Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5b32018-13e1-31a2-8e0b-6ccd022dbcc5.roa
File:                     d5b32018-13e1-31a2-8e0b-6ccd022dbcc5.roa (raw, json)
Hash identifier:          Hw9ByybSqh3F8oz4FAHOCmN6byH/h8EXuMmORT+9ZBA=
Subject key identifier:   7A:70:A0:71:9D:4E:AA:32:AF:BE:D5:11:5F:1E:CD:EF:AF:38:B4:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A400DA9B1E0F99BEA8074400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5b32018-13e1-31a2-8e0b-6ccd022dbcc5.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.193.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:da:9b:1e:0f:99:be:a8:07:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=f6fc3fcf-85e9-4652-99bd-68a144d279fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:70:7e:31:8e:88:9e:23:c4:ae:5f:6f:6d:
                    4d:94:02:2a:2c:94:ae:2b:6d:37:c9:e1:e6:56:15:
                    4d:b9:7c:de:bf:5c:53:f6:67:df:9e:0f:dc:b1:33:
                    97:cd:c2:1b:f6:38:46:45:28:5f:41:2d:89:ab:29:
                    bf:ad:90:7f:3a:e9:71:6d:cf:ea:9f:ee:89:04:04:
                    c8:98:4b:f7:99:f6:41:b3:cd:47:ef:17:6e:9a:42:
                    1b:9e:bf:8f:17:f7:ff:d9:8f:e1:b2:9d:8d:09:37:
                    70:93:96:a1:62:60:51:98:f3:ca:88:0c:23:62:d3:
                    38:8c:aa:be:0b:02:be:16:2f:dc:08:e9:b9:85:00:
                    a5:f4:34:2d:65:51:3f:a4:0e:61:d1:40:dc:7e:21:
                    51:a8:10:91:1c:3a:d5:08:c2:10:75:68:e1:2b:50:
                    66:a6:1c:1f:53:de:47:66:3c:a9:fa:d6:98:68:66:
                    21:e4:ef:d1:f8:a4:db:24:ff:6a:88:b7:d0:64:51:
                    89:3e:58:a4:24:46:28:a4:91:46:f2:63:43:60:b9:
                    78:f1:0d:4c:f2:99:34:0f:d3:57:08:b1:c5:c2:05:
                    69:a1:3a:fd:b2:02:0b:22:fe:68:33:db:85:83:f1:
                    6e:e3:11:db:56:e6:c6:94:fa:20:70:a7:d5:ac:5b:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:70:A0:71:9D:4E:AA:32:AF:BE:D5:11:5F:1E:CD:EF:AF:38:B4:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5b32018-13e1-31a2-8e0b-6ccd022dbcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:53:f9:a5:8b:90:3b:a4:0c:0e:32:56:18:a3:66:7f:2c:a7:
         4c:15:93:e5:c1:2a:0d:37:3b:30:d1:9f:91:a1:53:f6:c4:2a:
         f7:67:95:46:b0:d0:87:f0:c9:28:33:05:5a:c2:46:ac:ce:b5:
         e2:9f:45:b4:c0:05:4c:75:09:de:e1:05:fe:af:c1:8d:d9:bd:
         7c:1f:f9:76:7b:fd:4f:3e:7b:ed:f5:a2:79:df:8a:b9:0c:e0:
         74:f4:d2:0b:d1:a1:8d:ec:0f:e2:27:d2:0e:60:8a:e1:62:d5:
         8b:1c:df:24:cc:f6:52:e8:3c:b9:8e:f8:cb:e9:cc:64:7a:61:
         99:6e:91:28:d2:4c:2b:96:e9:6e:3b:83:44:6d:cf:9e:0f:6c:
         3b:db:0d:4f:e4:fa:17:7a:f0:ab:46:bd:93:29:ad:9e:ce:dd:
         c8:9b:cb:82:fd:77:65:9f:56:3d:f0:7b:93:67:7c:19:20:0b:
         06:92:59:dd:d7:1d:15:44:10:9b:eb:b0:f1:f3:6e:23:43:ee:
         9a:f5:43:c2:0a:63:b1:53:72:7e:e3:03:70:7c:9f:1e:12:d8:
         f7:ce:b2:25:86:b0:02:a4:e8:1d:bd:a9:fe:48:78:22:4e:6e:
         17:09:ec:2b:a6:24:76:f3:ee:9f:b9:27:89:7c:97:4c:8d:7b:
         27:1f:61:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikANqbHg+ZvqgHRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZjZmYzNmY2YtODVlOS00NjUyLTk5YmQtNjhhMTQ0ZDI3OWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2lwfjGOiJ4jxK5fb21NlAIqLJSuK203yeHm
VhVNuXzev1xT9mffng/csTOXzcIb9jhGRShfQS2Jqym/rZB/Oulxbc/qn+6JBATI
mEv3mfZBs81H7xdumkIbnr+PF/f/2Y/hsp2NCTdwk5ahYmBRmPPKiAwjYtM4jKq+
CwK+Fi/cCOm5hQCl9DQtZVE/pA5h0UDcfiFRqBCRHDrVCMIQdWjhK1BmphwfU95H
Zjyp+taYaGYh5O/R+KTbJP9qiLfQZFGJPlikJEYopJFG8mNDYLl48Q1M8pk0D9NX
CLHFwgVpoTr9sgILIv5oM9uFg/Fu4xHbVubGlPogcKfVrFtrjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpwoHGdTqoyr77VEV8eze+vOLTEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDViMzIwMTgtMTNlMS0z
MWEyLThlMGItNmNjZDAyMmRiY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8FoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5T+aWLkDukDA4yVhijZn8sp0wVk+XBKg03OzDRn5GhU/bEKvdnlUaw
0IfwySgzBVrCRqzOteKfRbTABUx1Cd7hBf6vwY3ZvXwf+XZ7/U8+e+31onnfirkM
4HT00gvRoY3sD+In0g5giuFi1Ysc3yTM9lLoPLmO+MvpzGR6YZlukSjSTCuW6W47
g0Rtz54PbDvbDU/k+hd68KtGvZMprZ7O3ciby4L9d2WfVj3we5NnfBkgCwaSWd3X
HRVEEJvrsPHzbiND7pr1Q8IKY7FTcn7jA3B8nx4S2PfOsiWGsAKk6B29qf5IeCJO
bhcJ7CumJHbz7p+5J4l8l0yNeycfYcc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:38 2025 by rpki-client