Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1051cd0a-eef0-3121-965d-bbca3e9c00b1.roa
File:                     1051cd0a-eef0-3121-965d-bbca3e9c00b1.roa (raw, json)
Hash identifier:          vZPDp64707XugwFk5ftXmd0VyxuuakPkTDK0DfrpNVM=
Subject key identifier:   9A:56:CD:BA:D6:8D:D0:1F:29:28:62:B0:23:75:CF:06:39:3A:9E:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8370801AEBFC557C08300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1051cd0a-eef0-3121-965d-bbca3e9c00b1.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        76.142.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:37:08:01:ae:bf:c5:57:c0:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=a9755e07-4a02-4599-a185-7d613fc8ab60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:b3:29:43:47:b7:c5:30:fa:ef:d1:6c:76:
                    f4:21:63:c6:2a:47:06:ff:4c:cf:94:7c:46:44:d3:
                    a8:ea:a6:11:0b:6f:f0:c8:b9:3f:99:ff:8f:3b:ea:
                    0b:d6:89:cc:cf:68:e5:02:89:37:18:3a:bc:89:49:
                    3e:36:94:94:21:da:f5:39:8b:8b:ce:d0:23:98:65:
                    68:ec:15:0b:38:78:90:f3:f9:07:9f:10:0a:88:4b:
                    e9:ab:ba:34:93:5d:c7:87:e7:c2:5b:7a:5f:9e:ce:
                    e6:b8:3d:04:2d:b2:e3:37:b5:fe:fc:44:e9:da:1e:
                    d5:d6:6f:8f:94:4b:f8:9d:ec:3b:d4:71:ef:eb:bc:
                    3b:e0:e4:a3:6a:3b:72:da:35:cd:62:03:82:df:90:
                    30:86:73:a0:f6:9c:59:18:92:88:6f:56:93:65:2a:
                    b4:e7:6b:db:2f:d7:58:a0:d1:ad:ea:bd:2f:7f:69:
                    61:8c:51:ad:c1:36:f9:9a:89:fb:8e:0f:94:c5:7e:
                    35:40:17:2c:12:ed:ee:40:18:c4:7f:b6:f1:53:d7:
                    ff:37:99:7f:56:cc:92:f7:65:fc:c1:74:e3:e7:29:
                    44:00:91:77:e9:89:34:f0:31:09:44:25:9e:c9:cb:
                    b6:e5:d3:73:5c:ca:9c:b7:4b:0f:3f:8a:73:72:8e:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:56:CD:BA:D6:8D:D0:1F:29:28:62:B0:23:75:CF:06:39:3A:9E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1051cd0a-eef0-3121-965d-bbca3e9c00b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:9f:90:29:23:e8:f4:08:55:61:ba:95:7a:28:42:1f:82:de:
         a2:76:fa:53:cb:0c:03:0c:e6:cb:16:79:96:40:5c:7a:15:4f:
         9b:d5:6d:52:a8:51:18:a5:0a:6f:4d:d2:23:18:da:9d:3b:19:
         e5:df:09:e2:bf:f8:82:44:7e:91:2a:34:7f:7f:8c:21:79:c3:
         41:f5:39:48:62:4b:0f:a6:c8:a7:10:d5:9b:bc:1b:86:65:fc:
         d1:38:32:83:4d:db:06:dc:30:3d:1e:bc:37:87:a6:73:ca:0e:
         cf:16:68:d1:d3:e5:19:1b:b8:f6:c2:80:08:c1:ae:2c:99:37:
         cc:77:af:10:d7:64:11:52:73:2b:ed:89:bc:3b:59:c0:ab:f5:
         e2:73:63:51:af:2e:c3:f7:1a:5e:07:cc:d7:c2:ac:ff:14:af:
         63:31:3a:8f:f5:56:b6:14:7e:bf:86:62:2e:54:97:51:6f:8f:
         2b:6d:bf:5e:c1:4b:49:57:30:ca:e1:2b:ab:a5:03:4d:02:9e:
         00:10:78:56:1d:91:fa:19:a7:e3:ca:59:f7:57:b6:e2:c0:fa:
         54:75:10:6d:6f:a6:2a:2b:83:4c:6c:f1:28:de:fe:28:57:1f:
         7c:08:3c:37:ee:91:0c:7c:2b:93:65:bd:20:6b:9a:42:06:4b:
         62:d5:64:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yDcIAa6/xVfAgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
YTk3NTVlMDctNGEwMi00NTk5LWExODUtN2Q2MTNmYzhhYjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0azKUNHt8Uw+u/RbHb0IWPGKkcG/0zPlHxG
RNOo6qYRC2/wyLk/mf+PO+oL1onMz2jlAok3GDq8iUk+NpSUIdr1OYuLztAjmGVo
7BULOHiQ8/kHnxAKiEvpq7o0k13Hh+fCW3pfns7muD0ELbLjN7X+/ETp2h7V1m+P
lEv4new71HHv67w74OSjajty2jXNYgOC35AwhnOg9pxZGJKIb1aTZSq052vbL9dY
oNGt6r0vf2lhjFGtwTb5mon7jg+UxX41QBcsEu3uQBjEf7bxU9f/N5l/VsyS92X8
wXTj5ylEAJF36Yk08DEJRCWeycu25dNzXMqct0sPP4pzco4kiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpWzbrWjdAfKShisCN1zwY5Op59MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTA1MWNkMGEtZWVmMC0z
MTIxLTk2NWQtYmJjYTNlOWMwMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTI5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6fkCkj6PQIVWG6lXooQh+C3qJ2+lPLDAMM5ssWeZZAXHoVT5vVbVKo
URilCm9N0iMY2p07GeXfCeK/+IJEfpEqNH9/jCF5w0H1OUhiSw+myKcQ1Zu8G4Zl
/NE4MoNN2wbcMD0evDeHpnPKDs8WaNHT5RkbuPbCgAjBriyZN8x3rxDXZBFScyvt
ibw7WcCr9eJzY1GvLsP3Gl4HzNfCrP8Ur2MxOo/1VrYUfr+GYi5Ul1Fvjyttv17B
S0lXMMrhK6ulA00CngAQeFYdkfoZp+PKWfdXtuLA+lR1EG1vpiorg0xs8Sje/ihX
H3wIPDfukQx8K5NlvSBrmkIGS2LVZNY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:55:38 2024 by rpki-client on console-ams.rpki-client.org