Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7aeae9d-e341-3923-a412-635f824286e5.roa
File:                     b7aeae9d-e341-3923-a412-635f824286e5.roa (raw, json)
Hash identifier:          uUqpxRE4zULchstf81K3N5C26qmcI4gsRmdyKVGZ6Rk=
Subject key identifier:   D9:77:0C:E6:1D:0A:6C:B1:42:EA:EF:88:73:EA:7F:E0:65:8F:B7:32
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584780269CA59718F3FB1E47C9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7aeae9d-e341-3923-a412-635f824286e5.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     20940
IP address blocks:        23.58.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:9c:a5:97:18:f3:fb:1e:47:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=ae317c4e-b4c3-41bb-ac4b-2de527716aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:df:c6:3b:d9:ab:6e:dd:47:6d:33:74:64:
                    ba:10:86:3d:85:aa:2f:bc:98:78:42:d8:92:ce:6c:
                    97:4e:aa:77:c7:01:84:9f:bd:41:5b:61:cf:aa:38:
                    f7:1a:02:dc:f6:48:88:76:27:d1:26:67:8b:92:a1:
                    64:da:85:1b:a1:17:25:da:61:13:1b:2b:e2:a4:e4:
                    e0:99:30:c2:a2:fd:5b:45:b1:ff:20:2a:1a:c8:cf:
                    2f:06:ae:c5:69:ea:bd:bc:72:ec:14:fe:15:f8:ff:
                    32:bb:eb:97:1d:ea:b0:e9:cd:24:7c:19:61:1c:c1:
                    ea:f2:11:29:64:23:92:25:cc:88:f8:da:0d:71:5a:
                    9f:6d:bc:e0:c3:b8:d2:47:8b:64:b5:f3:34:63:96:
                    a2:88:e6:ef:3f:1d:27:73:dd:6b:1d:d7:7a:46:c3:
                    1c:b5:57:b2:67:f3:3a:92:a2:e7:af:f6:a0:e5:dd:
                    b0:fe:96:69:d3:8b:b6:db:87:dc:63:7f:7d:ae:74:
                    fe:65:6d:4c:8f:c1:ce:a3:9a:c4:0e:de:ab:f1:7a:
                    dd:be:f0:3c:32:66:0e:ac:d4:5c:43:39:1a:bb:24:
                    47:a2:e4:be:de:82:12:cd:8a:8f:6f:12:a6:1f:9f:
                    6b:83:66:4f:4f:b8:d1:83:25:51:e0:d8:5d:fe:55:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:77:0C:E6:1D:0A:6C:B1:42:EA:EF:88:73:EA:7F:E0:65:8F:B7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7aeae9d-e341-3923-a412-635f824286e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:fb:30:5f:dd:17:4d:b9:ef:a2:b4:86:4a:f3:9f:7d:0e:
         d7:a7:f1:eb:1a:29:38:16:85:1a:44:72:92:b5:22:51:3d:71:
         88:3f:1c:4c:85:5d:06:92:8a:9f:38:0c:e6:b3:f7:7f:87:52:
         f5:d1:09:87:bc:be:66:67:22:da:6a:e3:fa:a2:64:80:17:18:
         b5:f1:81:10:32:6a:bf:72:b1:6f:8a:be:7f:e8:9b:e0:d4:5c:
         1e:e4:c6:f0:4c:17:55:d7:c6:83:1f:05:26:21:b2:95:82:e4:
         f1:df:59:2e:1d:7e:43:cc:ed:3d:24:12:2a:3c:1c:8e:6d:3b:
         f3:ec:83:e0:23:67:f5:ef:2a:ac:14:00:a9:be:89:48:af:48:
         0c:62:dd:62:1b:c8:75:37:e7:17:ab:91:45:8b:ff:a9:cb:20:
         e4:67:85:82:9b:54:4c:d6:91:ff:05:53:02:c0:9b:42:61:21:
         6e:fe:fa:6d:ed:11:ff:52:41:ed:c7:96:7f:f2:ae:4f:70:e4:
         10:90:26:60:34:38:03:85:92:49:2d:6e:a9:a2:98:17:bd:97:
         fe:7b:79:72:7d:08:48:b8:84:65:31:01:e4:25:53:6d:a9:c4:
         e5:ba:10:7e:a5:b3:ba:4c:2c:69:9c:eb:2e:b5:1f:c0:74:88:
         07:81:87:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJpyllxjz+x5HycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
YWUzMTdjNGUtYjRjMy00MWJiLWFjNGItMmRlNTI3NzE2YWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJbfxjvZq27dR20zdGS6EIY9haovvJh4QtiS
zmyXTqp3xwGEn71BW2HPqjj3GgLc9kiIdifRJmeLkqFk2oUboRcl2mETGyvipOTg
mTDCov1bRbH/ICoayM8vBq7Faeq9vHLsFP4V+P8yu+uXHeqw6c0kfBlhHMHq8hEp
ZCOSJcyI+NoNcVqfbbzgw7jSR4tktfM0Y5aiiObvPx0nc91rHdd6RsMctVeyZ/M6
kqLnr/ag5d2w/pZp04u224fcY399rnT+ZW1Mj8HOo5rEDt6r8XrdvvA8MmYOrNRc
QzkauyRHouS+3oISzYqPbxKmH59rg2ZPT7jRgyVR4Nhd/lV1UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNl3DOYdCmyxQurviHPqf+Blj7cyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjdhZWFlOWQtZTM0MS0z
OTIzLWE0MTItNjM1ZjgyNDI4NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzrRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhb+zBf3RdNue+itIZK8599Dten8esaKTgWhRpEcpK1IlE9cYg/HEyF
XQaSip84DOaz93+HUvXRCYe8vmZnItpq4/qiZIAXGLXxgRAyar9ysW+Kvn/om+DU
XB7kxvBMF1XXxoMfBSYhspWC5PHfWS4dfkPM7T0kEio8HI5tO/Psg+AjZ/XvKqwU
AKm+iUivSAxi3WIbyHU35xerkUWL/6nLIORnhYKbVEzWkf8FUwLAm0JhIW7++m3t
Ef9SQe3Hln/yrk9w5BCQJmA0OAOFkkktbqmimBe9l/57eXJ9CEi4hGUxAeQlU22p
xOW6EH6ls7pMLGmc6y61H8B0iAeBh4Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:18 2024 by rpki-client on console-ams.rpki-client.org