Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae0f48db-d59e-3c28-9779-c3d66fa8a51d.roa
File:                     ae0f48db-d59e-3c28-9779-c3d66fa8a51d.roa (raw, json)
Hash identifier:          KcxYISIQWDbmEsaczXIeUMl/hU+8SThhuT5ozW/tCxo=
Subject key identifier:   89:32:62:39:7C:94:90:25:A4:BA:E7:0E:81:8B:DA:03:DD:4B:A0:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460FA418CF00A7489206826580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae0f48db-d59e-3c28-9779-c3d66fa8a51d.roa
Signing time:             Sat 01 Jun 2024 01:00:28 +0000
ROA not before:           Sat 01 Jun 2024 01:00:28 +0000
ROA not after:            Fri 30 Aug 2024 01:00:28 +0000
asID:                     33654
IP address blocks:        74.95.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:a4:18:cf:00:a7:48:92:06:82:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 01:00:28 2024 GMT
            Not After : Aug 30 01:00:28 2024 GMT
        Subject: CN=86d27970-3b42-4bc0-8127-f8580bb35ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c0:04:23:80:35:5e:6b:08:05:d8:d2:90:81:
                    ba:cc:e1:0c:31:e4:37:58:9e:1c:79:1e:45:86:38:
                    7c:7a:91:0a:a1:b2:19:59:01:1a:c5:48:82:da:aa:
                    e9:ab:c0:b7:a7:73:9d:d9:d4:9f:ff:19:21:58:ea:
                    1c:44:94:0b:34:b3:e3:54:14:a1:c0:17:a0:34:a8:
                    a9:93:f7:08:2b:86:0d:dc:f3:e5:8f:5f:db:02:81:
                    e7:f4:80:4d:b5:45:72:ae:68:56:33:77:4b:0d:46:
                    6c:6a:17:b1:f2:59:16:02:6b:60:a8:02:43:bf:36:
                    2c:f4:39:76:c1:8d:f5:1b:6c:94:87:70:d3:b4:cb:
                    56:b8:56:58:77:9c:e0:df:f4:76:20:74:5c:da:c6:
                    af:b8:78:92:ac:54:f7:20:a0:ac:95:39:72:5a:10:
                    ec:dd:7a:19:5c:42:bf:69:b9:77:90:8a:f0:78:f2:
                    41:64:14:96:92:4a:07:b4:c4:b6:ea:79:c8:95:48:
                    43:cd:a2:b0:4b:c1:e6:34:53:3a:ed:1f:7e:e2:a8:
                    87:fa:13:61:f7:1d:f7:e2:cf:ff:fb:5a:e3:67:4a:
                    9a:89:1b:b7:96:7b:af:df:e9:2b:b5:cf:dd:de:ca:
                    36:3a:4f:ce:d3:7a:c3:ac:0a:33:86:6c:64:ec:7d:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:32:62:39:7C:94:90:25:A4:BA:E7:0E:81:8B:DA:03:DD:4B:A0:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae0f48db-d59e-3c28-9779-c3d66fa8a51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.95.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:66:04:68:57:b9:a1:21:75:61:35:17:b0:2c:2b:bb:e9:
         ca:be:86:bb:8e:fb:8b:fd:2e:3f:e5:5b:f2:94:0a:f9:bb:66:
         70:fa:02:c8:06:d2:e9:22:47:7a:0a:33:8b:f2:e0:10:f1:c8:
         ab:ad:44:4f:7a:87:b4:f5:85:6b:3c:59:45:4d:77:35:9f:51:
         67:ad:19:58:fb:d6:7e:84:5e:d5:dd:4d:ac:bd:8b:f6:0d:36:
         0a:c6:f8:7f:76:d4:0c:7c:be:e7:76:2f:89:dc:df:90:c9:b3:
         01:b2:04:f8:21:15:9a:ab:08:ee:d0:22:6a:9a:99:60:56:8b:
         97:88:dd:38:82:68:9c:57:13:84:55:5c:07:3e:74:c7:8c:71:
         f8:7e:30:f1:1a:e6:d1:a1:23:d0:2f:6a:bb:79:ab:c0:b2:e6:
         55:53:4c:f2:df:15:69:9c:12:5d:61:37:ab:99:a3:1d:87:b3:
         7f:e4:01:d4:3a:07:12:01:55:02:d1:c6:30:67:ad:8a:20:ad:
         ba:db:e0:ad:df:e1:54:7a:eb:4d:0a:29:dd:0d:bb:6a:5a:9a:
         40:eb:00:c8:d1:c6:a2:bd:59:a3:98:a2:17:96:19:a7:18:76:
         13:f1:e5:ab:42:dc:d0:b8:31:eb:a7:d9:2a:60:45:5c:ba:d2:
         a0:f4:7a:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYPpBjPAKdIkgaCZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDYwMTAxMDAyOFoXDTI0MDgzMDAxMDAyOFowLzEtMCsGA1UEAxMk
ODZkMjc5NzAtM2I0Mi00YmMwLTgxMjctZjg1ODBiYjM1ZmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMAEI4A1XmsIBdjSkIG6zOEMMeQ3WJ4ceR5F
hjh8epEKobIZWQEaxUiC2qrpq8C3p3Od2dSf/xkhWOocRJQLNLPjVBShwBegNKip
k/cIK4YN3PPlj1/bAoHn9IBNtUVyrmhWM3dLDUZsahex8lkWAmtgqAJDvzYs9Dl2
wY31G2yUh3DTtMtWuFZYd5zg3/R2IHRc2savuHiSrFT3IKCslTlyWhDs3XoZXEK/
abl3kIrwePJBZBSWkkoHtMS26nnIlUhDzaKwS8HmNFM67R9+4qiH+hNh9x334s//
+1rjZ0qaiRu3lnuv3+krtc/d3so2Ok/O03rDrAozhmxk7H15gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkyYjl8lJAlpLrnDoGL2gPdS6DhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWUwZjQ4ZGItZDU5ZS0z
YzI4LTk3NzktYzNkNjZmYThhNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSl8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxFZgRoV7mhIXVhNRewLCu76cq+hruO+4v9Lj/lW/KUCvm7ZnD6AsgG
0ukiR3oKM4vy4BDxyKutRE96h7T1hWs8WUVNdzWfUWetGVj71n6EXtXdTay9i/YN
NgrG+H921Ax8vud2L4nc35DJswGyBPghFZqrCO7QImqamWBWi5eI3TiCaJxXE4RV
XAc+dMeMcfh+MPEa5tGhI9Avart5q8Cy5lVTTPLfFWmcEl1hN6uZox2Hs3/kAdQ6
BxIBVQLRxjBnrYogrbrb4K3f4VR6600KKd0Nu2pamkDrAMjRxqK9WaOYoheWGacY
dhPx5atC3NC4Meun2SpgRVy60qD0esg=
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:34:31 2024 by rpki-client on console-ams.rpki-client.org