Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b423dd1d-b2a6-3bb2-9f79-c6bc7c0ab7fd.roa
File:                     b423dd1d-b2a6-3bb2-9f79-c6bc7c0ab7fd.roa (raw, json)
Hash identifier:          Z6UkWd1aQ8DT4Tvd8uL5Hy0mx9fFSqV9ZDVq5mfZ5+4=
Subject key identifier:   B7:9D:D8:7D:24:36:48:14:F4:60:92:33:C5:A2:3C:C2:E8:34:E6:7E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847C4AA1F13C2352947E14E0740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b423dd1d-b2a6-3bb2-9f79-c6bc7c0ab7fd.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     16625
IP address blocks:        23.194.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:1f:13:c2:35:29:47:e1:4e:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=7d42ff4f-c565-4020-8807-65e6f4c34d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:6f:bb:42:84:45:e2:92:b2:b9:43:0a:9a:
                    13:f1:39:bc:eb:e5:60:31:d4:6f:ef:32:45:4f:9c:
                    5e:f8:de:96:c3:cb:62:b8:35:cd:93:65:e5:d4:3a:
                    66:70:db:3b:54:fe:6a:69:91:6e:be:20:8a:0a:05:
                    f4:5a:88:47:ff:a2:61:18:76:96:f3:ca:d6:15:a1:
                    2b:8b:36:fa:47:25:64:5a:c5:f8:a3:66:b9:0a:30:
                    c7:b7:cc:a7:6f:13:d2:f5:62:fa:99:fe:f4:d2:2a:
                    2d:b4:ad:db:c8:90:9a:fe:71:d4:3e:ff:27:98:45:
                    71:ed:92:5e:78:7c:07:82:39:f4:0a:11:f1:9a:df:
                    23:fd:ed:66:98:74:3e:43:09:ad:7a:98:c5:4e:87:
                    8b:63:aa:9d:a1:9e:2d:c4:62:f2:ea:4a:7a:14:9c:
                    a8:7e:08:7d:59:ff:ea:59:92:a2:9d:96:17:c6:29:
                    26:41:59:17:e6:f2:ad:2f:16:d6:f6:1b:75:e4:67:
                    60:57:8c:bb:c6:48:44:b3:c3:76:d0:84:48:a2:ca:
                    1b:09:8d:5e:fe:28:63:60:d6:93:1c:d9:c8:8a:ee:
                    00:7d:de:2b:6e:bb:ec:10:96:70:4a:c6:69:07:0c:
                    b4:df:d4:79:31:a2:52:a0:10:4c:25:d6:8f:5a:f0:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9D:D8:7D:24:36:48:14:F4:60:92:33:C5:A2:3C:C2:E8:34:E6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b423dd1d-b2a6-3bb2-9f79-c6bc7c0ab7fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:41:c0:c3:8f:a4:19:72:9c:75:8d:8d:26:3a:12:17:1b:eb:
         3e:e7:fb:bc:e9:1b:4a:0c:ab:31:a7:5c:2f:fe:e7:ac:13:a7:
         03:49:19:65:34:e3:48:97:3d:e8:12:4b:9a:b8:c5:8a:bf:54:
         3e:55:26:3a:84:70:08:48:10:e9:0d:05:37:32:7d:61:8b:fb:
         41:76:64:cb:af:2d:9e:c1:2e:06:4b:b4:a0:b8:21:15:fd:0a:
         83:bc:20:07:57:cb:61:67:75:bf:38:96:33:1c:55:75:cb:cf:
         61:40:73:87:04:eb:0e:c0:74:1f:0b:24:77:3e:08:fc:53:82:
         76:73:db:7d:98:b4:3c:5a:82:cc:87:5b:38:5e:9f:c8:12:02:
         bf:7b:9a:4e:29:23:3c:53:27:6c:45:fb:72:dd:30:08:b9:cb:
         ef:3c:df:b0:fc:46:a5:23:a9:a0:a9:8e:91:11:4b:43:8e:35:
         ab:12:59:35:20:45:59:d0:b4:14:b3:81:07:e7:15:0b:d9:7e:
         06:16:b2:f9:06:4d:4e:c9:23:4b:a9:05:ab:fa:9d:f2:9c:06:
         09:27:4a:d6:70:7d:4e:12:87:b4:64:56:99:6c:f3:91:74:97:
         6f:de:7f:96:3b:3f:61:a6:1d:d7:2f:0f:cd:df:a8:08:b1:f5:
         7e:2f:5c:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfEqh8TwjUpR+FOB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
N2Q0MmZmNGYtYzU2NS00MDIwLTg4MDctNjVlNmY0YzM0ZDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Vvu0KEReKSsrlDCpoT8Tm86+VgMdRv7zJF
T5xe+N6Ww8tiuDXNk2Xl1DpmcNs7VP5qaZFuviCKCgX0WohH/6JhGHaW88rWFaEr
izb6RyVkWsX4o2a5CjDHt8ynbxPS9WL6mf700iottK3byJCa/nHUPv8nmEVx7ZJe
eHwHgjn0ChHxmt8j/e1mmHQ+QwmtepjFToeLY6qdoZ4txGLy6kp6FJyofgh9Wf/q
WZKinZYXxikmQVkX5vKtLxbW9ht15GdgV4y7xkhEs8N20IRIosobCY1e/ihjYNaT
HNnIiu4Afd4rbrvsEJZwSsZpBwy039R5MaJSoBBMJdaPWvBX6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLed2H0kNkgU9GCSM8WiPMLoNOZ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjQyM2RkMWQtYjJhNi0z
YmIyLTlmNzktYzZiYzdjMGFiN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8LQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdBwMOPpBlynHWNjSY6Ehcb6z7n+7zpG0oMqzGnXC/+56wTpwNJGWU0
40iXPegSS5q4xYq/VD5VJjqEcAhIEOkNBTcyfWGL+0F2ZMuvLZ7BLgZLtKC4IRX9
CoO8IAdXy2Fndb84ljMcVXXLz2FAc4cE6w7AdB8LJHc+CPxTgnZz232YtDxagsyH
Wzhen8gSAr97mk4pIzxTJ2xF+3LdMAi5y+8837D8RqUjqaCpjpERS0OONasSWTUg
RVnQtBSzgQfnFQvZfgYWsvkGTU7JI0upBav6nfKcBgknStZwfU4Sh7RkVpls85F0
l2/ef5Y7P2GmHdcvD83fqAix9X4vXF8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:47:56 2024 by rpki-client on console-ams.rpki-client.org