Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1206b3fc-6783-3272-ae2e-74400083e809.roa
File:                     1206b3fc-6783-3272-ae2e-74400083e809.roa (raw, json)
Hash identifier:          SdajiOj0+AHaZKLvrhdH1eUOCb3qex6Zjsi8ntvAEdQ=
Subject key identifier:   07:3E:4B:DD:D4:BF:DD:3E:03:D3:0E:80:03:1C:C6:2A:37:3A:4B:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC8A038D05E7F25A0B8B1E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1206b3fc-6783-3272-ae2e-74400083e809.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        73.194.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:03:8d:05:e7:f2:5a:0b:8b:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=bb77254f-db72-4bd7-be63-e77398905255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:7e:b5:3f:b1:e4:16:81:16:55:44:9b:70:
                    24:25:db:e6:3a:64:0a:2e:22:b9:41:a7:16:b6:54:
                    c9:70:dc:de:0b:59:3c:45:79:87:a8:f0:9e:4b:6e:
                    c4:ae:ae:84:64:2c:c2:fd:5e:12:e5:fd:9a:c9:da:
                    7f:3d:54:06:c8:4d:f1:0a:a7:1f:4c:46:f2:5f:0c:
                    35:b1:0f:f7:60:10:78:3b:fc:b0:6a:1c:51:8c:f5:
                    5b:de:54:e4:d8:45:03:3d:b4:ac:10:a5:ee:1d:c6:
                    cb:80:a6:65:c9:74:3f:78:8d:23:28:cd:33:76:c6:
                    ed:78:42:40:20:1a:af:12:aa:20:97:b4:21:e0:50:
                    97:0f:9d:35:b8:5f:af:4a:91:43:12:a1:61:64:f3:
                    2f:f5:25:76:25:3f:a9:36:e4:29:7d:23:37:f5:37:
                    34:cc:f9:2c:41:02:0c:30:a0:9e:4a:f9:4b:4a:9f:
                    27:5f:6e:fe:57:35:61:7e:6a:9c:d4:b6:aa:52:f4:
                    35:17:b3:9b:e6:0e:6e:e4:82:70:6e:17:20:0f:ba:
                    2c:c1:c1:21:ed:b3:d0:61:48:42:bd:ff:b0:0e:10:
                    d4:dd:c9:bc:72:8a:81:58:e5:77:57:75:0c:a7:fc:
                    ea:d5:f2:18:7e:a9:ee:e2:0d:ee:44:7f:6a:be:49:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3E:4B:DD:D4:BF:DD:3E:03:D3:0E:80:03:1C:C6:2A:37:3A:4B:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1206b3fc-6783-3272-ae2e-74400083e809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.194.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:be:da:47:c8:5e:c3:44:44:4c:e2:b7:46:be:f1:9a:14:be:
         6a:3e:f0:55:aa:a6:90:9c:68:d4:9c:de:2a:6f:af:69:dc:c1:
         91:6d:d6:51:43:7a:0d:99:a0:e8:04:95:46:95:ac:ca:6f:d6:
         69:01:23:4b:09:c5:a7:85:39:e6:7f:6c:37:59:09:37:3f:3d:
         48:cf:34:ef:97:09:b5:d0:10:08:c1:cf:12:24:47:82:b8:6a:
         af:41:cf:81:87:7a:7e:2b:fc:1a:a1:cc:d3:73:94:d1:28:ab:
         dc:9d:ea:dd:d0:11:15:1f:d8:fe:4e:45:65:9c:af:90:7c:b5:
         a8:f5:b8:fb:b2:32:aa:69:9a:0f:da:1c:40:59:6c:b3:09:12:
         c5:86:84:0e:50:5c:d8:56:4a:5f:7a:9a:3c:6c:53:a5:ae:dd:
         2f:c6:ca:58:3d:8d:bc:81:69:e8:f7:09:b1:ad:43:a2:44:f2:
         8e:95:b8:45:e2:55:b8:e4:74:68:c0:f5:e7:0d:1a:d8:93:76:
         15:f8:70:06:33:de:f3:06:f8:9e:3b:57:89:15:0b:64:36:90:
         13:82:ce:8c:29:69:cf:2c:6a:ff:cb:65:45:f7:76:a8:62:9a:
         ee:91:6e:f4:28:4f:f4:15:90:0e:f1:e2:15:a6:93:84:cf:4f:
         ec:d7:a6:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsigONBefyWguLHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
YmI3NzI1NGYtZGI3Mi00YmQ3LWJlNjMtZTc3Mzk4OTA1MjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DF+tT+x5BaBFlVEm3AkJdvmOmQKLiK5QacW
tlTJcNzeC1k8RXmHqPCeS27Erq6EZCzC/V4S5f2aydp/PVQGyE3xCqcfTEbyXww1
sQ/3YBB4O/ywahxRjPVb3lTk2EUDPbSsEKXuHcbLgKZlyXQ/eI0jKM0zdsbteEJA
IBqvEqogl7Qh4FCXD501uF+vSpFDEqFhZPMv9SV2JT+pNuQpfSM39Tc0zPksQQIM
MKCeSvlLSp8nX27+VzVhfmqc1LaqUvQ1F7Ob5g5u5IJwbhcgD7oswcEh7bPQYUhC
vf+wDhDU3cm8coqBWOV3V3UMp/zq1fIYfqnu4g3uRH9qvklzRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAc+S93Uv90+A9MOgAMcxio3OkvbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTIwNmIzZmMtNjc4My0z
MjcyLWFlMmUtNzQ0MDAwODNlODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScJ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAa+2kfIXsNEREzit0a+8ZoUvmo+8FWqppCcaNSc3ipvr2ncwZFt1lFD
eg2ZoOgElUaVrMpv1mkBI0sJxaeFOeZ/bDdZCTc/PUjPNO+XCbXQEAjBzxIkR4K4
aq9Bz4GHen4r/BqhzNNzlNEoq9yd6t3QERUf2P5ORWWcr5B8taj1uPuyMqppmg/a
HEBZbLMJEsWGhA5QXNhWSl96mjxsU6Wu3S/Gylg9jbyBaej3CbGtQ6JE8o6VuEXi
VbjkdGjA9ecNGtiTdhX4cAYz3vMG+J47V4kVC2Q2kBOCzowpac8sav/LZUX3dqhi
mu6RbvQoT/QVkA7x4hWmk4TPT+zXpjQ=
-----END CERTIFICATE-----
Generated at Sat May 4 14:47:30 2024 by rpki-client on console-ams.rpki-client.org