Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa
File:                     b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa (raw, json)
Hash identifier:          D+5FLNtuQfRcNxbslJwCYcBVce05LAtKALOFrrY5Xz8=
Subject key identifier:   BF:0B:01:14:57:02:CD:56:EA:2D:E2:9E:27:9C:03:35:6B:B2:A6:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845A69906863811B6B1C310B240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa
Signing time:             Wed 24 Apr 2024 09:58:35 +0000
ROA not before:           Wed 24 Apr 2024 09:58:35 +0000
ROA not after:            Tue 23 Jul 2024 09:58:35 +0000
asID:                     16625
IP address blocks:        23.4.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:99:06:86:38:11:b6:b1:c3:10:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 24 09:58:35 2024 GMT
            Not After : Jul 23 09:58:35 2024 GMT
        Subject: CN=6881eb06-a57d-4df7-afb2-c2b11efe54fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:51:8f:1e:ff:d4:9c:57:db:45:00:53:58:
                    3c:be:bb:11:ae:40:58:28:12:11:d5:a7:50:c2:57:
                    d3:ab:c8:d4:09:4c:d7:b9:30:7e:70:54:59:71:e6:
                    bb:b4:ae:e1:7f:3b:55:23:9a:b2:2d:69:39:4a:3a:
                    51:59:e5:0c:91:87:84:97:a2:f8:d5:0b:0e:a1:b6:
                    dd:3c:57:2c:bc:a5:3b:c9:c3:05:1c:96:9a:2c:cc:
                    47:37:d6:da:bf:bf:9d:a0:66:92:26:77:74:2d:7c:
                    74:65:e2:84:9f:5c:cb:ce:16:97:c6:3a:c3:0a:7a:
                    55:31:85:70:9a:b4:bd:5a:72:3b:9c:b4:a6:a8:ac:
                    bf:1b:ba:ca:ff:c9:9f:93:33:58:56:0a:a2:a5:99:
                    0a:e9:e2:13:00:57:10:c1:34:dc:e1:55:d5:aa:d0:
                    ea:72:46:56:5b:16:d3:07:01:b4:e1:fa:23:13:1a:
                    58:45:96:af:24:07:60:47:da:35:2e:05:69:56:ec:
                    da:c8:83:3e:ac:c4:ad:58:6e:d1:e6:b3:b7:2c:76:
                    e7:12:23:c4:73:9c:f6:b2:da:0e:16:b6:a5:63:46:
                    d1:8e:74:e0:e2:3c:71:b5:41:cf:55:84:87:39:e1:
                    cf:f1:9d:8e:ad:5f:ce:f4:5e:21:0d:78:41:6c:12:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0B:01:14:57:02:CD:56:EA:2D:E2:9E:27:9C:03:35:6B:B2:A6:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.4.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:8d:97:60:17:6c:ae:42:40:37:b7:79:d6:4f:0a:ce:b1:8c:
         06:66:77:09:ad:cc:38:01:b4:ac:58:fa:b9:e9:f9:7f:1a:68:
         bb:4c:78:9a:09:a7:6e:44:dd:02:b2:29:af:7c:ee:65:4b:68:
         2b:2e:9a:cb:26:34:90:ea:e7:20:2a:c6:ae:7e:ce:a9:9b:ec:
         44:5c:6f:ae:f4:6f:a6:73:e1:17:0a:5f:a4:26:56:d5:08:e6:
         85:3b:81:ca:4f:8e:0a:d0:45:de:a2:03:24:f3:54:e6:0f:97:
         69:81:4c:23:ea:c8:1b:9e:a9:2d:3c:75:60:10:a7:80:06:76:
         e7:d4:8f:b5:02:64:11:37:68:05:fe:85:61:db:7e:65:73:28:
         47:d2:90:a6:ee:a9:d6:9b:8d:26:5b:35:55:6b:2a:65:13:38:
         30:51:60:87:aa:0c:91:fd:3a:2a:b7:5a:41:3a:34:02:97:52:
         40:9e:31:6d:b4:50:6b:f7:b7:85:2d:c0:35:4f:3e:38:da:5b:
         f2:8c:df:17:cd:f5:65:b1:7e:1a:80:6a:4f:36:8a:ab:48:a8:
         f7:27:4d:80:30:5d:4a:18:cd:70:00:af:71:07:d5:7a:2e:6c:
         b3:b5:b7:0e:0c:45:3c:63:b4:ea:80:64:65:0e:3d:90:59:58:
         ea:1b:d6:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWmmQaGOBG2scMQskAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQyNDA5NTgzNVoXDTI0MDcyMzA5NTgzNVowLzEtMCsGA1UEAxMk
Njg4MWViMDYtYTU3ZC00ZGY3LWFmYjItYzJiMTFlZmU1NGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwpRjx7/1JxX20UAU1g8vrsRrkBYKBIR1adQ
wlfTq8jUCUzXuTB+cFRZcea7tK7hfztVI5qyLWk5SjpRWeUMkYeEl6L41QsOobbd
PFcsvKU7ycMFHJaaLMxHN9bav7+doGaSJnd0LXx0ZeKEn1zLzhaXxjrDCnpVMYVw
mrS9WnI7nLSmqKy/G7rK/8mfkzNYVgqipZkK6eITAFcQwTTc4VXVqtDqckZWWxbT
BwG04fojExpYRZavJAdgR9o1LgVpVuzayIM+rMStWG7R5rO3LHbnEiPEc5z2stoO
FralY0bRjnTg4jxxtUHPVYSHOeHP8Z2OrV/O9F4hDXhBbBJt9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8LARRXAs1W6i3iniecAzVrsqZRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg0ZGNiZDAtNDVkZS0z
NTE4LWI5YmUtMTQ4NTVhM2EyZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJONl2AXbK5CQDe3edZPCs6xjAZmdwmtzDgBtKxY+rnp+X8aaLtMeJoJ
p25E3QKyKa987mVLaCsumssmNJDq5yAqxq5+zqmb7ERcb670b6Zz4RcKX6QmVtUI
5oU7gcpPjgrQRd6iAyTzVOYPl2mBTCPqyBueqS08dWAQp4AGdufUj7UCZBE3aAX+
hWHbfmVzKEfSkKbuqdabjSZbNVVrKmUTODBRYIeqDJH9Oiq3WkE6NAKXUkCeMW20
UGv3t4UtwDVPPjjaW/KM3xfN9WWxfhqAak82iqtIqPcnTYAwXUoYzXAAr3EH1Xou
bLO1tw4MRTxjtOqAZGUOPZBZWOob1gc=
-----END CERTIFICATE-----
Generated at Fri May 17 16:16:53 2024 by rpki-client on console-fra.rpki-client.org