Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e4c6203-2db2-37c0-b047-e052e4face10.roa
File:                     0e4c6203-2db2-37c0-b047-e052e4face10.roa (raw, json)
Hash identifier:          dSzEWzsqosck1g/ceBABnCAHc4Df+So8WkS/gUxXAl8=
Subject key identifier:   BA:41:E8:A2:A9:B0:43:A4:4F:9E:25:EE:F4:7F:5A:76:7F:39:9B:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF89EADFD3A9AE4B507A180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e4c6203-2db2-37c0-b047-e052e4face10.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        73.236.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:9e:ad:fd:3a:9a:e4:b5:07:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=b4cc9582-6ed2-4972-b65c-e19f8caa6736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b4:da:7d:d7:3d:69:2b:54:ed:0b:61:2c:de:
                    b4:44:22:b1:6d:cb:9b:b0:cb:6c:95:bb:b0:16:8b:
                    38:1b:f1:bd:bd:f0:1f:3b:f6:ae:2c:2a:2e:58:21:
                    39:3f:73:66:44:1c:9c:a2:ab:84:90:80:5c:79:64:
                    7a:2d:a1:f0:ae:8f:f3:69:d1:b4:d4:fe:16:1b:50:
                    68:f6:81:23:0a:f6:5b:d0:48:f2:e2:60:3a:f1:80:
                    12:5e:5c:4b:e0:70:9d:c9:03:30:f2:9e:77:45:8f:
                    9c:c5:2f:cc:ba:58:dc:e9:fd:cc:28:9d:af:b4:ce:
                    cf:c0:b9:8e:9f:b4:f2:24:e0:ac:03:3d:fd:90:f4:
                    b8:62:35:3b:87:09:55:96:e2:55:a9:02:3b:42:eb:
                    03:27:2c:bf:5f:ef:5c:45:e8:c7:0f:63:09:5f:5d:
                    96:4b:90:89:e8:24:9c:1b:9c:be:f7:93:c3:3d:c7:
                    c0:49:6e:a0:a6:8d:a1:ac:79:a8:d4:d1:7e:20:e1:
                    52:cc:64:6d:30:df:32:a1:18:9f:32:01:01:df:48:
                    0d:d1:7d:65:ba:33:b8:38:96:87:04:14:67:f6:15:
                    d5:31:53:2d:f7:52:66:0c:eb:13:a6:5d:ee:12:50:
                    25:77:bd:1d:0d:c5:fa:5b:22:05:3d:a9:68:80:e2:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:41:E8:A2:A9:B0:43:A4:4F:9E:25:EE:F4:7F:5A:76:7F:39:9B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e4c6203-2db2-37c0-b047-e052e4face10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.236.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d1:9d:c2:ab:ae:4f:ff:5d:75:f2:95:1e:2e:f3:59:a2:2c:
         1c:d9:44:55:d5:c0:70:8e:75:d4:8a:c2:86:83:ff:1c:31:0c:
         e6:1e:49:84:f1:21:6a:d2:a3:48:ee:2f:9d:8f:4c:fc:92:f8:
         da:c8:f1:9b:6d:c4:1c:47:7e:ed:07:ac:b0:77:44:f9:11:1e:
         f0:f4:5e:5d:bb:18:51:06:ab:87:94:13:5a:99:f3:82:4f:52:
         4f:90:4d:e6:ec:d3:5a:4a:be:9d:4b:35:27:72:05:ed:f1:8c:
         24:de:e9:14:ae:43:35:09:c8:d8:c8:4a:fc:49:d0:01:3e:f0:
         5b:85:20:16:8c:ae:77:ca:4c:0d:24:34:5e:41:88:a2:94:0c:
         c8:d1:f2:bf:e5:2f:82:9b:9b:ed:71:20:32:e5:8a:88:b6:05:
         8f:2f:4f:58:9d:81:61:d4:6b:d1:36:82:56:41:65:53:2e:c6:
         f7:b1:b3:67:27:1e:5b:10:64:e0:af:ce:e7:37:6e:1c:2a:56:
         e6:d2:d1:b6:d6:d2:78:0b:e0:7d:40:2a:d8:ef:79:49:04:fc:
         33:ba:10:96:89:01:96:b1:f6:b6:98:30:61:8b:28:27:a3:8b:
         49:ed:1f:8d:a8:38:02:38:4e:82:11:2e:ec:bc:3f:c6:7a:07:
         b2:6f:09:16
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEe++J6t/Tqa5LUHoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
YjRjYzk1ODItNmVkMi00OTcyLWI2NWMtZTE5ZjhjYWE2NzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LTafdc9aStU7QthLN60RCKxbcubsMtslbuw
Fos4G/G9vfAfO/auLCouWCE5P3NmRBycoquEkIBceWR6LaHwro/zadG01P4WG1Bo
9oEjCvZb0Ejy4mA68YASXlxL4HCdyQMw8p53RY+cxS/Muljc6f3MKJ2vtM7PwLmO
n7TyJOCsAz39kPS4YjU7hwlVluJVqQI7QusDJyy/X+9cRejHD2MJX12WS5CJ6CSc
G5y+95PDPcfASW6gpo2hrHmo1NF+IOFSzGRtMN8yoRifMgEB30gN0X1lujO4OJaH
BBRn9hXVMVMt91JmDOsTpl3uElAld70dDcX6WyIFPalogOKyRQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLpB6KKpsEOkT54l7vR/WnZ/OZsEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGU0YzYyMDMtMmRiMi0z
N2MwLWIwNDctZTA1MmU0ZmFjZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASewwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAANGdwquuT/9ddfKVHi7zWaIsHNlEVdXAcI511IrChoP/HDEM5h5JhPEh
atKjSO4vnY9M/JL42sjxm23EHEd+7QessHdE+REe8PReXbsYUQarh5QTWpnzgk9S
T5BN5uzTWkq+nUs1J3IF7fGMJN7pFK5DNQnI2MhK/EnQAT7wW4UgFoyud8pMDSQ0
XkGIopQMyNHyv+Uvgpub7XEgMuWKiLYFjy9PWJ2BYdRr0TaCVkFlUy7G97GzZyce
WxBk4K/O5zduHCpW5tLRttbSeAvgfUAq2O95SQT8M7oQlokBlrH2tpgwYYsoJ6OL
Se0fjag4AjhOghEu7Lw/xnoHsm8JFg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:55:27 2024 by rpki-client on console-ams.rpki-client.org