Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed5930a8-8adb-38e6-9a10-cc85dfb530c0.roa
File:                     ed5930a8-8adb-38e6-9a10-cc85dfb530c0.roa (raw, json)
Hash identifier:          HMjkMm0ex0Ema9S5Cx5+r+6dsF+U1NyI+H8NR3tct5o=
Subject key identifier:   67:A6:1C:FA:02:D8:D5:1E:2A:C4:83:16:BD:71:2B:60:48:A0:0E:0D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845C02A2662B8CBEA50EED65E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed5930a8-8adb-38e6-9a10-cc85dfb530c0.roa
Signing time:             Fri 03 May 2024 13:46:12 +0000
ROA not before:           Fri 03 May 2024 13:46:12 +0000
ROA not after:            Thu 01 Aug 2024 13:46:12 +0000
asID:                     20940
IP address blocks:        23.59.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:2a:26:62:b8:cb:ea:50:ee:d6:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  3 13:46:12 2024 GMT
            Not After : Aug  1 13:46:12 2024 GMT
        Subject: CN=e6ef922b-c449-4dd5-99d5-6eaded08d8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:d1:f6:7a:66:43:2d:64:c4:aa:a9:24:62:
                    bf:0c:46:e9:67:5b:e5:ec:1d:5a:24:27:d1:a7:39:
                    da:1b:04:03:c5:85:07:93:62:16:e6:b1:23:ee:03:
                    92:d5:75:13:30:81:d5:a4:3e:3c:5f:33:13:55:a2:
                    62:78:90:8a:12:7a:32:d6:0e:81:7a:fb:27:8c:3a:
                    bb:50:2d:82:37:37:cf:8b:3b:28:0e:7b:a5:d6:13:
                    e6:88:c3:6c:e8:80:f1:71:5a:04:27:41:32:fb:cc:
                    f9:19:65:a3:3a:71:2d:a1:46:2d:4e:c2:05:df:05:
                    ea:f2:e7:07:10:c5:e0:c3:1c:23:e6:c9:33:0e:0e:
                    15:ec:b8:3c:c4:1c:52:ee:18:ee:06:c0:97:09:1a:
                    0a:39:a3:08:8b:51:0f:80:7b:1e:03:e3:03:e9:5e:
                    83:4f:0e:f9:5e:16:46:21:ad:08:1c:ef:da:cc:87:
                    fd:9a:bc:b0:27:ad:84:9b:bf:4d:e9:81:e9:13:9a:
                    03:7a:b4:a6:4a:4d:69:10:79:ea:03:f9:c1:60:e7:
                    3d:30:3a:9a:d5:ed:f8:25:04:09:4c:9a:56:ac:d3:
                    31:e1:36:dd:31:d3:f1:52:f2:20:79:a2:54:15:ec:
                    f5:f1:21:af:07:66:d4:71:d4:68:a3:bd:e6:78:9f:
                    1e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A6:1C:FA:02:D8:D5:1E:2A:C4:83:16:BD:71:2B:60:48:A0:0E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed5930a8-8adb-38e6-9a10-cc85dfb530c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:9a:c4:77:87:b1:ef:02:f2:7b:45:1b:90:77:6b:22:96:
         ba:2a:00:27:67:f6:f5:4f:cb:4d:a0:f6:95:92:1b:02:e9:8c:
         e2:24:e7:9a:ed:50:d4:e8:7d:bd:d2:15:51:21:ca:77:bb:16:
         21:5d:ff:01:ca:11:99:be:10:b3:49:d3:98:54:1d:73:14:86:
         4b:b7:66:66:fe:94:84:e0:30:c4:ee:9c:4c:92:be:d8:85:3f:
         0e:7e:86:4a:24:c0:8b:e2:49:68:c2:8b:02:6c:a1:c1:d3:8d:
         83:da:ff:a2:3c:89:36:3c:c3:3e:13:c9:f2:10:fc:ee:84:f4:
         37:08:e2:55:56:07:6d:17:68:c6:fe:86:4f:fe:19:10:da:ed:
         15:c7:b4:e0:70:6a:27:47:1f:58:2a:55:83:41:b8:8b:ad:c1:
         15:15:8b:15:c4:a1:d2:8a:61:3c:78:61:cb:ae:5d:46:2d:9d:
         19:30:94:7d:38:7e:19:0b:64:fe:1b:14:34:e5:d8:6d:b1:9d:
         a1:a6:b5:18:c1:35:62:3f:ef:d4:bb:5e:67:6f:7a:29:ab:9d:
         ec:6f:ee:3f:d4:c5:ae:61:95:fe:b0:d0:c8:6c:43:1f:b8:03:
         b1:f8:48:e9:1f:74:59:57:37:60:7c:d2:a3:33:9e:3c:8a:a9:
         ec:7f:cd:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXAKiZiuMvqUO7WXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDUwMzEzNDYxMloXDTI0MDgwMTEzNDYxMlowLzEtMCsGA1UEAxMk
ZTZlZjkyMmItYzQ0OS00ZGQ1LTk5ZDUtNmVhZGVkMDhkOGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlTR9npmQy1kxKqpJGK/DEbpZ1vl7B1aJCfR
pznaGwQDxYUHk2IW5rEj7gOS1XUTMIHVpD48XzMTVaJieJCKEnoy1g6BevsnjDq7
UC2CNzfPizsoDnul1hPmiMNs6IDxcVoEJ0Ey+8z5GWWjOnEtoUYtTsIF3wXq8ucH
EMXgwxwj5skzDg4V7Lg8xBxS7hjuBsCXCRoKOaMIi1EPgHseA+MD6V6DTw75XhZG
Ia0IHO/azIf9mrywJ62Em79N6YHpE5oDerSmSk1pEHnqA/nBYOc9MDqa1e34JQQJ
TJpWrNMx4TbdMdPxUvIgeaJUFez18SGvB2bUcdRoo73meJ8ekQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGemHPoC2NUeKsSDFr1xK2BIoA4NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWQ1OTMwYTgtOGFkYi0z
OGU2LTlhMTAtY2M4NWRmYjUzMGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzviMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvWmsR3h7HvAvJ7RRuQd2silroqACdn9vVPy02g9pWSGwLpjOIk55rt
UNTofb3SFVEhyne7FiFd/wHKEZm+ELNJ05hUHXMUhku3Zmb+lITgMMTunEySvtiF
Pw5+hkokwIviSWjCiwJsocHTjYPa/6I8iTY8wz4TyfIQ/O6E9DcI4lVWB20XaMb+
hk/+GRDa7RXHtOBwaidHH1gqVYNBuIutwRUVixXEodKKYTx4YcuuXUYtnRkwlH04
fhkLZP4bFDTl2G2xnaGmtRjBNWI/79S7Xmdveimrnexv7j/Uxa5hlf6w0MhsQx+4
A7H4SOkfdFlXN2B80qMznjyKqex/zSc=
-----END CERTIFICATE-----
Generated at Wed May 29 03:15:49 2024 by rpki-client on console-fra.rpki-client.org