Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc774ed3-d57d-353d-b4a5-cb8488549111.roa
File:                     cc774ed3-d57d-353d-b4a5-cb8488549111.roa (raw, json)
Hash identifier:          DxbRfJtibthtYcaliSXYZ1DWI1T4xgyXUiF916nDB3A=
Subject key identifier:   71:5F:2E:B0:50:77:90:78:58:70:4B:44:D6:A9:B9:A1:DE:7C:C1:0D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A6CB6C3C33992D39A4976600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc774ed3-d57d-353d-b4a5-cb8488549111.roa
Signing time:             Fri 24 Jan 2025 14:00:52 +0000
ROA not before:           Fri 24 Jan 2025 14:00:52 +0000
ROA not after:            Thu 24 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.199.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:cb:6c:3c:33:99:2d:39:a4:97:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 24 14:00:52 2025 GMT
            Not After : Apr 24 13:00:52 2025 GMT
        Subject: CN=270c03ad-c963-4cc2-aa5c-af1c15046fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:4c:5d:b9:5e:57:8c:a7:7c:f9:ab:f7:9a:
                    f3:7f:6f:b9:36:6d:fd:d4:9d:83:ef:74:f4:b9:f1:
                    c4:65:03:a2:c9:9f:a0:89:7a:50:1f:fc:10:ef:68:
                    e2:83:19:40:7f:8e:b8:bd:77:b6:fe:2d:4f:db:6e:
                    f7:81:03:f4:32:50:a8:d3:43:e1:fa:13:e7:e7:87:
                    82:3e:9b:8a:38:b9:78:a8:18:c1:1c:06:66:cd:38:
                    fc:61:7e:18:ef:a6:48:e7:b5:fe:ab:77:19:e4:f1:
                    49:6b:2e:d3:74:5c:74:aa:38:4e:77:b4:7d:26:81:
                    d3:43:a1:fd:71:8b:de:dc:8f:ea:8f:c7:c0:e6:3f:
                    6e:a0:7b:f7:06:90:cf:4c:d0:0f:5b:85:6a:13:13:
                    3f:fb:14:cf:03:13:6f:77:65:0a:04:59:b6:f9:4f:
                    a0:0d:af:4e:52:0f:52:c3:03:05:0c:9e:ca:ee:94:
                    30:3c:5d:4b:a1:b0:a4:8d:c9:86:5b:7f:3e:9e:e6:
                    cc:b0:f9:18:b1:22:dc:b9:a8:fc:76:30:ab:e8:d6:
                    0f:06:f5:d5:af:3e:17:09:e5:6b:d4:6a:ba:04:be:
                    d2:96:86:fd:a0:47:a3:a9:62:3d:9f:bf:7a:ef:40:
                    2c:b0:ce:42:4a:fc:60:bd:0b:b4:15:0a:dc:2c:c3:
                    34:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5F:2E:B0:50:77:90:78:58:70:4B:44:D6:A9:B9:A1:DE:7C:C1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc774ed3-d57d-353d-b4a5-cb8488549111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:82:02:4c:b6:c1:67:f4:50:ad:a8:26:e3:06:3c:a1:33:f1:
         da:b5:e8:76:c6:b6:83:90:0c:0f:14:94:6d:b4:cc:94:9b:57:
         6e:82:41:ed:e3:96:9a:86:76:26:26:f9:b6:28:cd:31:cd:e9:
         1f:c9:6b:2a:08:27:8e:1e:2f:e8:8a:70:50:11:1c:a1:26:f0:
         d0:24:37:00:54:ca:df:4e:2a:d2:09:f4:a7:a7:ec:c7:b4:50:
         9d:85:51:8c:84:11:c9:6e:55:cf:2e:18:61:7a:b8:dc:b0:b0:
         8e:eb:61:78:48:00:3d:e1:7a:12:7a:a9:35:ce:f0:05:8f:c2:
         b4:d1:f5:ea:21:5f:ca:ea:27:c7:ff:84:37:41:d0:ac:98:3b:
         e5:3c:df:60:ac:10:6b:ca:08:b0:b9:0a:33:14:ad:63:2d:64:
         52:85:5e:e3:16:35:06:54:46:68:60:f5:2d:0a:bf:58:fc:cd:
         ee:38:a3:39:cc:c2:01:74:09:d3:ab:2e:7a:3f:04:bf:67:9d:
         b5:65:27:06:14:8b:a6:25:4b:46:4e:f8:39:ab:d8:26:4f:26:
         c1:89:16:31:a7:57:de:47:1e:32:22:63:6b:39:f8:7f:99:53:
         76:76:42:aa:51:0d:76:f2:4e:7d:70:97:b1:ab:62:3a:93:85:
         e4:d3:cf:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy2w8M5ktOaSXZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk
MjcwYzAzYWQtYzk2My00Y2MyLWFhNWMtYWYxYzE1MDQ2ZmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+dMXbleV4ynfPmr95rzf2+5Nm391J2D73T0
ufHEZQOiyZ+giXpQH/wQ72jigxlAf464vXe2/i1P2273gQP0MlCo00Ph+hPn54eC
PpuKOLl4qBjBHAZmzTj8YX4Y76ZI57X+q3cZ5PFJay7TdFx0qjhOd7R9JoHTQ6H9
cYve3I/qj8fA5j9uoHv3BpDPTNAPW4VqExM/+xTPAxNvd2UKBFm2+U+gDa9OUg9S
wwMFDJ7K7pQwPF1LobCkjcmGW38+nubMsPkYsSLcuaj8djCr6NYPBvXVrz4XCeVr
1Gq6BL7Slob9oEejqWI9n79670AssM5CSvxgvQu0FQrcLMM0nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFfLrBQd5B4WHBLRNapuaHefMENMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2M3NzRlZDMtZDU3ZC0z
NTNkLWI0YTUtY2I4NDg4NTQ5MTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8c1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmCAky2wWf0UK2oJuMGPKEz8dq16HbGtoOQDA8UlG20zJSbV26CQe3j
lpqGdiYm+bYozTHN6R/JayoIJ44eL+iKcFARHKEm8NAkNwBUyt9OKtIJ9Ken7Me0
UJ2FUYyEEcluVc8uGGF6uNywsI7rYXhIAD3hehJ6qTXO8AWPwrTR9eohX8rqJ8f/
hDdB0KyYO+U832CsEGvKCLC5CjMUrWMtZFKFXuMWNQZURmhg9S0Kv1j8ze44oznM
wgF0CdOrLno/BL9nnbVlJwYUi6YlS0ZO+Dmr2CZPJsGJFjGnV95HHjIiY2s5+H+Z
U3Z2QqpRDXbyTn1wl7GrYjqTheTTz1U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:13 2025 by rpki-client