Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1b7da40-45be-381d-a6cd-696fb2116d7f.roa
File:                     e1b7da40-45be-381d-a6cd-696fb2116d7f.roa (raw, json)
Hash identifier:          uO/4WVprp65Kye+/KTOz2K5iH6Sp6lCBhVszn+BWUuY=
Subject key identifier:   C4:E0:01:0C:92:45:FD:B9:D0:3E:50:20:BD:FE:2E:2B:5F:5C:B9:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89491056DD3476BF5DB280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1b7da40-45be-381d-a6cd-696fb2116d7f.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        71.230.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:49:10:56:dd:34:76:bf:5d:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=9a6f2ebd-7cb1-4b87-9993-6fd75faea721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:80:d8:cf:49:14:fe:ad:f5:3b:94:87:33:
                    55:6d:a9:9e:b9:53:71:6e:57:47:e0:71:c3:08:e7:
                    9d:c3:18:89:65:d6:8d:03:75:f4:38:92:c9:40:61:
                    df:52:88:0c:7d:78:b8:c8:4b:ab:c9:3d:d3:1a:c4:
                    02:ab:b1:4f:43:2f:0d:cd:3d:41:5e:1a:c6:29:ce:
                    33:96:b2:b7:f2:3a:34:0c:12:dc:2d:ed:31:69:b8:
                    d9:8a:15:97:5b:d6:68:29:42:fb:10:b1:f7:46:02:
                    52:89:44:ed:29:ad:a3:45:47:f5:4b:09:07:5c:d9:
                    0a:c4:31:e3:da:be:8d:d3:9e:91:7e:fc:07:29:47:
                    ec:21:cb:96:0c:e8:d3:73:7a:71:b5:ad:51:91:fc:
                    be:c7:a5:c6:32:e4:0d:15:39:a5:62:af:22:1b:7c:
                    44:60:bb:68:2c:07:b0:a7:8f:8d:b4:cd:7c:87:4e:
                    e7:f3:f5:e1:17:19:4c:10:b9:1f:ee:af:0f:15:ef:
                    06:69:c1:72:f3:45:d2:52:ad:44:4e:ae:d5:ca:b8:
                    40:36:e5:0f:9a:79:64:a2:c4:51:84:6d:76:fa:00:
                    9a:b4:01:e2:e9:3e:a2:be:aa:60:2a:5e:fb:0c:0d:
                    d0:e5:fb:79:4e:7c:3e:59:44:cd:c0:82:da:d1:ff:
                    90:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E0:01:0C:92:45:FD:B9:D0:3E:50:20:BD:FE:2E:2B:5F:5C:B9:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1b7da40-45be-381d-a6cd-696fb2116d7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.230.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:08:10:95:42:7f:1d:01:ee:4d:b2:24:5e:14:ca:bf:a6:5c:
         4b:bb:ed:12:db:7f:4c:fc:1e:57:50:46:e3:51:73:9f:21:29:
         58:29:d0:42:0f:4c:94:19:72:96:64:cb:17:7a:ef:43:28:a1:
         ee:55:ba:30:18:4b:08:1e:07:48:e2:08:e8:f8:f8:52:11:a0:
         fc:fa:24:0e:48:9e:4a:a0:00:cd:21:be:0f:2b:1f:9e:3b:e0:
         b5:96:7e:d2:b1:b9:c8:3a:0a:bf:29:00:f1:c2:ad:a3:72:4d:
         2f:b1:49:18:b7:e2:03:9e:75:7b:25:89:f0:b8:38:80:0e:62:
         4a:79:fb:e4:d3:38:61:52:57:aa:a1:dd:18:c3:f7:d5:56:8a:
         29:8e:7a:bd:17:5c:41:d4:7c:a7:9d:b7:83:de:bb:e9:c2:c7:
         38:f8:b5:3c:54:14:93:8b:e3:c2:55:35:b5:6b:5d:b3:1f:86:
         5f:3a:9b:ce:16:51:e5:23:9c:22:80:65:51:79:28:15:c3:47:
         78:4a:c6:bc:01:8e:76:7a:8c:d1:f2:47:d8:9d:10:88:8d:64:
         10:1f:cc:60:17:da:00:bb:5e:ac:0a:d8:cc:2b:d6:57:c2:f8:
         38:08:38:4c:ca:bd:d2:47:91:78:ae:63:64:66:73:7c:c5:84:
         f1:22:81:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiUkQVt00dr9dsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
OWE2ZjJlYmQtN2NiMS00Yjg3LTk5OTMtNmZkNzVmYWVhNzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcmA2M9JFP6t9TuUhzNVbameuVNxbldH4HHD
COedwxiJZdaNA3X0OJLJQGHfUogMfXi4yEuryT3TGsQCq7FPQy8NzT1BXhrGKc4z
lrK38jo0DBLcLe0xabjZihWXW9ZoKUL7ELH3RgJSiUTtKa2jRUf1SwkHXNkKxDHj
2r6N056RfvwHKUfsIcuWDOjTc3pxta1Rkfy+x6XGMuQNFTmlYq8iG3xEYLtoLAew
p4+NtM18h07n8/XhFxlMELkf7q8PFe8GacFy80XSUq1ETq7VyrhANuUPmnlkosRR
hG12+gCatAHi6T6ivqpgKl77DA3Q5ft5Tnw+WUTNwILa0f+Q6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTgAQySRf250D5QIL3+LitfXLn6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTFiN2RhNDAtNDViZS0z
ODFkLWE2Y2QtNjk2ZmIyMTE2ZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+bkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANwIEJVCfx0B7k2yJF4Uyr+mXEu77RLbf0z8HldQRuNRc58hKVgp0EIP
TJQZcpZkyxd670Mooe5VujAYSwgeB0jiCOj4+FIRoPz6JA5InkqgAM0hvg8rH547
4LWWftKxucg6Cr8pAPHCraNyTS+xSRi34gOedXslifC4OIAOYkp5++TTOGFSV6qh
3RjD99VWiimOer0XXEHUfKedt4Peu+nCxzj4tTxUFJOL48JVNbVrXbMfhl86m84W
UeUjnCKAZVF5KBXDR3hKxrwBjnZ6jNHyR9idEIiNZBAfzGAX2gC7XqwK2Mwr1lfC
+DgIOEzKvdJHkXiuY2Rmc3zFhPEigX4=
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:19:26 2024 by rpki-client on console-fra.rpki-client.org