Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df2b6068-93a4-37a6-81d9-88f71f83d5d0.roa
File:                     df2b6068-93a4-37a6-81d9-88f71f83d5d0.roa (raw, json)
Hash identifier:          vlxXlbgJ8+B4UoPXAcvG+UHz5Zu0tFMZGdSuldslzGc=
Subject key identifier:   F8:4E:7A:D8:77:A1:AA:D8:40:C5:44:4F:EE:B8:5B:4F:9F:B6:05:94
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847A471357D2972AF30D3B39400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df2b6068-93a4-37a6-81d9-88f71f83d5d0.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        23.51.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:35:7d:29:72:af:30:d3:b3:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=5912faf5-92c9-4b3a-9c18-fd7d4632b756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:37:d9:29:e3:16:e7:cb:ba:ef:d2:8d:4d:
                    a7:d8:32:ff:1b:42:a0:78:c1:81:7c:30:b1:41:06:
                    67:f6:2c:bf:6d:ee:53:5e:cb:20:4b:59:23:18:5d:
                    b0:29:de:ec:98:8b:ef:2c:ff:84:d3:09:3e:64:15:
                    15:48:8d:8e:8e:84:07:d4:0a:3d:4c:2e:5c:99:54:
                    37:c7:94:44:6f:5e:c5:83:7f:eb:9d:44:12:3a:71:
                    45:ec:3e:ab:fc:c8:12:f1:2f:b5:82:c6:65:a3:38:
                    80:23:40:8c:13:89:65:cd:24:57:e3:b7:b7:fe:72:
                    1b:37:ed:2a:14:f8:d2:1d:f5:d5:64:51:31:6b:39:
                    fe:cb:65:4c:4b:89:82:b6:8a:a3:d0:ce:a6:84:ff:
                    42:d2:95:63:b4:08:a4:0c:23:9a:f2:da:6e:9b:2d:
                    02:8a:e7:28:ab:38:f6:75:25:2a:a3:89:ca:49:de:
                    53:f4:4b:f3:e0:8b:b6:b5:c8:b8:e6:c6:42:4b:31:
                    12:88:e3:c2:50:64:f6:3c:51:11:47:4b:e6:72:ff:
                    b9:99:76:3d:8a:8b:8f:11:29:4d:76:7d:0b:d3:ff:
                    a5:c0:b8:f0:b5:33:b3:d7:54:8d:f2:ef:88:e6:34:
                    59:a9:65:09:3f:37:c8:b5:31:da:7c:f2:74:70:37:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4E:7A:D8:77:A1:AA:D8:40:C5:44:4F:EE:B8:5B:4F:9F:B6:05:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df2b6068-93a4-37a6-81d9-88f71f83d5d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.51.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:05:e4:66:51:67:49:39:56:d5:4b:4f:8b:31:5e:ad:5a:
         93:a3:85:76:59:72:63:a1:f1:41:e5:34:5a:c5:b1:b9:ac:bf:
         15:81:45:83:0a:eb:1c:1b:10:92:f7:85:f3:44:00:05:fe:fc:
         9c:80:fb:1b:8e:d1:4e:17:25:8c:0a:f0:70:3c:d2:3b:9b:d5:
         6e:a5:54:f9:0e:8f:06:36:e0:25:5d:96:43:df:20:c5:16:84:
         68:5d:e4:1a:1c:ad:fb:0c:29:e4:70:20:2c:68:83:ed:0e:22:
         71:88:9a:c0:ae:35:03:3f:b5:c6:a7:a6:d7:1c:d7:5a:61:fb:
         19:e8:61:05:13:d8:46:0c:25:7d:c8:b6:ba:09:8d:b2:8d:84:
         0a:e3:a7:5d:c5:99:6c:7e:5c:78:fc:9a:35:d2:61:f0:99:df:
         b6:e6:aa:f5:ee:2f:2b:ac:cb:a9:73:e4:eb:08:2e:b0:aa:67:
         4c:d1:06:79:9f:77:42:89:83:25:f7:47:60:2c:33:72:9f:7d:
         6b:6e:bd:b1:31:59:a5:81:59:31:d7:bb:e7:50:33:22:b6:d6:
         12:b2:5d:4e:84:5c:7f:f9:84:6d:69:df:34:c2:26:94:91:42:
         20:01:cc:0e:ee:f7:66:94:cb:b8:cb:9f:09:69:ea:11:f9:00:
         6a:92:b0:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekcTV9KXKvMNOzlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk
NTkxMmZhZjUtOTJjOS00YjNhLTljMTgtZmQ3ZDQ2MzJiNzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlE32SnjFufLuu/SjU2n2DL/G0KgeMGBfDCx
QQZn9iy/be5TXssgS1kjGF2wKd7smIvvLP+E0wk+ZBUVSI2OjoQH1Ao9TC5cmVQ3
x5REb17Fg3/rnUQSOnFF7D6r/MgS8S+1gsZloziAI0CME4llzSRX47e3/nIbN+0q
FPjSHfXVZFExazn+y2VMS4mCtoqj0M6mhP9C0pVjtAikDCOa8tpumy0Ciucoqzj2
dSUqo4nKSd5T9Evz4Iu2tci45sZCSzESiOPCUGT2PFERR0vmcv+5mXY9iouPESlN
dn0L0/+lwLjwtTOz11SN8u+I5jRZqWUJPzfItTHafPJ0cDeHkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhOeth3oarYQMVET+64W0+ftgWUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGYyYjYwNjgtOTNhNC0z
N2E2LTgxZDktODhmNzFmODNkNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzM8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwfBeRmUWdJOVbVS0+LMV6tWpOjhXZZcmOh8UHlNFrFsbmsvxWBRYMK
6xwbEJL3hfNEAAX+/JyA+xuO0U4XJYwK8HA80jub1W6lVPkOjwY24CVdlkPfIMUW
hGhd5BocrfsMKeRwICxog+0OInGImsCuNQM/tcanptcc11ph+xnoYQUT2EYMJX3I
troJjbKNhArjp13FmWx+XHj8mjXSYfCZ37bmqvXuLyusy6lz5OsILrCqZ0zRBnmf
d0KJgyX3R2AsM3KffWtuvbExWaWBWTHXu+dQMyK21hKyXU6EXH/5hG1p3zTCJpSR
QiABzA7u92aUy7jLnwlp6hH5AGqSsDs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:33:00 2024 by rpki-client on console-ams.rpki-client.org