Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0656f0fe-8f59-3b54-a9bb-0999cf744730.roa
File:                     0656f0fe-8f59-3b54-a9bb-0999cf744730.roa (raw, json)
Hash identifier:          47WStZtUXKh+DJl7r22tOJMGAVPAOjbRHBiaql1w3jk=
Subject key identifier:   B4:EE:36:22:24:1B:0C:37:3B:B7:03:E6:F7:EA:65:D5:4B:8F:F1:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847617185C1651F34EFDE903A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0656f0fe-8f59-3b54-a9bb-0999cf744730.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     33659
IP address blocks:        73.29.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:85:c1:65:1f:34:ef:de:90:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=d2dfd6cf-d689-454b-8c93-198541c5a8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:d2:12:a6:53:ad:32:ec:a7:0a:85:9a:46:
                    e8:c2:2e:94:6c:4b:b7:d8:4f:85:54:88:2d:aa:6e:
                    f4:08:54:9c:6f:93:48:61:57:29:23:0e:47:91:d7:
                    e6:ea:04:22:ae:d8:56:a3:cd:14:fb:05:ef:27:d6:
                    ac:6d:cc:45:7f:fd:56:5b:d3:28:21:98:c7:f9:9b:
                    75:6c:1f:29:55:9b:f9:df:8c:6f:85:55:bd:99:b9:
                    58:f1:4b:a8:8c:cb:10:14:eb:b4:f7:75:42:c5:db:
                    20:3e:b0:b1:4a:04:f2:82:9e:df:69:86:51:d7:b1:
                    5d:fe:76:d0:12:22:1e:10:14:30:59:a7:55:59:33:
                    0f:95:7c:91:10:77:49:ad:f0:62:c2:ea:88:6b:a1:
                    80:9a:be:85:f0:c8:87:9f:f4:1d:51:89:69:bc:02:
                    f9:80:7d:d4:13:bd:8b:d7:59:f7:54:86:23:52:07:
                    18:48:2c:4b:2a:e9:e1:6d:80:61:57:db:9f:7e:c2:
                    63:1a:cd:94:58:37:8d:3e:f9:18:a2:84:81:a3:f3:
                    94:09:15:70:0d:22:ca:08:26:cc:bc:07:ea:02:06:
                    8c:2e:f6:ca:34:e4:46:f3:c8:f4:20:65:de:b7:34:
                    18:ae:58:cb:0f:5d:ec:ad:94:58:4f:5a:b3:b8:3e:
                    88:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EE:36:22:24:1B:0C:37:3B:B7:03:E6:F7:EA:65:D5:4B:8F:F1:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0656f0fe-8f59-3b54-a9bb-0999cf744730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.29.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:5f:ed:09:33:06:15:d0:ed:f6:32:62:51:3c:79:39:c9:
         a2:30:24:24:c9:79:49:f4:bc:71:b2:42:6c:83:2f:ee:4c:04:
         4c:d2:31:1e:0f:47:f5:6b:2f:d5:3e:5b:b0:90:b0:3c:5a:9c:
         ae:fe:54:b9:00:7a:f2:00:bb:e3:95:8f:97:d8:43:e2:25:54:
         9f:d4:8b:e6:0f:92:82:12:6a:57:c4:e3:56:20:a1:59:3f:35:
         43:69:13:64:dd:f3:e7:9e:ed:ea:33:e0:a7:00:92:fb:10:de:
         5c:a0:ea:dd:fc:49:be:c4:00:99:65:cf:f0:22:7d:d0:84:ca:
         c1:b5:39:5d:db:47:3a:08:a8:f1:19:6e:06:6c:1f:78:c0:ee:
         d3:eb:6a:78:78:5a:f9:7f:81:40:db:da:36:56:72:4f:95:96:
         18:bc:c7:c9:95:a1:40:52:de:80:c1:3a:14:35:6a:d2:38:b9:
         c0:ba:f8:6c:42:50:d7:ed:ae:7a:94:06:33:7d:59:7f:c3:2d:
         9f:ea:fc:76:98:f0:8d:93:25:03:74:82:8f:a8:96:12:7a:6c:
         91:8a:d9:bd:1b:d7:94:12:4b:a1:79:9a:0f:00:b6:7d:b8:fd:
         8f:69:73:90:bd:90:f2:32:76:40:56:c0:a6:3d:b4:6b:3e:14:
         78:e7:40:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdhcYXBZR80796QOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDJkZmQ2Y2YtZDY4OS00NTRiLThjOTMtMTk4NTQxYzVhOGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMrSEqZTrTLspwqFmkbowi6UbEu32E+FVIgt
qm70CFScb5NIYVcpIw5Hkdfm6gQirthWo80U+wXvJ9asbcxFf/1WW9MoIZjH+Zt1
bB8pVZv534xvhVW9mblY8UuojMsQFOu093VCxdsgPrCxSgTygp7faYZR17Fd/nbQ
EiIeEBQwWadVWTMPlXyREHdJrfBiwuqIa6GAmr6F8MiHn/QdUYlpvAL5gH3UE72L
11n3VIYjUgcYSCxLKunhbYBhV9uffsJjGs2UWDeNPvkYooSBo/OUCRVwDSLKCCbM
vAfqAgaMLvbKNORG88j0IGXetzQYrljLD13srZRYT1qzuD6IFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTuNiIkGww3O7cD5vfqZdVLj/FsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY1NmYwZmUtOGY1OS0z
YjU0LWE5YmItMDk5OWNmNzQ0NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSR0qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbHX+0JMwYV0O32MmJRPHk5yaIwJCTJeUn0vHGyQmyDL+5MBEzSMR4P
R/VrL9U+W7CQsDxanK7+VLkAevIAu+OVj5fYQ+IlVJ/Ui+YPkoISalfE41YgoVk/
NUNpE2Td8+ee7eoz4KcAkvsQ3lyg6t38Sb7EAJllz/AifdCEysG1OV3bRzoIqPEZ
bgZsH3jA7tPranh4Wvl/gUDb2jZWck+Vlhi8x8mVoUBS3oDBOhQ1atI4ucC6+GxC
UNftrnqUBjN9WX/DLZ/q/HaY8I2TJQN0go+olhJ6bJGK2b0b15QSS6F5mg8Atn24
/Y9pc5C9kPIydkBWwKY9tGs+FHjnQBw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:35 2024 by rpki-client on console-ams.rpki-client.org