Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b787efd7-a70f-3e1d-8688-187076741b77.roa
File:                     b787efd7-a70f-3e1d-8688-187076741b77.roa (raw, json)
Hash identifier:          s7a5oQsKiIcHopY1y/ev/g+mdIZVshxrIlzHJrycO8k=
Subject key identifier:   FC:48:A7:0E:44:DF:2C:C1:97:BB:F7:EE:52:7A:EB:6C:BF:C4:24:F2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847EA5A0621F0D89D0622436F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b787efd7-a70f-3e1d-8688-187076741b77.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     35994
IP address blocks:        23.218.104.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:06:21:f0:d8:9d:06:22:43:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=fe9b4673-7278-4374-9b38-350f68a679a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b0:29:58:94:a8:0c:97:ad:2d:e7:e6:6f:75:
                    72:58:d9:62:99:a2:1b:c6:84:da:a1:e3:e2:c1:1e:
                    bf:50:26:51:39:57:2a:d5:87:84:e1:8a:bb:59:46:
                    c3:7e:d3:f5:f5:13:9c:b2:ed:ee:14:75:28:37:f0:
                    4b:2c:92:1a:b3:a1:84:8b:57:f3:9b:4a:f2:f9:96:
                    79:32:1c:ef:00:21:f0:8e:16:8b:9c:54:4e:fc:f6:
                    1a:a1:51:08:4e:9b:60:6d:a2:b0:6d:4d:01:d7:3f:
                    45:55:ae:e9:af:01:70:43:ea:66:c1:91:46:20:3a:
                    94:02:b7:3b:de:ef:34:61:5f:8f:19:dc:d6:1e:97:
                    33:90:cc:0a:40:5c:a2:a6:1a:e1:b3:01:45:10:05:
                    80:31:2f:11:a4:4e:3a:9a:e0:14:83:96:a3:95:20:
                    f2:0c:bb:17:fe:30:a7:7d:e9:b6:39:15:05:51:71:
                    58:49:34:77:17:28:75:85:ad:c2:77:3b:77:1d:12:
                    f3:4a:21:d8:14:26:9c:23:e0:67:3d:6d:25:4d:a2:
                    08:80:e1:65:7f:ad:3f:d7:08:c3:7d:b1:ae:b4:14:
                    c1:8a:a9:75:3b:e8:15:77:39:80:d0:7b:5e:3f:f2:
                    10:2c:b6:1d:32:ee:4e:2f:85:53:76:d2:70:69:51:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:48:A7:0E:44:DF:2C:C1:97:BB:F7:EE:52:7A:EB:6C:BF:C4:24:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b787efd7-a70f-3e1d-8688-187076741b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:6e:74:ff:41:bc:a0:c4:26:fb:99:85:5c:e6:be:c5:bc:e8:
         20:63:65:30:25:e0:59:a1:d3:53:14:e8:71:30:fa:6f:6a:c6:
         d9:3b:90:39:59:94:d4:47:1e:38:d4:fd:42:7a:22:d2:91:b9:
         d6:e1:11:0f:16:bc:00:64:0c:4d:45:54:19:cc:41:5f:23:10:
         be:3a:11:de:01:b6:a5:97:f5:b3:37:92:3d:d6:f7:65:28:f4:
         65:d0:87:61:53:69:e9:80:ce:1d:c5:0d:d9:33:34:4b:ed:42:
         c8:10:5f:10:86:3c:47:c5:39:46:13:a1:60:a1:e9:de:da:00:
         cb:f9:9f:6a:b2:7f:66:2a:e3:9f:e4:c5:fa:08:c3:2f:69:f0:
         96:a0:ab:d5:c4:89:96:f6:f1:b8:3d:f8:51:3f:1a:8c:06:db:
         c0:59:7f:61:cf:13:e5:63:2f:21:c7:ea:0a:03:71:ea:51:c8:
         f8:d5:0d:99:49:d4:62:e2:a7:05:a6:5f:52:6c:bc:c2:d1:4a:
         b6:70:e3:3a:30:9e:81:af:4a:cf:53:4f:81:f0:9f:4e:35:b4:
         58:5a:82:75:ce:83:bf:90:3d:6a:43:7a:56:2c:47:5c:58:58:
         d8:70:33:54:48:b3:b5:ba:07:58:84:1a:14:fc:2f:7e:ae:1d:
         34:89:2a:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWgYh8NidBiJDbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk
ZmU5YjQ2NzMtNzI3OC00Mzc0LTliMzgtMzUwZjY4YTY3OWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrApWJSoDJetLefmb3VyWNlimaIbxoTaoePi
wR6/UCZROVcq1YeE4Yq7WUbDftP19ROcsu3uFHUoN/BLLJIas6GEi1fzm0ry+ZZ5
MhzvACHwjhaLnFRO/PYaoVEITptgbaKwbU0B1z9FVa7prwFwQ+pmwZFGIDqUArc7
3u80YV+PGdzWHpczkMwKQFyiphrhswFFEAWAMS8RpE46muAUg5ajlSDyDLsX/jCn
fem2ORUFUXFYSTR3Fyh1ha3Cdzt3HRLzSiHYFCacI+BnPW0lTaIIgOFlf60/1wjD
fbGutBTBiql1O+gVdzmA0HteP/IQLLYdMu5OL4VTdtJwaVFA6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxIpw5E3yzBl7v37lJ662y/xCTyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjc4N2VmZDctYTcwZi0z
ZTFkLTg2ODgtMTg3MDc2NzQxYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9poMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVudP9BvKDEJvuZhVzmvsW86CBjZTAl4Fmh01MU6HEw+m9qxtk7kDlZ
lNRHHjjU/UJ6ItKRudbhEQ8WvABkDE1FVBnMQV8jEL46Ed4BtqWX9bM3kj3W92Uo
9GXQh2FTaemAzh3FDdkzNEvtQsgQXxCGPEfFOUYToWCh6d7aAMv5n2qyf2Yq45/k
xfoIwy9p8Jagq9XEiZb28bg9+FE/GowG28BZf2HPE+VjLyHH6goDcepRyPjVDZlJ
1GLipwWmX1JsvMLRSrZw4zownoGvSs9TT4Hwn041tFhagnXOg7+QPWpDelYsR1xY
WNhwM1RIs7W6B1iEGhT8L36uHTSJKi4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:00 2024 by rpki-client on console-ams.rpki-client.org