Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c84cd3e6-6139-3582-a4fe-bd964a18d31e.roa
File:                     c84cd3e6-6139-3582-a4fe-bd964a18d31e.roa (raw, json)
Hash identifier:          9Z3fS5l8VpIew477AKRykZxEge4o1Op1vZBLrklwpos=
Subject key identifier:   A3:B6:5F:9F:4E:96:DB:92:B6:CE:B8:D9:B9:AB:68:6B:FD:FA:30:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847600BAA75D5BC02ADD63AD280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c84cd3e6-6139-3582-a4fe-bd964a18d31e.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16625
IP address blocks:        23.77.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:aa:75:d5:bc:02:ad:d6:3a:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=4a3fefef-b7b8-47c9-aaa6-5640795859d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:34:bd:3d:a1:87:e9:59:db:8e:67:a8:c5:
                    11:d8:c4:d6:47:ff:6b:ac:8d:d3:2b:50:ee:9e:d8:
                    91:d4:ea:55:58:f0:7a:4d:18:c5:c4:3c:e4:47:37:
                    33:a1:c6:4d:95:ab:ff:f1:34:0f:7b:f2:57:a5:ce:
                    23:3a:e7:28:e1:8b:57:49:8d:e1:d7:57:f3:b8:fc:
                    18:b9:f6:07:37:18:c3:a4:6f:df:65:33:b6:a5:32:
                    b2:32:fd:5c:04:7b:9c:7c:60:82:74:7f:f8:07:02:
                    70:e3:75:12:c4:ab:b8:1f:0a:dc:c3:31:4a:7c:99:
                    94:66:49:2b:6d:5d:55:e7:82:a8:c4:98:38:82:6e:
                    53:f8:ff:9c:c0:09:8c:0b:da:7e:e8:b0:d6:e0:e2:
                    31:4c:c1:c2:48:32:0f:42:76:fb:59:1b:3d:2f:5f:
                    cf:62:f4:97:f5:44:8b:d6:4f:c3:76:c9:86:74:8c:
                    ae:3a:d1:d1:0b:1d:e1:53:6d:1d:39:69:01:24:32:
                    8e:e6:73:1c:cb:62:14:c1:dc:7d:81:51:8d:8b:15:
                    dc:40:05:88:30:a8:ac:80:db:0a:bb:d9:4c:77:84:
                    35:4c:cf:72:e0:a5:ed:fc:21:e5:e7:3d:53:55:1b:
                    ff:bc:b7:54:b0:14:6d:19:be:af:0b:67:a8:b9:b6:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B6:5F:9F:4E:96:DB:92:B6:CE:B8:D9:B9:AB:68:6B:FD:FA:30:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c84cd3e6-6139-3582-a4fe-bd964a18d31e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.77.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:47:a5:a4:f7:d1:64:d3:4b:ba:ad:8a:44:01:8e:b4:e8:5d:
         b2:25:36:95:de:c3:ad:60:98:17:a7:af:c7:3d:f4:65:e7:77:
         f9:36:e5:90:a3:c4:9b:d4:dc:96:a9:d7:4d:0a:5b:7f:e8:7a:
         f3:ef:39:ca:1d:45:c2:3e:b4:af:59:8d:90:80:7b:b9:7d:00:
         84:a3:57:1f:f8:ea:39:6c:6f:c9:07:4c:77:f8:c7:49:fd:37:
         01:cf:80:8d:a1:e4:1e:06:84:de:3e:e9:c1:3f:b6:a0:c0:51:
         6e:22:d4:4a:a7:cc:9b:66:19:52:be:cf:3e:22:0d:21:1e:20:
         25:d3:b4:92:de:2d:a9:12:10:d1:10:8f:e4:e5:a1:97:e4:9b:
         4e:6b:c4:e4:d6:f4:93:cd:e1:1a:d6:20:fc:f8:fd:d7:eb:ad:
         d0:a1:9c:9e:8a:e2:38:10:9f:df:63:5e:b3:19:3f:3a:e0:2b:
         16:39:18:82:41:3d:f7:d7:ed:88:d2:10:ef:80:d6:5e:6b:03:
         85:bf:69:7d:eb:40:3f:73:6c:7d:e2:f8:98:b2:37:bc:c2:6a:
         67:5a:db:bf:92:b6:79:e8:cc:43:14:98:cc:bc:16:75:b1:c0:
         f9:a7:20:7b:85:4c:d3:78:eb:61:69:76:91:83:cc:1a:e9:92:
         d1:4a:c7:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6p11bwCrdY60oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
NGEzZmVmZWYtYjdiOC00N2M5LWFhYTYtNTY0MDc5NTg1OWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nA0vT2hh+lZ245nqMUR2MTWR/9rrI3TK1Du
ntiR1OpVWPB6TRjFxDzkRzczocZNlav/8TQPe/JXpc4jOuco4YtXSY3h11fzuPwY
ufYHNxjDpG/fZTO2pTKyMv1cBHucfGCCdH/4BwJw43USxKu4HwrcwzFKfJmUZkkr
bV1V54KoxJg4gm5T+P+cwAmMC9p+6LDW4OIxTMHCSDIPQnb7WRs9L1/PYvSX9USL
1k/DdsmGdIyuOtHRCx3hU20dOWkBJDKO5nMcy2IUwdx9gVGNixXcQAWIMKisgNsK
u9lMd4Q1TM9y4KXt/CHl5z1TVRv/vLdUsBRtGb6vC2eoubaIgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKO2X59OltuSts642bmraGv9+jDVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg0Y2QzZTYtNjEzOS0z
NTgyLWE0ZmUtYmQ5NjRhMThkMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF01cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9HpaT30WTTS7qtikQBjrToXbIlNpXew61gmBenr8c99GXnd/k25ZCj
xJvU3Jap100KW3/oevPvOcodRcI+tK9ZjZCAe7l9AISjVx/46jlsb8kHTHf4x0n9
NwHPgI2h5B4GhN4+6cE/tqDAUW4i1EqnzJtmGVK+zz4iDSEeICXTtJLeLakSENEQ
j+TloZfkm05rxOTW9JPN4RrWIPz4/dfrrdChnJ6K4jgQn99jXrMZPzrgKxY5GIJB
PffX7YjSEO+A1l5rA4W/aX3rQD9zbH3i+JiyN7zCamda27+StnnozEMUmMy8FnWx
wPmnIHuFTNN462FpdpGDzBrpktFKx4s=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:32 2024 by rpki-client on console-fra.rpki-client.org