Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7f99a62-84e1-3696-ae0f-d6f2cec3333f.roa
File:                     c7f99a62-84e1-3696-ae0f-d6f2cec3333f.roa (raw, json)
Hash identifier:          pRzj67FxTpHkvS78mNlLXjriYeNDhMS+zB+2wN67ZTI=
Subject key identifier:   AD:3C:D9:BD:28:78:77:72:8A:84:69:8E:15:4C:7C:A4:8F:21:9B:EB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584754E0EEB25FB87A8D05FB3600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7f99a62-84e1-3696-ae0f-d6f2cec3333f.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     16625
IP address blocks:        23.66.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:ee:b2:5f:b8:7a:8d:05:fb:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=d54d99ad-07f8-4080-9263-bdeba8e5d519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:14:c1:86:1e:f8:0c:b5:ca:40:78:87:16:1f:
                    8f:00:ee:4c:9f:b9:9e:66:fb:2d:54:aa:d4:57:1f:
                    0e:38:18:be:d2:84:5e:b6:97:a4:49:9f:f8:a6:c2:
                    9d:50:4e:33:aa:10:82:44:ea:7e:1e:4e:72:e9:54:
                    9c:64:c3:50:ed:ae:06:30:4d:b8:04:0d:a4:29:b8:
                    6c:18:c5:cb:99:09:cf:29:af:3c:93:a9:2c:32:4a:
                    73:55:8a:2c:53:03:f8:0d:8f:90:e0:87:08:80:f4:
                    f6:60:5c:50:e8:2b:42:94:bb:ec:2b:3f:98:4d:71:
                    3c:5a:68:d0:29:c4:94:93:67:0a:23:b3:94:cf:4d:
                    c9:60:7a:69:cf:54:d7:81:9c:c8:fe:15:c2:91:6b:
                    78:8b:ff:5d:ab:4b:22:9e:2a:10:e2:d2:01:30:76:
                    a9:09:e9:a0:34:b6:8a:21:05:72:ac:2b:7a:9b:a6:
                    52:56:81:b9:30:b7:e0:78:55:5d:dc:cc:6a:d2:99:
                    ac:56:de:fd:7a:21:dc:e1:63:2d:d5:b1:81:38:e4:
                    b7:47:f8:f7:dc:38:34:07:d0:ab:b2:dc:1f:69:0f:
                    f0:2b:2e:be:cf:a6:90:a8:b1:49:5d:a2:fa:cc:55:
                    39:fd:dd:ca:b0:25:23:25:45:76:ea:5e:95:2e:20:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3C:D9:BD:28:78:77:72:8A:84:69:8E:15:4C:7C:A4:8F:21:9B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7f99a62-84e1-3696-ae0f-d6f2cec3333f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.66.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:32:00:ac:f0:9c:d9:7c:91:6c:95:9a:c7:2d:34:9f:11:
         30:1b:45:63:df:6a:2e:89:3c:2a:ee:95:18:7d:b5:15:60:49:
         28:89:03:00:7e:9d:de:40:71:96:f0:5a:a3:8e:9b:26:f1:06:
         5e:7f:c9:5f:7b:99:83:89:a2:f0:a8:f4:a2:93:8d:5b:96:a9:
         31:4b:23:22:98:6c:b4:87:d8:42:0c:06:6e:64:2b:a1:39:cf:
         8e:76:8e:9d:5a:e0:08:b7:79:6f:52:af:96:67:cc:bc:40:3e:
         09:e5:b6:9a:2e:a5:82:55:e9:9f:5c:92:87:b7:84:46:f8:32:
         e4:9c:cd:d3:5c:63:c2:39:3d:25:05:1e:fe:3f:a6:84:fb:4e:
         de:0f:b3:02:46:2c:40:7c:61:62:9c:6b:0a:3b:e8:15:69:be:
         a7:49:ce:f7:b6:ee:aa:3a:95:a6:f4:58:dc:f1:2f:db:2e:3e:
         8b:4b:cd:1e:3d:29:fb:8d:e6:27:36:f8:39:da:56:23:24:36:
         2f:e8:1a:58:27:f6:5d:34:e0:ad:9a:c9:fd:52:5f:db:6a:f9:
         20:ec:c5:e8:7e:9e:eb:54:9b:7a:88:c8:00:4a:4d:31:8b:bb:
         12:12:30:09:01:55:54:0d:50:19:f5:b7:54:5a:08:2d:f7:93:
         d2:39:d9:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4O6yX7h6jQX7NgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDU0ZDk5YWQtMDdmOC00MDgwLTkyNjMtYmRlYmE4ZTVkNTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRTBhh74DLXKQHiHFh+PAO5Mn7meZvstVKrU
Vx8OOBi+0oRetpekSZ/4psKdUE4zqhCCROp+Hk5y6VScZMNQ7a4GME24BA2kKbhs
GMXLmQnPKa88k6ksMkpzVYosUwP4DY+Q4IcIgPT2YFxQ6CtClLvsKz+YTXE8WmjQ
KcSUk2cKI7OUz03JYHppz1TXgZzI/hXCkWt4i/9dq0sinioQ4tIBMHapCemgNLaK
IQVyrCt6m6ZSVoG5MLfgeFVd3Mxq0pmsVt79eiHc4WMt1bGBOOS3R/j33Dg0B9Cr
stwfaQ/wKy6+z6aQqLFJXaL6zFU5/d3KsCUjJUV26l6VLiC5uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK082b0oeHdyioRpjhVMfKSPIZvrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdmOTlhNjItODRlMS0z
Njk2LWFlMGYtZDZmMmNlYzMzMzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0LgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbdMgCs8JzZfJFslZrHLTSfETAbRWPfai6JPCrulRh9tRVgSSiJAwB+
nd5AcZbwWqOOmybxBl5/yV97mYOJovCo9KKTjVuWqTFLIyKYbLSH2EIMBm5kK6E5
z452jp1a4Ai3eW9Sr5ZnzLxAPgnltpoupYJV6Z9ckoe3hEb4MuSczdNcY8I5PSUF
Hv4/poT7Tt4PswJGLEB8YWKcawo76BVpvqdJzve27qo6lab0WNzxL9suPotLzR49
KfuN5ic2+DnaViMkNi/oGlgn9l004K2ayf1SX9tq+SDsxeh+nutUm3qIyABKTTGL
uxISMAkBVVQNUBn1t1RaCC33k9I52ZU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:12 2024 by rpki-client on console-ams.rpki-client.org