Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0bd7687-7f97-3186-a25d-4f03ba873fdf.roa
File:                     d0bd7687-7f97-3186-a25d-4f03ba873fdf.roa (raw, json)
Hash identifier:          ISZcSRzxtSvWQJuIbQ7p58mrHPFaHyp+JLJKDRT62q8=
Subject key identifier:   B9:95:D6:F3:AC:DF:64:63:77:64:F9:79:E5:4B:75:13:B1:D4:FC:B6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847A5D6CB9703A98B465A704580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0bd7687-7f97-3186-a25d-4f03ba873fdf.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        23.52.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:cb:97:03:a9:8b:46:5a:70:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=99574332-f063-49e7-aa95-9a0c14ef459f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:5e:38:32:46:bb:ee:69:78:7b:0a:e9:1f:
                    66:11:89:e1:f2:63:12:28:58:84:ec:5c:c0:d5:87:
                    ac:2f:c4:47:a1:c6:d9:6c:02:e1:ac:f4:79:5f:5c:
                    f5:bb:b4:a5:0c:58:e1:67:c7:8f:9b:62:05:6f:3a:
                    b5:e8:a9:a0:92:f9:b6:d5:f3:25:3f:9a:8e:71:d4:
                    75:13:75:4e:b7:a3:94:ca:1d:10:0a:6b:41:a7:75:
                    2e:9e:e0:47:27:97:06:c6:bb:22:7e:4b:ba:3a:db:
                    ea:ba:3e:03:1b:2e:33:0c:0d:8c:9a:8c:d7:25:f0:
                    7d:23:3b:8b:10:36:01:03:9c:21:bc:52:dd:64:3b:
                    33:6f:34:23:a7:08:16:f6:5e:e7:2d:dc:93:6e:2b:
                    6c:f9:9a:7c:da:83:9f:bd:8b:fc:d8:5c:dd:dd:a5:
                    a2:06:4f:cc:3b:56:7f:46:20:01:ed:6d:ec:aa:24:
                    d2:94:cf:41:3e:8b:d7:2f:29:91:3d:66:6e:52:00:
                    ee:7a:bd:8d:3a:23:36:d1:0d:eb:22:90:ae:5f:f3:
                    5c:0e:33:e5:82:d7:85:b3:11:9e:52:f5:d1:00:96:
                    1b:73:d5:c5:5d:1a:e1:84:6c:9c:01:18:90:e5:d5:
                    7f:ca:1b:79:cc:4e:90:03:e6:4d:91:28:f6:a2:6b:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:95:D6:F3:AC:DF:64:63:77:64:F9:79:E5:4B:75:13:B1:D4:FC:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0bd7687-7f97-3186-a25d-4f03ba873fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:90:eb:5e:61:e7:12:73:cd:8b:6e:a3:3c:b8:8b:a3:fe:38:
         eb:3c:27:14:9f:b2:5f:62:ac:fc:a1:71:6f:5f:b0:88:ec:39:
         00:04:f5:8a:47:39:80:f0:87:bd:dd:66:3b:9c:ab:4c:7c:92:
         fb:52:01:4f:c8:c7:43:ba:2e:dc:68:fc:60:f3:e1:a1:54:a8:
         19:38:4d:44:e9:e9:58:89:59:3b:50:68:21:7f:c9:19:79:6b:
         16:76:45:0c:40:75:8f:13:40:3b:94:08:1e:7a:8a:0b:bb:b9:
         72:88:2b:c8:ab:7e:97:16:2c:ce:27:d2:9c:8c:39:c8:d2:be:
         a5:a1:cc:46:bc:22:f3:9c:25:57:a2:52:ed:99:ef:48:e5:68:
         f0:68:bb:d2:54:11:ad:93:ce:79:29:8c:fa:06:e1:6c:bd:bc:
         a8:1d:c9:74:3c:1f:01:2c:fa:9e:eb:b0:a7:ec:28:11:28:7c:
         6d:1b:21:8d:80:43:84:63:28:2b:7d:f0:a8:57:0a:7d:9a:a7:
         73:33:c2:20:cc:a8:4a:3a:ec:a9:7e:1f:60:73:a0:a3:59:72:
         44:c5:0b:3c:fd:53:e1:64:c8:45:7f:b6:45:b7:eb:f1:f7:a0:
         c3:34:e8:12:c2:36:f7:b0:83:ae:fd:f6:e0:24:f6:21:c9:c4:
         f9:ad:0d:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1suXA6mLRlpwRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
OTk1NzQzMzItZjA2My00OWU3LWFhOTUtOWEwYzE0ZWY0NTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj41eODJGu+5peHsK6R9mEYnh8mMSKFiE7FzA
1YesL8RHocbZbALhrPR5X1z1u7SlDFjhZ8ePm2IFbzq16Kmgkvm21fMlP5qOcdR1
E3VOt6OUyh0QCmtBp3UunuBHJ5cGxrsifku6Otvquj4DGy4zDA2MmozXJfB9IzuL
EDYBA5whvFLdZDszbzQjpwgW9l7nLdyTbits+Zp82oOfvYv82Fzd3aWiBk/MO1Z/
RiAB7W3sqiTSlM9BPovXLymRPWZuUgDuer2NOiM20Q3rIpCuX/NcDjPlgteFsxGe
UvXRAJYbc9XFXRrhhGycARiQ5dV/yht5zE6QA+ZNkSj2omsknQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmV1vOs32Rjd2T5eeVLdROx1Py2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDBiZDc2ODctN2Y5Ny0z
MTg2LWEyNWQtNGYwM2JhODczZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzRFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKQ615h5xJzzYtuozy4i6P+OOs8JxSfsl9irPyhcW9fsIjsOQAE9YpH
OYDwh73dZjucq0x8kvtSAU/Ix0O6Ltxo/GDz4aFUqBk4TUTp6ViJWTtQaCF/yRl5
axZ2RQxAdY8TQDuUCB56igu7uXKIK8irfpcWLM4n0pyMOcjSvqWhzEa8IvOcJVei
Uu2Z70jlaPBou9JUEa2TznkpjPoG4Wy9vKgdyXQ8HwEs+p7rsKfsKBEofG0bIY2A
Q4RjKCt98KhXCn2ap3MzwiDMqEo67Kl+H2BzoKNZckTFCzz9U+FkyEV/tkW36/H3
oMM06BLCNvewg6799uAk9iHJxPmtDW4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:41 2024 by rpki-client on console-fra.rpki-client.org