Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdb0f5f2-bfcf-3262-ac52-00e1834872af.roa
File:                     fdb0f5f2-bfcf-3262-ac52-00e1834872af.roa (raw, json)
Hash identifier:          ZqiqkizT53enjIegT2of2z7+xdxoul9KsJT69w6hiSk=
Subject key identifier:   7A:85:86:AA:A7:CD:D3:37:DF:8D:F3:71:19:70:77:1A:FF:18:03:63
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847AE36C9939F61A793853A5880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdb0f5f2-bfcf-3262-ac52-00e1834872af.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        23.54.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c9:93:9f:61:a7:93:85:3a:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=38db2e3d-7141-474b-8d58-033d25d799ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:ba:36:f4:fe:c8:89:65:13:f0:b8:2f:29:
                    0a:1b:6e:fd:5d:87:98:be:46:29:39:70:73:b9:7d:
                    3a:52:92:71:81:8f:b2:3e:ab:26:bd:01:ac:75:a6:
                    e7:e3:4a:30:a3:8f:3e:3c:72:aa:b8:de:a8:e4:6c:
                    e3:cc:73:da:85:1b:e4:3e:25:38:91:b9:98:f8:bf:
                    ae:41:60:06:b6:dc:7e:90:48:db:0c:1c:a6:d0:5c:
                    67:73:56:7e:a7:18:7f:d7:db:8b:2c:d5:0f:f8:86:
                    5d:4e:9f:62:a9:3c:13:11:b0:15:87:08:14:8d:9d:
                    91:d8:cb:8e:f4:e1:84:2b:c3:83:d1:29:d0:48:c1:
                    5e:b5:40:c1:2c:8d:76:57:60:36:cf:5d:e0:55:80:
                    62:e8:cd:a4:e9:d6:d7:d2:c7:50:3c:60:ff:b7:ae:
                    22:e8:48:e4:18:a2:3b:26:ef:00:4d:40:66:e8:29:
                    ab:26:53:97:76:85:2d:cd:e2:c2:f9:ca:b7:48:4a:
                    f2:15:5a:86:39:c5:7a:5a:63:46:9c:6d:6e:4d:2b:
                    06:c2:34:7d:73:e3:82:6f:66:b2:9b:2f:70:21:29:
                    8b:f9:0e:ed:c5:d0:b2:2d:f1:30:4c:4c:ae:af:da:
                    59:d2:ca:fb:0e:e6:ad:a6:c9:64:d6:6c:c1:bb:24:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:85:86:AA:A7:CD:D3:37:DF:8D:F3:71:19:70:77:1A:FF:18:03:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdb0f5f2-bfcf-3262-ac52-00e1834872af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c3:ed:99:15:f0:b1:71:39:d2:18:b8:a3:d8:4c:d0:cf:3c:
         3c:99:5c:a4:ff:b0:c0:f3:49:d0:d3:eb:72:3d:b7:54:75:18:
         36:25:e5:ed:ce:a0:90:b4:04:18:de:5f:fb:9e:89:d2:7a:ac:
         f1:bd:e1:d0:a3:b3:bf:2e:88:07:32:02:c1:62:be:1f:4d:e5:
         df:80:ae:5b:39:78:80:f1:c2:02:07:b4:e0:02:99:56:ee:41:
         74:1a:13:a4:22:04:c8:68:92:28:34:35:4c:18:d8:70:db:5c:
         9e:b5:ce:d0:7f:ba:c0:ac:19:2e:33:8e:6e:82:7d:9a:ec:ba:
         29:38:ec:21:1f:85:19:89:38:59:6f:48:41:69:97:99:2f:96:
         68:45:9a:29:2b:f7:60:ca:17:c5:9f:d5:b8:de:b1:29:29:d7:
         bc:8c:11:7c:0c:77:b8:41:0c:c4:80:6c:b6:99:0e:2a:69:77:
         7f:87:32:83:e1:94:75:26:31:66:5e:6e:1f:ec:af:92:95:ee:
         6e:36:50:d0:2d:97:60:bc:97:cb:1e:d4:b2:cf:21:1f:3d:a2:
         db:97:39:dd:f0:be:9f:e5:9b:ce:10:28:4f:72:de:65:85:a9:
         67:84:40:20:9e:77:0a:00:84:0c:95:4e:bf:db:47:ff:dd:ed:
         08:78:8c:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNsmTn2Gnk4U6WIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
MzhkYjJlM2QtNzE0MS00NzRiLThkNTgtMDMzZDI1ZDc5OWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HG6NvT+yIllE/C4LykKG279XYeYvkYpOXBz
uX06UpJxgY+yPqsmvQGsdabn40owo48+PHKquN6o5GzjzHPahRvkPiU4kbmY+L+u
QWAGttx+kEjbDBym0Fxnc1Z+pxh/19uLLNUP+IZdTp9iqTwTEbAVhwgUjZ2R2MuO
9OGEK8OD0SnQSMFetUDBLI12V2A2z13gVYBi6M2k6dbX0sdQPGD/t64i6EjkGKI7
Ju8ATUBm6CmrJlOXdoUtzeLC+cq3SEryFVqGOcV6WmNGnG1uTSsGwjR9c+OCb2ay
my9wISmL+Q7txdCyLfEwTEyur9pZ0sr7Duatpslk1mzBuyTxjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqFhqqnzdM3343zcRlwdxr/GANjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmRiMGY1ZjItYmZjZi0z
MjYyLWFjNTItMDBlMTgzNDg3MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjD7ZkV8LFxOdIYuKPYTNDPPDyZXKT/sMDzSdDT63I9t1R1GDYl5e3O
oJC0BBjeX/ueidJ6rPG94dCjs78uiAcyAsFivh9N5d+Arls5eIDxwgIHtOACmVbu
QXQaE6QiBMhokig0NUwY2HDbXJ61ztB/usCsGS4zjm6CfZrsuik47CEfhRmJOFlv
SEFpl5kvlmhFmikr92DKF8Wf1bjesSkp17yMEXwMd7hBDMSAbLaZDippd3+HMoPh
lHUmMWZebh/sr5KV7m42UNAtl2C8l8se1LLPIR89otuXOd3wvp/lm84QKE9y3mWF
qWeEQCCedwoAhAyVTr/bR//d7Qh4jBM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:48 2024 by rpki-client on console-ams.rpki-client.org