Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/042227f1-70bc-3798-8bff-5bb040a63f70.roa
File:                     042227f1-70bc-3798-8bff-5bb040a63f70.roa (raw, json)
Hash identifier:          PkL7lg6Ib8g1A8MMtEJ+yWqN0Xz+w8avOrP8F3pOB90=
Subject key identifier:   19:62:A2:73:55:41:80:62:AE:19:F0:F4:5B:BD:12:89:90:61:6F:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584761718484CC1C1B31AA5BD6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/042227f1-70bc-3798-8bff-5bb040a63f70.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     33490
IP address blocks:        73.240.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:84:84:cc:1c:1b:31:aa:5b:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=721813e9-428e-4b3d-80dd-a103b9dc63f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:fb:e3:33:2b:a2:0e:58:38:01:44:c3:99:
                    f6:12:20:9a:50:f7:37:aa:d5:25:8b:35:36:1c:92:
                    82:91:ee:d2:8e:ba:f3:dd:27:10:66:1d:39:20:39:
                    bf:44:02:c5:dc:88:d4:d8:08:e8:ec:e4:7d:a9:61:
                    25:c1:b2:13:9f:42:04:9b:a6:ae:d2:a5:b5:f3:42:
                    15:94:70:c2:33:31:bd:1a:85:d7:10:33:61:67:aa:
                    9f:a0:9f:37:c3:6e:5a:45:d2:bc:0a:99:4a:91:43:
                    59:6b:dd:15:2b:a8:b9:2e:fc:b1:21:71:f4:4e:ff:
                    63:3e:76:4a:59:ea:41:2e:af:ab:40:1d:ae:cd:be:
                    0d:7d:43:38:56:8f:50:fb:38:52:3c:37:80:6a:f6:
                    5f:4b:cb:b3:20:d0:a5:6f:2f:da:f1:bd:c0:3a:9d:
                    f2:10:90:c1:2a:b1:ec:eb:2f:6e:06:8f:2f:cf:68:
                    30:5b:1d:2b:8c:e1:35:f8:58:74:31:32:97:66:19:
                    f7:8e:5b:60:82:d9:94:15:df:2a:d4:11:8b:ae:86:
                    28:5c:37:0b:df:bb:d4:ba:0c:7e:f8:d0:d5:dc:17:
                    5f:f3:bd:5d:1e:49:95:8f:3a:cc:96:3c:3b:29:fe:
                    3b:66:1f:19:ba:fd:a7:69:52:80:89:50:3d:79:00:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:A2:73:55:41:80:62:AE:19:F0:F4:5B:BD:12:89:90:61:6F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/042227f1-70bc-3798-8bff-5bb040a63f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.240.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a6:0a:99:8c:7f:94:6c:ab:1b:19:f0:2a:04:94:ad:a1:af:
         0f:a2:b8:75:4c:5c:f3:55:99:63:26:08:2f:8e:51:dd:2e:0f:
         6a:06:69:3a:e0:e0:d4:df:f8:4c:7b:b4:ba:0b:e1:20:7f:dc:
         35:e8:03:cf:eb:52:54:0c:10:d9:0b:3b:ac:af:16:ac:e5:c6:
         5c:73:6e:09:fd:c5:20:28:e4:31:26:7f:84:92:d4:73:da:51:
         d1:f7:df:7e:0f:a8:be:9c:4b:82:48:0e:7c:35:cd:ba:2e:e2:
         09:8c:50:c7:c0:3e:7a:6b:19:05:9c:cc:65:f4:dd:0a:2a:a1:
         93:bc:41:1f:11:7b:ab:29:f6:e4:4a:2d:fd:c9:6e:4c:51:a4:
         80:b7:7b:a2:fc:61:4c:36:c4:09:40:0c:84:1b:1d:10:09:9e:
         d3:8a:5b:c6:66:9c:2b:a7:4f:0c:a2:e3:74:c6:ad:62:df:89:
         fa:fc:bc:49:74:c4:7e:37:3a:08:4e:4a:96:5f:08:0e:b7:c1:
         1e:56:77:f6:ce:48:ac:ad:61:bc:04:46:b9:ac:79:d4:ef:11:
         e3:96:b4:79:48:cc:c7:1e:dc:d4:09:d0:c1:50:1b:58:65:ee:
         58:2a:3f:2d:c0:80:0d:a4:69:bf:32:77:79:b5:d6:a3:6e:cd:
         64:54:40:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdhcYSEzBwbMapb1sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
NzIxODEzZTktNDI4ZS00YjNkLTgwZGQtYTEwM2I5ZGM2M2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHf74zMrog5YOAFEw5n2EiCaUPc3qtUlizU2
HJKCke7Sjrrz3ScQZh05IDm/RALF3IjU2Ajo7OR9qWElwbITn0IEm6au0qW180IV
lHDCMzG9GoXXEDNhZ6qfoJ83w25aRdK8CplKkUNZa90VK6i5LvyxIXH0Tv9jPnZK
WepBLq+rQB2uzb4NfUM4Vo9Q+zhSPDeAavZfS8uzINClby/a8b3AOp3yEJDBKrHs
6y9uBo8vz2gwWx0rjOE1+Fh0MTKXZhn3jltggtmUFd8q1BGLroYoXDcL37vUugx+
+NDV3Bdf871dHkmVjzrMljw7Kf47Zh8Zuv2naVKAiVA9eQDeBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBlionNVQYBirhnw9Fu9EomQYW+oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQyMjI3ZjEtNzBiYy0z
Nzk4LThiZmYtNWJiMDQwYTYzZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfCuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACmmCpmMf5RsqxsZ8CoElK2hrw+iuHVMXPNVmWMmCC+OUd0uD2oGaTrg
4NTf+Ex7tLoL4SB/3DXoA8/rUlQMENkLO6yvFqzlxlxzbgn9xSAo5DEmf4SS1HPa
UdH3334PqL6cS4JIDnw1zbou4gmMUMfAPnprGQWczGX03QoqoZO8QR8Re6sp9uRK
Lf3JbkxRpIC3e6L8YUw2xAlADIQbHRAJntOKW8ZmnCunTwyi43TGrWLfifr8vEl0
xH43OghOSpZfCA63wR5Wd/bOSKytYbwERrmsedTvEeOWtHlIzMce3NQJ0MFQG1hl
7lgqPy3AgA2kab8yd3m11qNuzWRUQGs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:52:33 2024 by rpki-client on console-fra.rpki-client.org