Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3815c05d-5d80-307e-9a5d-46e61df1fcc7.roa
File:                     3815c05d-5d80-307e-9a5d-46e61df1fcc7.roa (raw, json)
Hash identifier:          g1h3AJdj7bu9Llj6K9kMpiTe/hfkCDGWNwLHZOrkBaM=
Subject key identifier:   FF:9D:2E:CC:75:A5:65:78:DA:47:F1:06:13:31:98:D8:5D:F9:95:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A5F8D8C43FE523F360880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3815c05d-5d80-307e-9a5d-46e61df1fcc7.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        73.242.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:5f:8d:8c:43:fe:52:3f:36:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=2de38d73-61a0-467c-a10f-ab5e851c6e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:07:50:bf:51:90:c1:7b:98:a8:e5:d5:37:
                    f3:11:00:df:bc:d9:ef:30:af:51:32:44:86:91:f2:
                    71:5e:e5:68:bc:6a:9b:40:8f:59:85:e5:74:1a:43:
                    e1:11:0b:0f:58:7f:e3:68:69:63:ea:01:f4:b5:0a:
                    c5:6c:ec:a2:9f:69:80:8b:00:16:21:d9:10:eb:f6:
                    1d:5b:08:f2:41:4a:83:83:85:26:3e:dc:b7:18:d0:
                    ce:56:9c:cd:09:45:09:9f:db:cc:b6:96:2c:10:ed:
                    df:75:f7:3d:1e:71:92:10:f0:f9:eb:a0:42:50:af:
                    51:f3:60:d2:d1:be:fa:1f:bd:b7:93:e7:63:88:c7:
                    16:f6:90:21:91:81:bf:ef:8b:bd:1d:6a:6c:59:11:
                    58:07:04:12:c2:7e:43:d3:4a:78:cf:aa:bd:ee:ac:
                    b0:c8:e9:5d:68:62:64:3a:64:a6:c8:7d:5f:05:a7:
                    ea:89:d6:8c:a3:9b:f4:68:a1:8f:db:a8:4f:0e:0b:
                    b6:d6:c9:d9:59:3e:db:23:3f:8e:19:dc:16:14:52:
                    57:03:b5:54:ea:e0:0f:02:9f:b8:3a:5a:9b:e9:79:
                    36:4a:9d:c0:86:c0:a8:1a:78:77:9b:cb:08:7f:b7:
                    1b:0d:f4:87:eb:db:a0:8c:ed:b8:fb:3b:c8:81:76:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9D:2E:CC:75:A5:65:78:DA:47:F1:06:13:31:98:D8:5D:F9:95:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3815c05d-5d80-307e-9a5d-46e61df1fcc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.242.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:df:4c:43:40:98:1a:87:27:ca:8d:cf:98:88:18:97:e0:d0:
         df:dc:da:dd:a2:0b:29:d0:31:11:c5:6d:0e:10:80:5a:31:d0:
         c3:2d:5b:d8:7c:d7:54:10:7b:77:b0:8b:ce:8a:2e:28:0c:86:
         dd:ce:b1:b6:b6:bd:a0:fb:61:3b:03:6e:89:b7:14:9e:95:99:
         35:e3:9a:d4:6c:c6:b5:0b:f6:cb:aa:0d:af:1b:24:8a:6b:50:
         d3:a9:6f:85:63:70:73:f3:a3:d9:3c:6f:ac:28:bf:ca:1b:77:
         53:05:60:c6:3c:29:d2:3a:56:1a:51:a2:1b:11:d5:cb:e4:b0:
         76:fd:62:6a:ca:43:cd:2c:67:24:ec:94:81:11:ad:e4:99:4e:
         b8:16:d5:5b:aa:e7:1c:14:c0:c8:fd:82:52:1e:9f:da:86:72:
         7f:ab:f4:a9:df:59:24:1b:61:1b:6c:f6:f1:49:eb:be:a0:bb:
         bc:51:88:e1:6c:be:ac:ba:b1:f2:e8:ba:cb:12:02:97:a4:4d:
         bf:6a:61:ce:b1:a7:aa:61:89:49:d2:14:11:30:a7:f1:63:83:
         97:9c:00:f4:65:3a:d8:e2:ca:d8:39:77:5a:95:84:7e:4f:61:
         da:a5:8b:f2:75:5f:ca:d0:09:cf:cd:93:b2:f2:84:d2:87:9a:
         fe:64:6a:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASl+NjEP+Uj82CIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
MmRlMzhkNzMtNjFhMC00NjdjLWExMGYtYWI1ZTg1MWM2ZTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSoHUL9RkMF7mKjl1TfzEQDfvNnvMK9RMkSG
kfJxXuVovGqbQI9ZheV0GkPhEQsPWH/jaGlj6gH0tQrFbOyin2mAiwAWIdkQ6/Yd
WwjyQUqDg4UmPty3GNDOVpzNCUUJn9vMtpYsEO3fdfc9HnGSEPD566BCUK9R82DS
0b76H723k+djiMcW9pAhkYG/74u9HWpsWRFYBwQSwn5D00p4z6q97qywyOldaGJk
OmSmyH1fBafqidaMo5v0aKGP26hPDgu21snZWT7bIz+OGdwWFFJXA7VU6uAPAp+4
Olqb6Xk2Sp3AhsCoGnh3m8sIf7cbDfSH69ugjO24+zvIgXZH9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+dLsx1pWV42kfxBhMxmNhd+ZW7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzgxNWMwNWQtNWQ4MC0z
MDdlLTlhNWQtNDZlNjFkZjFmY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfIeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMDfTENAmBqHJ8qNz5iIGJfg0N/c2t2iCynQMRHFbQ4QgFox0MMtW9h8
11QQe3ewi86KLigMht3Osba2vaD7YTsDbom3FJ6VmTXjmtRsxrUL9suqDa8bJIpr
UNOpb4VjcHPzo9k8b6wov8obd1MFYMY8KdI6VhpRohsR1cvksHb9YmrKQ80sZyTs
lIERreSZTrgW1Vuq5xwUwMj9glIen9qGcn+r9KnfWSQbYRts9vFJ676gu7xRiOFs
vqy6sfLoussSApekTb9qYc6xp6phiUnSFBEwp/Fjg5ecAPRlOtjiytg5d1qVhH5P
Ydqli/J1X8rQCc/Nk7LyhNKHmv5katQ=
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:41:12 2024 by rpki-client on console-fra.rpki-client.org