Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6d189b8-de2a-38a2-9039-1aebe4e45c45.roa
File:                     c6d189b8-de2a-38a2-9039-1aebe4e45c45.roa (raw, json)
Hash identifier:          Tm7IBununnJwsYyuQnkwamA15bH+lDg7njwNWDiYYoo=
Subject key identifier:   79:BF:51:A4:77:11:A7:76:08:D3:4E:23:46:4A:91:92:CA:98:E3:07
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DF2F5D6CE529A09C82132880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6d189b8-de2a-38a2-9039-1aebe4e45c45.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     20940
IP address blocks:        23.216.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:5d:6c:e5:29:a0:9c:82:13:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=b3323efe-88e9-4105-bdf9-126951bd1bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:e6:a3:63:cd:cc:d9:12:9f:a3:3c:27:6b:
                    37:bd:28:55:a7:a7:26:f6:2d:94:ff:b8:d5:cf:8c:
                    65:67:fe:b3:94:e5:af:95:a7:00:41:e0:81:cc:21:
                    18:40:c0:fa:16:9d:4a:d1:fb:16:19:b6:ce:76:bf:
                    9d:aa:10:c0:81:2a:48:bd:15:58:7a:30:2b:3e:87:
                    3e:62:b6:d7:fc:eb:23:73:5a:46:e8:02:00:3a:dc:
                    4f:ad:aa:47:cf:27:e6:fb:08:c9:ad:ae:ac:35:52:
                    dd:ef:f9:b9:e0:af:fb:57:b5:cf:0d:fa:d4:08:b3:
                    59:6f:99:87:36:10:b6:1b:28:91:55:25:e2:22:e2:
                    b0:9a:14:1d:fb:a5:90:08:9a:b6:e8:76:2d:aa:50:
                    3e:9b:a1:55:98:a9:9e:32:23:e2:88:9b:c9:16:e4:
                    c6:8b:e2:56:b2:4c:80:2e:ec:dc:ad:e4:2a:23:8d:
                    7d:4f:ba:3d:e2:32:fb:e3:4c:f8:d7:58:f2:b6:2b:
                    31:6e:4b:61:39:bf:01:be:02:9d:ac:49:b7:cc:70:
                    50:5a:9d:24:7b:ef:e1:7a:87:24:17:1e:9b:6d:fb:
                    98:82:b6:07:8f:8b:82:bd:b9:5f:26:11:d1:dd:10:
                    84:01:0f:0c:8a:c7:7e:01:62:bf:15:a0:a9:81:eb:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:51:A4:77:11:A7:76:08:D3:4E:23:46:4A:91:92:CA:98:E3:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6d189b8-de2a-38a2-9039-1aebe4e45c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:a6:aa:04:96:8c:58:11:92:87:29:75:d2:80:f3:ef:35:
         f7:e8:ef:37:42:cb:11:9e:e1:7e:ae:e9:f8:63:02:ab:b9:af:
         b1:fd:63:da:08:99:57:44:81:ec:d1:38:9e:de:7f:bb:aa:3d:
         54:85:f7:83:85:93:91:72:ea:44:4c:cd:5a:aa:51:ab:e5:fb:
         ca:72:e3:ff:3d:97:67:10:ba:c8:94:50:4d:dd:34:b5:70:f0:
         8e:a2:5f:15:cf:2d:85:da:e7:2d:c7:55:06:cc:ce:ca:04:76:
         7a:4a:a1:72:fb:66:5e:6a:e3:3f:a9:35:73:41:bb:05:6c:9b:
         5a:3d:47:4e:1b:53:2f:aa:b1:b8:df:f6:c0:3d:71:ce:93:35:
         a5:68:85:9e:80:a2:93:1d:fa:3d:07:7e:25:35:9c:0a:86:3f:
         e7:4a:6e:d9:05:e8:b0:94:d1:fe:52:88:c1:b0:66:41:b2:15:
         98:cf:d6:44:b6:bf:6a:ed:47:8a:45:46:af:71:d1:f0:de:06:
         a8:0d:81:1f:ae:67:3a:20:5c:46:b9:2f:86:f9:2b:b7:23:11:
         8f:37:1d:fa:69:32:72:52:dc:bd:af:ba:39:bc:59:72:8e:3f:
         71:5b:dc:fc:9a:57:44:3e:96:33:07:a3:b0:28:4d:73:98:09:
         c9:f0:fc:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL11s5SmgnIITKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk
YjMzMjNlZmUtODhlOS00MTA1LWJkZjktMTI2OTUxYmQxYmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10zmo2PNzNkSn6M8J2s3vShVp6cm9i2U/7jV
z4xlZ/6zlOWvlacAQeCBzCEYQMD6Fp1K0fsWGbbOdr+dqhDAgSpIvRVYejArPoc+
YrbX/Osjc1pG6AIAOtxPrapHzyfm+wjJra6sNVLd7/m54K/7V7XPDfrUCLNZb5mH
NhC2GyiRVSXiIuKwmhQd+6WQCJq26HYtqlA+m6FVmKmeMiPiiJvJFuTGi+JWskyA
LuzcreQqI419T7o94jL740z411jytisxbkthOb8BvgKdrEm3zHBQWp0ke+/heock
Fx6bbfuYgrYHj4uCvblfJhHR3RCEAQ8Misd+AWK/FaCpgevQdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHm/UaR3Ead2CNNOI0ZKkZLKmOMHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzZkMTg5YjgtZGUyYS0z
OGEyLTkwMzktMWFlYmU0ZTQ1YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9gBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0BpqoEloxYEZKHKXXSgPPvNffo7zdCyxGe4X6u6fhjAqu5r7H9Y9oI
mVdEgezROJ7ef7uqPVSF94OFk5Fy6kRMzVqqUavl+8py4/89l2cQusiUUE3dNLVw
8I6iXxXPLYXa5y3HVQbMzsoEdnpKoXL7Zl5q4z+pNXNBuwVsm1o9R04bUy+qsbjf
9sA9cc6TNaVohZ6AopMd+j0HfiU1nAqGP+dKbtkF6LCU0f5SiMGwZkGyFZjP1kS2
v2rtR4pFRq9x0fDeBqgNgR+uZzogXEa5L4b5K7cjEY83HfppMnJS3L2vujm8WXKO
P3Fb3PyaV0Q+ljMHo7AoTXOYCcnw/Js=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:36 2024 by rpki-client on console-fra.rpki-client.org