Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7870cc3-516d-3074-8b52-41fdfd9b1ccb.roa
File:                     e7870cc3-516d-3074-8b52-41fdfd9b1ccb.roa (raw, json)
Hash identifier:          JrK4qa2dZIPVgQOzWcRsGwgqLtPnOLQB5rMi3RAsvAQ=
Subject key identifier:   9A:49:3E:D7:3B:88:F5:D3:38:31:F8:EA:04:FA:2D:9F:F2:8D:4C:8F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584765A0FBF5D749CA6CE932CA60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7870cc3-516d-3074-8b52-41fdfd9b1ccb.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     20940
IP address blocks:        23.6.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:fb:f5:d7:49:ca:6c:e9:32:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=224c42cd-8d66-4ac4-8fd2-9d5fd7e78c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:3a:66:a8:53:dc:e8:a1:14:64:d6:2f:20:
                    bd:90:3b:ef:d2:43:16:95:cd:49:46:45:62:27:12:
                    f2:48:14:41:7d:a9:92:76:4b:c1:65:50:5b:98:58:
                    d8:91:7d:1a:51:cc:5f:72:96:b2:21:91:4f:77:93:
                    ce:9c:3b:fe:18:56:63:38:fc:9b:2f:b2:80:95:65:
                    3f:da:df:15:ff:e5:5a:91:e0:79:9e:c1:ed:ec:0d:
                    03:f3:f4:ce:75:8a:57:40:a6:5e:eb:af:d6:80:90:
                    35:8a:f6:2f:b1:51:71:ce:9c:c4:ca:7a:9c:ef:74:
                    77:2a:08:07:96:d4:51:0e:17:28:d8:05:7e:96:9f:
                    50:46:83:73:ec:94:a4:06:6e:e6:fe:34:e2:ee:55:
                    d9:00:03:9b:b3:23:ec:36:14:0e:ae:78:08:f9:55:
                    26:23:46:a6:d6:23:8a:e3:09:5c:92:fd:43:64:ce:
                    7f:a7:71:dd:5f:6f:ec:46:98:c6:84:cc:64:49:30:
                    89:f4:57:61:53:43:2a:6f:4e:1c:53:96:07:15:a8:
                    e0:66:19:be:df:23:f4:4e:4b:21:ea:09:60:82:41:
                    e3:4b:cc:d3:d6:4c:bb:e9:8c:1f:d2:dc:ad:ed:05:
                    66:c6:b8:1f:f2:82:c5:e0:e0:4c:24:d8:dc:0f:2a:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:49:3E:D7:3B:88:F5:D3:38:31:F8:EA:04:FA:2D:9F:F2:8D:4C:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7870cc3-516d-3074-8b52-41fdfd9b1ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.6.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:35:f6:bc:44:61:16:24:b1:90:7e:c0:b5:c2:6a:b9:36:89:
         8d:04:c8:c8:de:de:e4:bd:04:48:60:4d:a9:53:10:07:b9:f3:
         85:c1:17:c8:ec:7c:8d:bf:b1:66:66:0f:a0:2c:ac:6a:83:e0:
         b1:ec:86:aa:ae:d9:76:99:c3:01:ce:89:a3:46:4d:7f:1c:b5:
         4a:4f:1c:89:6b:e0:f2:90:d5:91:21:53:e3:99:4f:87:1d:70:
         96:47:68:69:f9:5c:29:0d:88:a6:03:bf:e1:09:e1:b5:96:03:
         81:cf:05:e3:51:14:f2:64:6b:24:53:67:67:cf:7e:29:3c:39:
         0b:7e:79:ba:88:b9:59:c6:12:1e:5d:02:88:ed:64:44:6d:f0:
         80:ed:b8:3c:26:a2:db:4a:60:3a:5c:63:99:ed:43:63:80:b3:
         c4:c7:47:31:27:d5:0d:7d:56:ad:4e:35:fb:4e:40:6a:61:97:
         c5:b0:aa:80:49:be:df:19:76:4d:25:72:c2:f1:e9:66:cc:c7:
         2b:91:6d:eb:d8:fc:73:b6:1f:9f:3b:77:62:f2:11:eb:85:bb:
         3f:5b:ab:f0:5b:6f:b3:39:c2:2a:ff:a4:cf:26:3c:66:db:bb:
         96:97:20:0e:94:38:6d:6c:eb:60:ff:f8:c3:fc:4b:d5:c0:48:
         08:08:2e:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPv110nKbOkyymAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk
MjI0YzQyY2QtOGQ2Ni00YWM0LThmZDItOWQ1ZmQ3ZTc4YzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1E6ZqhT3OihFGTWLyC9kDvv0kMWlc1JRkVi
JxLySBRBfamSdkvBZVBbmFjYkX0aUcxfcpayIZFPd5POnDv+GFZjOPybL7KAlWU/
2t8V/+VakeB5nsHt7A0D8/TOdYpXQKZe66/WgJA1ivYvsVFxzpzEynqc73R3KggH
ltRRDhco2AV+lp9QRoNz7JSkBm7m/jTi7lXZAAObsyPsNhQOrngI+VUmI0am1iOK
4wlckv1DZM5/p3HdX2/sRpjGhMxkSTCJ9FdhU0Mqb04cU5YHFajgZhm+3yP0Tksh
6glggkHjS8zT1ky76Ywf0tyt7QVmxrgf8oLF4OBMJNjcDyrwLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpJPtc7iPXTODH46gT6LZ/yjUyPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTc4NzBjYzMtNTE2ZC0z
MDc0LThiNTItNDFmZGZkOWIxY2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwZ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABU19rxEYRYksZB+wLXCark2iY0EyMje3uS9BEhgTalTEAe584XBF8js
fI2/sWZmD6AsrGqD4LHshqqu2XaZwwHOiaNGTX8ctUpPHIlr4PKQ1ZEhU+OZT4cd
cJZHaGn5XCkNiKYDv+EJ4bWWA4HPBeNRFPJkayRTZ2fPfik8OQt+ebqIuVnGEh5d
AojtZERt8IDtuDwmottKYDpcY5ntQ2OAs8THRzEn1Q19Vq1ONftOQGphl8WwqoBJ
vt8Zdk0lcsLx6WbMxyuRbevY/HO2H587d2LyEeuFuz9bq/Bbb7M5wir/pM8mPGbb
u5aXIA6UOG1s62D/+MP8S9XASAgILnI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:38 2024 by rpki-client on console-ams.rpki-client.org