Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3131973-62d3-3f12-9801-271ad4e4d188.roa
File:                     b3131973-62d3-3f12-9801-271ad4e4d188.roa (raw, json)
Hash identifier:          tispQcyE7Rw9aDp3hthHi0+PoJ63x3/5SQdqRpOFn/8=
Subject key identifier:   DE:3C:45:3A:30:D8:E4:B3:D5:15:D2:29:96:FA:F7:4D:F7:10:23:CD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36DC47FEC0CED71602C6B4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3131973-62d3-3f12-9801-271ad4e4d188.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.56.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:dc:47:fe:c0:ce:d7:16:02:c6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=82b23596-8cef-4c91-9e89-f023417d55a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f7:e5:7d:74:07:17:8f:bb:58:fd:e5:cf:72:
                    26:07:ac:b0:cd:6c:72:d8:0d:e0:c3:0e:39:60:a8:
                    c6:13:d0:95:aa:e7:08:91:41:18:20:78:8a:15:e8:
                    75:c9:d6:ed:05:68:dc:f5:26:3e:1d:14:9b:3c:35:
                    85:54:0f:67:22:77:4b:3c:5a:8a:2a:f5:52:f0:13:
                    9a:38:51:7f:61:45:a5:f4:70:70:f1:3a:e9:10:cd:
                    f5:8e:43:04:0f:6c:c8:2e:b9:bd:5b:ed:80:4a:a7:
                    6a:e6:e8:b4:9e:f0:80:ec:dd:66:da:3a:15:eb:93:
                    e5:88:e1:19:62:84:e5:d2:c6:52:67:34:1c:ca:88:
                    86:cb:d6:5e:77:c1:f1:b2:31:dc:d3:a1:21:2d:28:
                    8f:af:8c:3a:59:3f:83:c8:33:9b:55:5d:ab:55:89:
                    6d:ad:38:ed:31:b0:a4:14:30:c1:21:31:ac:5d:d8:
                    a5:b1:7b:62:89:df:a6:95:4c:1d:f6:18:b6:7b:84:
                    6b:9a:59:29:66:c6:65:1c:79:e4:85:6e:68:c2:ad:
                    8a:bf:dc:ca:5b:56:a1:0c:1e:17:86:b7:9d:f0:54:
                    d1:9b:7d:53:c0:5b:09:d6:03:37:ee:7a:0f:6f:aa:
                    07:43:48:1b:a1:7f:5c:70:3e:9b:03:45:72:1d:c8:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:45:3A:30:D8:E4:B3:D5:15:D2:29:96:FA:F7:4D:F7:10:23:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3131973-62d3-3f12-9801-271ad4e4d188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:49:4a:20:5d:ce:56:22:6c:45:20:49:4a:d0:ec:4d:05:13:
         8f:b7:bd:de:a8:cd:1a:f1:53:82:a8:57:b1:b4:64:dc:2e:49:
         f6:05:4c:72:af:84:b1:e1:14:0b:97:d0:3c:d7:38:61:86:b2:
         91:3c:72:75:c1:2b:28:38:77:18:7b:b4:53:91:b3:ab:5f:ce:
         7f:3e:24:8d:72:55:8e:0c:88:46:ff:93:0e:33:bb:ab:80:f5:
         f6:28:9d:e9:17:5e:55:b5:b3:9a:07:d6:7b:dd:40:51:0a:f2:
         30:53:2d:82:42:63:c7:25:b7:8f:ce:58:8b:5e:39:3b:2c:5e:
         1d:53:9a:94:68:75:fb:d9:a4:b9:d2:ba:7a:89:e6:8b:f1:c4:
         da:80:d7:81:01:93:ba:5b:b7:bf:87:e5:1a:42:09:59:01:e9:
         79:ab:11:f3:38:96:f9:cb:86:36:8e:c8:9b:cf:ae:7c:83:16:
         f2:92:c6:d1:8c:bd:33:c0:f8:68:93:0f:2e:4d:21:a6:27:99:
         08:31:03:fd:5b:5a:83:7b:02:8b:0a:20:c7:4b:d9:7a:9d:33:
         c6:b0:8b:0f:d8:b9:d7:7a:50:dc:c6:f1:d3:10:64:a5:9f:10:
         4f:3c:69:80:da:e7:61:67:3e:a2:49:49:2e:0c:35:ff:26:10:
         36:09:87:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNtxH/sDO1xYCxrQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
ODJiMjM1OTYtOGNlZi00YzkxLTllODktZjAyMzQxN2Q1NWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPflfXQHF4+7WP3lz3ImB6ywzWxy2A3gww45
YKjGE9CVqucIkUEYIHiKFeh1ydbtBWjc9SY+HRSbPDWFVA9nIndLPFqKKvVS8BOa
OFF/YUWl9HBw8TrpEM31jkMED2zILrm9W+2ASqdq5ui0nvCA7N1m2joV65PliOEZ
YoTl0sZSZzQcyoiGy9Zed8HxsjHc06EhLSiPr4w6WT+DyDObVV2rVYltrTjtMbCk
FDDBITGsXdilsXtiid+mlUwd9hi2e4RrmlkpZsZlHHnkhW5owq2Kv9zKW1ahDB4X
hred8FTRm31TwFsJ1gM37noPb6oHQ0gboX9ccD6bA0VyHcjORQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN48RTow2OSz1RXSKZb69033ECPNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjMxMzE5NzMtNjJkMy0z
ZjEyLTk4MDEtMjcxYWQ0ZTRkMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFziPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVJSiBdzlYibEUgSUrQ7E0FE4+3vd6ozRrxU4KoV7G0ZNwuSfYFTHKv
hLHhFAuX0DzXOGGGspE8cnXBKyg4dxh7tFORs6tfzn8+JI1yVY4MiEb/kw4zu6uA
9fYonekXXlW1s5oH1nvdQFEK8jBTLYJCY8clt4/OWIteOTssXh1TmpRodfvZpLnS
unqJ5ovxxNqA14EBk7pbt7+H5RpCCVkB6XmrEfM4lvnLhjaOyJvPrnyDFvKSxtGM
vTPA+GiTDy5NIaYnmQgxA/1bWoN7AosKIMdL2XqdM8awiw/Yudd6UNzG8dMQZKWf
EE88aYDa52FnPqJJSS4MNf8mEDYJh8g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:28 2024 by rpki-client on console-fra.rpki-client.org