Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e83e177d-0b27-3bf2-a330-85463f513fce.roa
File:                     e83e177d-0b27-3bf2-a330-85463f513fce.roa (raw, json)
Hash identifier:          orCA/fTGs7BKk+8ttD+PpNDpqGSfK7WXksgMU2dTpUk=
Subject key identifier:   94:D5:54:4E:B9:B9:51:C7:A0:BB:BF:74:07:33:86:F4:E9:3B:3F:06
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584765A0FA8877B5EDE92FDD76E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e83e177d-0b27-3bf2-a330-85463f513fce.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     16625
IP address blocks:        23.2.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:fa:88:77:b5:ed:e9:2f:dd:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=6aec93ce-62aa-4376-894d-36f5b55040ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f8:14:91:a8:37:60:5a:26:44:90:29:e7:c8:
                    4c:6f:a7:55:48:28:fa:93:8a:e4:94:c9:7c:d6:34:
                    3c:8a:eb:7f:94:9f:3a:d8:50:99:18:d0:f8:83:8c:
                    c4:db:64:e2:d8:14:34:3c:78:e9:30:2f:65:7b:63:
                    4e:95:70:3d:53:11:4f:2e:6a:18:aa:cc:e7:5e:a0:
                    d2:84:3d:4d:bd:55:fb:e8:90:1a:41:00:07:0e:93:
                    b7:2f:43:79:52:0c:0a:16:25:37:4d:c1:a0:54:5b:
                    4f:88:ac:b3:d4:36:e7:75:73:2d:0d:3f:f7:a8:8a:
                    03:e8:20:04:dc:eb:e1:45:f7:17:f3:d1:b5:f0:f0:
                    56:f0:bc:5e:8e:0e:88:5c:f4:21:ff:68:9a:03:f6:
                    6f:15:ed:33:20:d2:ce:66:5e:1b:06:1f:5b:15:36:
                    c0:35:a9:22:ad:ac:38:29:93:65:bd:8a:11:97:5c:
                    88:ac:a3:d7:58:7b:1e:7a:a1:ab:08:1c:1d:c9:2e:
                    db:ec:44:b1:d4:a2:1d:c9:93:69:59:8d:8b:f0:60:
                    ac:f3:79:d4:e0:70:f2:9d:a7:40:c9:d2:53:2f:fa:
                    d5:0e:b6:e6:bb:d3:f3:00:7c:aa:91:73:bd:cf:66:
                    fe:f3:25:8a:ec:25:d6:70:b4:a5:0b:e6:8a:1f:95:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D5:54:4E:B9:B9:51:C7:A0:BB:BF:74:07:33:86:F4:E9:3B:3F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e83e177d-0b27-3bf2-a330-85463f513fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.2.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0e:0f:47:f4:17:81:b5:63:13:3f:d0:16:ef:56:fe:ea:d6:
         f2:40:35:1f:be:ee:90:29:e5:29:70:16:05:73:a8:22:50:66:
         74:3a:a7:ef:48:1a:b7:87:7f:1f:b3:19:dd:d9:2c:5b:17:c3:
         0a:e0:9f:06:38:a2:21:2b:8c:d9:4f:25:a5:52:9f:f3:79:f2:
         c9:d1:a9:1a:32:c5:73:55:1d:4d:fb:af:c3:8f:5b:f8:4c:2b:
         03:8d:a6:82:77:1e:c6:a3:ae:08:2e:38:ca:51:a9:17:ac:c2:
         ee:b2:2b:68:36:f8:4a:71:9e:dc:01:88:9e:d5:72:29:d9:cf:
         27:2c:96:13:3a:be:df:d2:ca:2a:16:b8:3d:cf:b9:a0:5c:1f:
         55:e8:99:b7:2d:06:5c:b9:bb:a4:51:31:4b:b7:54:bc:f7:61:
         28:bd:00:87:38:2a:3f:67:27:1a:37:01:a4:2c:30:78:e5:73:
         ea:2e:8d:98:66:5b:94:f2:47:c2:66:c5:aa:bd:7b:41:38:e4:
         8a:55:f8:7d:b7:fe:fa:6d:c6:64:ae:b7:4f:27:e6:94:07:d2:
         b1:1a:a2:ff:0d:03:27:56:dd:37:ed:c1:dd:51:41:0b:5c:d3:
         27:95:a8:19:93:0e:36:55:e4:c8:74:f4:99:88:db:0e:fb:61:
         91:c3:99:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPqId7Xt6S/dduAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk
NmFlYzkzY2UtNjJhYS00Mzc2LTg5NGQtMzZmNWI1NTA0MGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfgUkag3YFomRJAp58hMb6dVSCj6k4rklMl8
1jQ8iut/lJ862FCZGND4g4zE22Ti2BQ0PHjpMC9le2NOlXA9UxFPLmoYqsznXqDS
hD1NvVX76JAaQQAHDpO3L0N5UgwKFiU3TcGgVFtPiKyz1DbndXMtDT/3qIoD6CAE
3OvhRfcX89G18PBW8Lxejg6IXPQh/2iaA/ZvFe0zINLOZl4bBh9bFTbANakiraw4
KZNlvYoRl1yIrKPXWHseeqGrCBwdyS7b7ESx1KIdyZNpWY2L8GCs83nU4HDynadA
ydJTL/rVDrbmu9PzAHyqkXO9z2b+8yWK7CXWcLSlC+aKH5VRqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTVVE65uVHHoLu/dAczhvTpOz8GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTgzZTE3N2QtMGIyNy0z
YmYyLWEzMzAtODU0NjNmNTEzZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwKwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkOD0f0F4G1YxM/0BbvVv7q1vJANR++7pAp5SlwFgVzqCJQZnQ6p+9I
GreHfx+zGd3ZLFsXwwrgnwY4oiErjNlPJaVSn/N58snRqRoyxXNVHU37r8OPW/hM
KwONpoJ3HsajrgguOMpRqReswu6yK2g2+EpxntwBiJ7VcinZzycslhM6vt/SyioW
uD3PuaBcH1XombctBly5u6RRMUu3VLz3YSi9AIc4Kj9nJxo3AaQsMHjlc+oujZhm
W5TyR8Jmxaq9e0E45IpV+H23/vptxmSut08n5pQH0rEaov8NAydW3Tftwd1RQQtc
0yeVqBmTDjZV5Mh09JmI2w77YZHDmR8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:37 2024 by rpki-client on console-ams.rpki-client.org