Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0de5d897-ae17-3f84-9220-f0138a90bac4.roa
File:                     0de5d897-ae17-3f84-9220-f0138a90bac4.roa (raw, json)
Hash identifier:          mdSA8yIq245cyqNkZ0SCkm7drhd5jNvG56UlmvXeacw=
Subject key identifier:   40:9A:AE:D2:B3:07:60:93:5C:91:D1:DC:BA:95:CA:13:BA:38:68:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FACCF1AD74FAA5A7A0289D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0de5d897-ae17-3f84-9220-f0138a90bac4.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        76.27.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:cf:1a:d7:4f:aa:5a:7a:02:89:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=39e062fd-50f9-4afc-8601-68cc46118c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:e6:30:ef:57:36:22:cf:9a:c5:5f:3c:2d:
                    68:da:c3:b7:30:21:2a:70:53:82:dc:f2:41:f9:d7:
                    bb:d4:78:67:cd:26:33:75:0c:b2:fb:17:c7:a2:55:
                    e1:f2:ea:e9:f1:89:e2:65:7f:0c:c1:e7:60:47:b2:
                    7f:d2:5a:a8:c0:bf:b3:f3:1c:bb:54:62:5d:b9:90:
                    c1:46:6e:f7:92:93:4f:b1:c3:c3:ff:3d:08:75:19:
                    32:53:89:74:d2:f1:36:b8:86:d6:73:18:58:73:a9:
                    0c:7e:39:ed:43:fa:19:3c:ae:0d:c0:10:a7:c3:9c:
                    65:48:8e:d3:c4:06:45:27:a9:f0:b2:5f:0d:66:22:
                    89:8b:58:ca:4b:1a:5d:64:c4:de:8c:0d:cf:99:14:
                    7d:f8:8b:35:97:ab:90:67:22:f9:b7:20:47:57:47:
                    20:b8:fc:d4:79:d5:f3:c4:9f:cd:49:b7:a7:80:19:
                    55:4d:09:1c:fe:40:46:dc:a9:bd:ac:68:c4:b6:cf:
                    ca:01:2b:d6:6f:4d:ea:44:50:f0:13:43:ae:cc:1f:
                    39:82:6d:8c:45:b6:cc:71:b5:fc:88:de:68:da:92:
                    06:06:12:e2:3e:c8:a3:ef:b1:00:5c:0c:6f:e1:83:
                    b1:02:a1:67:18:63:09:0b:80:9a:70:01:b2:bf:76:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9A:AE:D2:B3:07:60:93:5C:91:D1:DC:BA:95:CA:13:BA:38:68:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0de5d897-ae17-3f84-9220-f0138a90bac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.27.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2c:8a:16:5f:33:07:15:67:d8:fa:75:a9:01:b6:77:b0:f7:
         11:9b:b4:15:88:8c:f4:02:3b:3f:4d:15:14:d4:ee:7c:75:2b:
         06:fe:5a:1a:35:46:92:d6:24:dd:45:a6:6a:7d:b1:43:cc:c5:
         f1:1d:a4:ef:9a:0d:8d:07:3b:b4:7f:6e:48:98:a7:4e:24:6c:
         04:c5:ef:dc:ae:99:c8:0e:a9:0a:6c:f8:b2:dd:64:3a:80:84:
         7c:0e:9d:6f:2c:95:17:92:f6:a7:9f:51:84:ae:e5:71:c9:53:
         4c:85:96:d4:1d:34:98:be:f7:c4:66:09:85:18:f7:d9:e6:2a:
         40:f7:6a:40:75:56:f4:af:fb:55:32:bc:c9:34:b9:39:c7:d2:
         92:d6:69:13:de:1d:30:b6:f5:e1:43:e9:11:bc:f4:db:ed:bf:
         b7:a2:a8:37:53:02:6f:8c:78:8a:52:2e:60:11:3f:f9:5f:3a:
         29:f5:af:eb:6e:8a:e9:ea:e5:f5:5c:35:38:e5:2b:56:d8:c2:
         98:7f:29:df:dc:1b:a8:56:ef:05:87:e7:f3:f7:76:c1:e5:da:
         23:76:8f:d8:d5:f2:48:81:d9:2a:71:08:34:64:de:dd:f8:f8:
         cd:ca:b7:7b:a2:fa:a1:6a:2a:89:52:e6:1f:c2:30:1c:3b:a3:
         78:75:44:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrM8a10+qWnoCidAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MzllMDYyZmQtNTBmOS00YWZjLTg2MDEtNjhjYzQ2MTE4YzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYnmMO9XNiLPmsVfPC1o2sO3MCEqcFOC3PJB
+de71HhnzSYzdQyy+xfHolXh8urp8YniZX8MwedgR7J/0lqowL+z8xy7VGJduZDB
Rm73kpNPscPD/z0IdRkyU4l00vE2uIbWcxhYc6kMfjntQ/oZPK4NwBCnw5xlSI7T
xAZFJ6nwsl8NZiKJi1jKSxpdZMTejA3PmRR9+Is1l6uQZyL5tyBHV0cguPzUedXz
xJ/NSbengBlVTQkc/kBG3Km9rGjEts/KASvWb03qRFDwE0OuzB85gm2MRbbMcbX8
iN5o2pIGBhLiPsij77EAXAxv4YOxAqFnGGMJC4CacAGyv3YgEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECartKzB2CTXJHR3LqVyhO6OGh6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGRlNWQ4OTctYWUxNy0z
Zjg0LTkyMjAtZjAxMzhhOTBiYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcsihZfMwcVZ9j6dakBtnew9xGbtBWIjPQCOz9NFRTU7nx1Kwb+Who1
RpLWJN1Fpmp9sUPMxfEdpO+aDY0HO7R/bkiYp04kbATF79yumcgOqQps+LLdZDqA
hHwOnW8slReS9qefUYSu5XHJU0yFltQdNJi+98RmCYUY99nmKkD3akB1VvSv+1Uy
vMk0uTnH0pLWaRPeHTC29eFD6RG89Nvtv7eiqDdTAm+MeIpSLmARP/lfOin1r+tu
iunq5fVcNTjlK1bYwph/Kd/cG6hW7wWH5/P3dsHl2iN2j9jV8kiB2SpxCDRk3t34
+M3Kt3ui+qFqKolS5h/CMBw7o3h1RJI=
-----END CERTIFICATE-----
Generated at Sat May 4 14:47:18 2024 by rpki-client on console-ams.rpki-client.org