Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c18259ed-d891-320f-97b4-8a88abcf4ed9.roa
File:                     c18259ed-d891-320f-97b4-8a88abcf4ed9.roa (raw, json)
Hash identifier:          NvLgKmxvXgdv5BIhZ5gWbXdHIYw/ceZcTCubfadVcgo=
Subject key identifier:   52:7B:D4:DB:1C:D7:A0:6D:E3:B8:13:5A:B3:69:43:2D:41:14:69:FD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845DE4F932027382CB641360400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c18259ed-d891-320f-97b4-8a88abcf4ed9.roa
Signing time:             Tue 14 May 2024 08:55:52 +0000
ROA not before:           Tue 14 May 2024 08:55:52 +0000
ROA not after:            Mon 12 Aug 2024 08:55:52 +0000
asID:                     16625
IP address blocks:        23.43.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:4f:93:20:27:38:2c:b6:41:36:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 08:55:52 2024 GMT
            Not After : Aug 12 08:55:52 2024 GMT
        Subject: CN=1d149eb2-5cb9-46fb-840c-bd86f0613c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:d5:ad:ff:a4:e2:05:a0:6d:28:1f:da:89:
                    8a:6e:9e:4b:7a:ca:6a:84:c5:dd:4e:28:19:30:54:
                    a0:2c:eb:63:e6:b0:b0:d6:4e:14:ae:e0:10:c0:f0:
                    44:53:e3:f2:2f:03:13:62:da:8f:0b:9b:a3:03:db:
                    1c:ef:0e:63:ac:0a:29:26:f6:6f:6e:0c:f9:87:c8:
                    43:9d:29:ef:cd:8a:95:cc:8d:f9:78:e5:7f:af:50:
                    bb:16:e2:cb:42:07:32:f2:92:82:9f:97:5c:61:65:
                    7c:e0:ab:9b:7a:c1:33:49:ae:7b:35:53:90:49:8b:
                    04:9b:60:94:4a:86:1d:e2:6f:27:4b:53:c1:02:77:
                    7e:2a:69:51:80:e0:2b:e3:22:6a:ce:60:d4:76:e7:
                    d3:71:47:b7:ae:33:34:9a:a8:93:2f:67:f7:4f:d3:
                    dc:57:61:cb:4a:3f:06:a5:c0:d2:26:73:e8:b8:7c:
                    59:1d:94:76:8c:b9:36:ce:6c:8e:3a:7a:af:cc:6a:
                    41:a4:a1:f6:59:01:3d:c4:65:81:71:09:4b:06:42:
                    c4:99:82:d3:fc:1a:ae:92:2c:4c:b8:bf:4e:39:11:
                    55:16:af:4e:1f:d2:aa:47:c5:a7:13:bd:4c:ac:62:
                    bf:2f:20:94:56:fb:20:fe:ca:a0:c6:b2:62:5d:ca:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7B:D4:DB:1C:D7:A0:6D:E3:B8:13:5A:B3:69:43:2D:41:14:69:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c18259ed-d891-320f-97b4-8a88abcf4ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e9:9c:f7:49:64:f8:53:9b:d9:09:fe:21:b0:91:fc:6a:3f:
         73:37:4d:bb:23:25:67:19:f4:fe:6f:b7:ce:18:25:86:f2:ba:
         9a:68:89:56:88:27:3c:88:a8:94:90:79:87:08:56:42:fa:2e:
         16:fc:4c:57:2f:15:6f:cd:70:39:d0:0c:a4:8c:ef:08:ff:8e:
         f3:9f:d1:a1:44:e4:76:f8:71:ad:1e:a4:03:50:d9:53:b9:83:
         44:24:47:42:4a:53:9b:c9:47:40:88:ac:1c:7e:10:bf:d8:db:
         44:2d:52:28:01:86:b2:f6:a5:99:72:1f:5a:f0:1b:92:c8:58:
         56:e1:c3:c4:07:ef:36:05:c3:3a:5f:12:ea:fd:a6:99:08:e9:
         18:48:09:2a:c9:b0:be:50:02:32:3d:cc:14:10:29:66:17:c1:
         74:1d:f5:ec:0e:34:61:cf:24:5f:b1:00:69:64:ac:65:48:54:
         13:99:bd:d7:f3:2e:84:32:32:c2:50:43:0f:d8:36:53:7b:79:
         5d:c3:c6:82:38:6a:64:b4:2f:47:dd:18:84:f0:65:d4:85:26:
         e7:40:b9:34:f4:62:89:4f:b0:60:16:21:55:36:51:27:ad:c8:
         b3:de:9d:b8:c5:77:1b:ee:4c:bd:8f:ea:ad:c9:cc:2c:48:b4:
         e6:6d:3f:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXeT5MgJzgstkE2BAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUxNDA4NTU1MloXDTI0MDgxMjA4NTU1MlowLzEtMCsGA1UEAxMk
MWQxNDllYjItNWNiOS00NmZiLTg0MGMtYmQ4NmYwNjEzYzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtHVrf+k4gWgbSgf2omKbp5LespqhMXdTigZ
MFSgLOtj5rCw1k4UruAQwPBEU+PyLwMTYtqPC5ujA9sc7w5jrAopJvZvbgz5h8hD
nSnvzYqVzI35eOV/r1C7FuLLQgcy8pKCn5dcYWV84KubesEzSa57NVOQSYsEm2CU
SoYd4m8nS1PBAnd+KmlRgOAr4yJqzmDUdufTcUe3rjM0mqiTL2f3T9PcV2HLSj8G
pcDSJnPouHxZHZR2jLk2zmyOOnqvzGpBpKH2WQE9xGWBcQlLBkLEmYLT/BqukixM
uL9OORFVFq9OH9KqR8WnE71MrGK/LyCUVvsg/sqgxrJiXcqpDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJ71Nsc16Bt47gTWrNpQy1BFGn9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzE4MjU5ZWQtZDg5MS0z
MjBmLTk3YjQtOGE4OGFiY2Y0ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyt8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/pnPdJZPhTm9kJ/iGwkfxqP3M3TbsjJWcZ9P5vt84YJYbyuppoiVaI
JzyIqJSQeYcIVkL6Lhb8TFcvFW/NcDnQDKSM7wj/jvOf0aFE5Hb4ca0epANQ2VO5
g0QkR0JKU5vJR0CIrBx+EL/Y20QtUigBhrL2pZlyH1rwG5LIWFbhw8QH7zYFwzpf
Eur9ppkI6RhICSrJsL5QAjI9zBQQKWYXwXQd9ewONGHPJF+xAGlkrGVIVBOZvdfz
LoQyMsJQQw/YNlN7eV3DxoI4amS0L0fdGITwZdSFJudAuTT0YolPsGAWIVU2USet
yLPenbjFdxvuTL2P6q3JzCxItOZtPzQ=
-----END CERTIFICATE-----
Generated at Wed May 29 03:14:15 2024 by rpki-client on console-ams.rpki-client.org