Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f3f8d-cb01-3a39-97c7-be151e03fbc5.roa
File:                     b86f3f8d-cb01-3a39-97c7-be151e03fbc5.roa (raw, json)
Hash identifier:          /6SNouf4QVyPjclKiCa/dJQ2NxPmdtJJHYlkZH9Vzk4=
Subject key identifier:   69:88:47:74:B3:E2:73:0A:80:49:4A:F0:F0:6B:31:EE:58:66:46:73
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847D999FF8875832C02FA5D2A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f3f8d-cb01-3a39-97c7-be151e03fbc5.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     16625
IP address blocks:        23.206.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:ff:88:75:83:2c:02:fa:5d:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=1ee925db-4bf6-4f51-a11a-f2878dcc1e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:bf:bd:d4:cb:9e:e2:af:a2:46:54:30:db:
                    76:6b:b5:03:a7:83:9b:31:36:76:6c:c9:33:16:7d:
                    1f:2c:68:63:12:34:35:09:ab:61:c7:34:14:93:78:
                    04:77:3d:ae:f2:78:19:11:61:93:58:a6:05:80:90:
                    b9:fe:db:c9:ce:e0:64:ea:a9:0a:85:51:9f:e6:c3:
                    e1:8b:cf:33:0f:71:50:45:0b:93:f9:f6:9f:3e:75:
                    98:5d:cd:e9:a1:09:66:38:0a:b0:02:30:bb:67:ac:
                    af:81:aa:02:84:3f:51:c6:1a:e0:c7:62:c0:a7:56:
                    89:9e:5d:c8:f4:0c:77:49:5a:18:df:55:49:d4:c9:
                    98:87:6d:fc:9d:6a:aa:64:be:02:e5:68:1d:ea:cf:
                    64:98:08:bf:18:b6:c1:e6:11:96:70:19:46:21:c8:
                    68:4f:31:90:b6:49:33:2d:2b:9e:fd:e6:56:37:bf:
                    ee:da:68:65:e3:40:52:e6:3d:76:97:87:0d:7d:1e:
                    90:aa:4c:81:24:e3:5a:e9:49:5a:4d:18:8a:aa:00:
                    46:1d:c0:3a:4d:05:44:a1:de:bb:72:d9:e1:50:98:
                    21:36:b3:d1:6b:e1:f0:a4:90:3c:86:b5:05:6d:54:
                    08:69:03:d2:a1:b6:31:82:18:cf:13:c1:4a:3f:3e:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:88:47:74:B3:E2:73:0A:80:49:4A:F0:F0:6B:31:EE:58:66:46:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f3f8d-cb01-3a39-97c7-be151e03fbc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:45:e3:47:45:1d:e2:f1:eb:8c:6e:f8:cb:a2:d6:6a:cb:
         00:a8:5b:e4:c2:b5:9b:40:c7:eb:b3:7a:de:cb:98:8c:32:54:
         05:5b:ee:84:4a:01:6f:6f:95:e3:71:82:16:87:ae:e9:1f:cb:
         49:f2:f6:8c:aa:2c:05:2b:f9:33:c3:67:bd:5d:c1:2c:7e:6e:
         b1:eb:a8:d8:43:5d:05:d2:ed:ec:67:78:31:d6:1e:19:29:3d:
         31:22:e3:96:3e:4a:92:84:aa:c7:8f:cc:22:4b:81:fa:39:4c:
         1c:06:41:4d:bb:0c:23:e6:7c:93:f7:aa:55:91:20:16:f6:8e:
         d4:94:63:f7:b7:f0:6a:f9:4e:8b:5c:2a:84:bc:4e:b3:20:43:
         c5:6c:b3:04:93:c6:b9:a2:d6:5c:03:ec:3a:f7:a8:9d:6f:04:
         21:d5:2c:8e:3d:51:a6:55:7a:d5:da:8e:8b:ad:8a:df:b0:de:
         b7:b3:42:ee:c7:da:d3:37:8e:5d:85:62:ef:85:c1:f6:12:fb:
         ac:b6:a5:27:19:1c:ef:4b:eb:b1:35:d0:c3:95:b8:57:58:82:
         6e:b1:ef:5c:1b:85:59:79:76:f6:94:84:90:d9:6f:ba:62:cd:
         ad:e9:8e:6e:2f:90:9a:c3:09:f4:24:18:b3:79:8f:84:83:c9:
         d3:20:7f:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmf+IdYMsAvpdKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
MWVlOTI1ZGItNGJmNi00ZjUxLWExMWEtZjI4NzhkY2MxZTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVe/vdTLnuKvokZUMNt2a7UDp4ObMTZ2bMkz
Fn0fLGhjEjQ1CathxzQUk3gEdz2u8ngZEWGTWKYFgJC5/tvJzuBk6qkKhVGf5sPh
i88zD3FQRQuT+fafPnWYXc3poQlmOAqwAjC7Z6yvgaoChD9Rxhrgx2LAp1aJnl3I
9Ax3SVoY31VJ1MmYh238nWqqZL4C5Wgd6s9kmAi/GLbB5hGWcBlGIchoTzGQtkkz
LSue/eZWN7/u2mhl40BS5j12l4cNfR6QqkyBJONa6UlaTRiKqgBGHcA6TQVEod67
ctnhUJghNrPRa+HwpJA8hrUFbVQIaQPSobYxghjPE8FKPz5UFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmIR3Sz4nMKgElK8PBrMe5YZkZzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg2ZjNmOGQtY2IwMS0z
YTM5LTk3YzctYmUxNTFlMDNmYmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF864MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSoReNHRR3i8euMbvjLotZqywCoW+TCtZtAx+uzet7LmIwyVAVb7oRK
AW9vleNxghaHrukfy0ny9oyqLAUr+TPDZ71dwSx+brHrqNhDXQXS7exneDHWHhkp
PTEi45Y+SpKEqsePzCJLgfo5TBwGQU27DCPmfJP3qlWRIBb2jtSUY/e38Gr5Totc
KoS8TrMgQ8VsswSTxrmi1lwD7Dr3qJ1vBCHVLI49UaZVetXajoutit+w3rezQu7H
2tM3jl2FYu+FwfYS+6y2pScZHO9L67E10MOVuFdYgm6x71wbhVl5dvaUhJDZb7pi
za3pjm4vkJrDCfQkGLN5j4SDydMgf48=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:00 2024 by rpki-client on console-ams.rpki-client.org