9Hxyqk2kD76hcqtbSUBdwEXJaxB
TSyNLwi1ZXaQD/MVUwwVRGolnWQstj4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:56 2025 by rpki-client