Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256f301c-5a70-3bae-94e5-39bcd4d5680e.roa
File:                     256f301c-5a70-3bae-94e5-39bcd4d5680e.roa (raw, json)
Hash identifier:          yh2YcDi0DDtM7jLvxj0IglHd341uf+UEcENsat/cW0o=
Subject key identifier:   0B:23:51:03:B6:D9:DF:FA:9E:1D:84:3F:24:C9:63:EB:66:C7:B3:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460FA4139ECE311141A7F9E788
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256f301c-5a70-3bae-94e5-39bcd4d5680e.roa
Signing time:             Sat 01 Jun 2024 01:00:28 +0000
ROA not before:           Sat 01 Jun 2024 01:00:28 +0000
ROA not after:            Fri 30 Aug 2024 01:00:28 +0000
asID:                     33661
IP address blocks:        73.156.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:a4:13:9e:ce:31:11:41:a7:f9:e7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 01:00:28 2024 GMT
            Not After : Aug 30 01:00:28 2024 GMT
        Subject: CN=a520d603-3e88-4ad8-ab68-e3f1b10241c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:6a:47:7f:80:66:8b:14:9c:73:a7:d6:4c:
                    e6:7a:ef:4c:eb:69:98:62:75:dc:b2:59:22:ab:db:
                    ee:c1:df:48:2e:38:54:53:25:80:18:ba:4f:91:5e:
                    4d:47:e9:ce:bc:33:3b:fa:31:d9:ac:b5:02:02:77:
                    cd:29:3b:8e:2d:b8:43:53:f5:6d:d2:cd:d5:5c:09:
                    cb:00:33:2f:d5:42:81:31:02:c0:c0:e3:de:12:8e:
                    34:a7:34:ca:de:04:7c:83:71:b3:b7:93:6b:80:f8:
                    b6:7c:d1:95:61:22:41:bc:60:2d:24:17:f4:48:a0:
                    0d:fc:c8:95:5e:b2:c4:22:ba:c1:2d:7b:fc:b7:b4:
                    3f:87:6e:8e:18:ab:6c:07:0c:8f:13:b8:f6:88:3c:
                    24:79:85:50:3c:eb:e2:7d:88:3d:a7:76:c1:1f:b2:
                    9d:3a:74:1f:23:c6:c8:a5:d2:18:b1:56:9b:2b:86:
                    c9:14:e3:ca:cd:f9:ef:4e:bc:34:49:43:2c:0e:4e:
                    9a:16:ff:48:57:48:d0:47:57:8a:65:c2:df:c0:5f:
                    46:20:e3:c3:c4:29:a0:5a:87:82:70:31:6a:2b:7d:
                    e6:b6:cb:91:d8:8b:a7:23:a4:c4:95:c2:62:45:eb:
                    d4:71:db:fd:9f:c3:f2:92:91:42:44:be:b3:6f:bf:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:23:51:03:B6:D9:DF:FA:9E:1D:84:3F:24:C9:63:EB:66:C7:B3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256f301c-5a70-3bae-94e5-39bcd4d5680e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:46:5a:11:8a:3e:4e:11:d4:e5:ed:f4:84:cc:31:a9:e3:15:
         67:84:db:4c:51:7e:f2:8d:13:b9:04:a4:94:17:fa:e6:c6:0c:
         bd:92:0c:13:f2:d6:d6:8c:5e:a4:58:08:59:19:8e:09:7c:ad:
         03:99:a7:9f:47:2e:54:12:95:32:c7:4b:5d:b0:1f:95:9c:24:
         6f:28:5d:5f:53:79:3d:80:78:50:d7:6c:ea:7d:9c:9a:bd:00:
         45:ba:09:b6:a9:2b:d2:84:fb:a6:f7:e3:93:65:8d:71:a6:b1:
         99:ed:33:2e:40:74:9c:27:73:c5:f5:06:dc:38:fc:30:d0:94:
         c8:f2:f6:f2:11:0c:af:45:25:f5:b7:ca:6d:fa:23:d3:95:fe:
         5c:ed:09:bc:a8:74:c8:a7:e6:0b:0a:67:26:94:9f:14:c7:e7:
         13:5d:cc:94:53:ef:a4:b5:43:b9:69:71:f0:79:6f:0f:7a:40:
         f1:72:e6:d2:66:a7:df:45:ab:3f:4f:f2:91:42:f9:a3:23:5f:
         8c:72:c4:5e:32:58:db:9b:0a:ea:ad:1e:04:1f:26:66:9c:15:
         41:e4:06:1c:88:89:30:64:2b:5c:22:49:44:f9:67:40:4c:94:
         19:44:33:f6:c4:16:d6:cb:97:d9:a3:da:e9:3d:c6:83:16:5b:
         4e:d3:d3:fa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEYPpBOezjERQaf554gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDYwMTAxMDAyOFoXDTI0MDgzMDAxMDAyOFowLzEtMCsGA1UEAxMk
YTUyMGQ2MDMtM2U4OC00YWQ4LWFiNjgtZTNmMWIxMDI0MWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG1qR3+AZosUnHOn1kzmeu9M62mYYnXcslki
q9vuwd9ILjhUUyWAGLpPkV5NR+nOvDM7+jHZrLUCAnfNKTuOLbhDU/Vt0s3VXAnL
ADMv1UKBMQLAwOPeEo40pzTK3gR8g3Gzt5NrgPi2fNGVYSJBvGAtJBf0SKAN/MiV
XrLEIrrBLXv8t7Q/h26OGKtsBwyPE7j2iDwkeYVQPOvifYg9p3bBH7KdOnQfI8bI
pdIYsVabK4bJFOPKzfnvTrw0SUMsDk6aFv9IV0jQR1eKZcLfwF9GIOPDxCmgWoeC
cDFqK33mtsuR2IunI6TElcJiRevUcdv9n8PykpFCRL6zb7/d8wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAsjUQO22d/6nh2EPyTJY+tmx7OVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjU2ZjMwMWMtNWE3MC0z
YmFlLTk0ZTUtMzliY2Q0ZDU2ODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASZwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEA20ZaEYo+ThHU5e30hMwxqeMVZ4TbTFF+8o0TuQSklBf65sYMvZIME/LW
1oxepFgIWRmOCXytA5mnn0cuVBKVMsdLXbAflZwkbyhdX1N5PYB4UNds6n2cmr0A
RboJtqkr0oT7pvfjk2WNcaaxme0zLkB0nCdzxfUG3Dj8MNCUyPL28hEMr0Ul9bfK
bfoj05X+XO0JvKh0yKfmCwpnJpSfFMfnE13MlFPvpLVDuWlx8HlvD3pA8XLm0man
30WrP0/ykUL5oyNfjHLEXjJY25sK6q0eBB8mZpwVQeQGHIiJMGQrXCJJRPlnQEyU
GUQz9sQW1suX2aPa6T3GgxZbTtPT+g==
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:29:13 2024 by rpki-client on console-ams.rpki-client.org