Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa
File:                     2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa (raw, json)
Hash identifier:          LbWjH8Mc5wzre4MNIxqhtHfSmN9RVbqwt9NZqnLAMUs=
Subject key identifier:   0A:37:89:80:EF:1F:B6:7F:AF:91:22:47:7A:97:2A:CC:C4:04:87:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89B804D688E11A4AA42780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.199.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:b8:04:d6:88:e1:1a:4a:a4:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=32b26fba-9bd8-45da-a1df-8f4d37fad700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:58:60:8e:98:6b:72:69:a9:22:ee:77:93:74:
                    a5:90:27:cb:91:ca:58:90:16:51:ab:d8:b3:50:f9:
                    e0:df:64:a7:9b:4b:f0:60:b3:cb:9b:a5:d0:c6:3e:
                    1a:0d:5e:32:a8:8c:01:67:71:31:b6:ef:fb:21:4c:
                    e2:04:3d:62:1e:17:16:2b:df:ac:c2:74:be:64:c4:
                    96:db:a5:7b:d5:77:86:8e:51:55:24:5a:c1:60:c0:
                    58:db:84:79:1a:54:30:0f:6b:12:a3:63:af:47:b0:
                    3e:df:67:da:77:c7:c0:3a:6d:13:28:7c:aa:bb:91:
                    4e:00:62:55:6d:d4:2a:d4:29:08:57:42:0b:92:40:
                    19:00:ca:0a:14:b3:e7:d5:57:f1:50:c4:a2:6c:cc:
                    eb:da:8c:46:21:7e:5d:46:f1:39:14:be:98:70:c4:
                    20:81:62:6c:35:29:1d:73:9d:c0:45:81:62:64:ac:
                    25:1a:d9:cc:95:92:a2:97:25:6d:bf:63:78:15:7e:
                    7e:56:56:00:3f:bf:15:50:69:7a:40:1f:e7:0a:0d:
                    16:7c:2b:df:16:67:31:90:a3:52:ac:73:84:af:35:
                    9f:83:f0:b6:cb:73:69:9c:b5:fe:18:67:d0:da:ec:
                    6b:22:4a:bd:ac:10:34:28:fa:86:04:c3:eb:34:d5:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:37:89:80:EF:1F:B6:7F:AF:91:22:47:7A:97:2A:CC:C4:04:87:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:80:4c:67:20:46:90:b5:63:63:c6:a9:3f:8f:2c:76:4a:
         ef:ce:a1:cd:c8:f6:d6:7b:2b:88:4c:ed:44:a5:96:36:57:09:
         25:5d:3b:84:5d:22:11:f7:ac:69:d1:ff:31:e5:cf:6f:0c:e5:
         04:12:63:92:6d:0a:29:be:09:a6:2f:32:4f:be:64:fe:ca:f3:
         61:4a:e9:cd:cb:5a:92:85:23:46:c8:f6:9b:72:3f:55:e1:24:
         50:4e:e2:8f:09:c7:0a:39:81:de:49:46:38:bc:56:90:9e:22:
         11:d9:ea:33:8b:2f:59:45:80:58:23:ac:74:56:96:0d:f5:9f:
         cf:d7:2c:7f:96:e1:43:05:4f:2f:ee:a2:ef:2b:cf:4f:c7:0f:
         f3:00:0f:e0:71:c9:26:7b:98:54:96:65:21:d8:a7:19:ce:9f:
         0c:7b:f5:d1:01:ae:af:a7:31:ef:1c:42:2c:6a:f3:75:bb:0a:
         f9:91:8f:53:7d:2a:da:51:74:ae:4f:a3:6d:4e:df:47:8d:37:
         b2:45:bf:2e:a1:fc:76:ee:d8:43:ad:1a:d7:77:5b:f9:b0:d3:
         14:be:e4:75:8f:5d:0b:9a:03:a1:f0:54:bf:66:1c:97:37:44:
         56:28:14:20:2e:dd:78:34:46:2b:cb:ad:7c:bd:72:5f:62:46:
         c0:3c:a3:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsibgE1ojhGkqkJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
MzJiMjZmYmEtOWJkOC00NWRhLWExZGYtOGY0ZDM3ZmFkNzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1hgjphrcmmpIu53k3SlkCfLkcpYkBZRq9iz
UPng32Snm0vwYLPLm6XQxj4aDV4yqIwBZ3Extu/7IUziBD1iHhcWK9+swnS+ZMSW
26V71XeGjlFVJFrBYMBY24R5GlQwD2sSo2OvR7A+32fad8fAOm0TKHyqu5FOAGJV
bdQq1CkIV0ILkkAZAMoKFLPn1VfxUMSibMzr2oxGIX5dRvE5FL6YcMQggWJsNSkd
c53ARYFiZKwlGtnMlZKilyVtv2N4FX5+VlYAP78VUGl6QB/nCg0WfCvfFmcxkKNS
rHOErzWfg/C2y3NpnLX+GGfQ2uxrIkq9rBA0KPqGBMPrNNV8wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAo3iYDvH7Z/r5EiR3qXKszEBIehMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ2NTg3OWMtOGMyZS0z
MGQyLWJlOTgtY2FiNmYwYmVmNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSccUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmpgExnIEaQtWNjxqk/jyx2Su/Ooc3I9tZ7K4hM7USlljZXCSVdO4Rd
IhH3rGnR/zHlz28M5QQSY5JtCim+CaYvMk++ZP7K82FK6c3LWpKFI0bI9ptyP1Xh
JFBO4o8Jxwo5gd5JRji8VpCeIhHZ6jOLL1lFgFgjrHRWlg31n8/XLH+W4UMFTy/u
ou8rz0/HD/MAD+BxySZ7mFSWZSHYpxnOnwx79dEBrq+nMe8cQixq83W7CvmRj1N9
KtpRdK5Po21O30eNN7JFvy6h/Hbu2EOtGtd3W/mw0xS+5HWPXQuaA6HwVL9mHJc3
RFYoFCAu3Xg0RivLrXy9cl9iRsA8oyU=
-----END CERTIFICATE-----
Generated at Sat Jun 8 00:48:22 2024 by rpki-client on console-fra.rpki-client.org