Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15d2dfdc-7af1-384a-ac19-7be520d6e8f6.roa
File:                     15d2dfdc-7af1-384a-ac19-7be520d6e8f6.roa (raw, json)
Hash identifier:          +FFuUBm+TjpMle+0tXipqN95HRSjdEjqufpU2FBDQmQ=
Subject key identifier:   DA:A6:D3:86:47:E4:93:CE:9F:6C:33:13:7C:BE:91:C0:0E:28:7D:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89B8421308D173045C3880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15d2dfdc-7af1-384a-ac19-7be520d6e8f6.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.199.32.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:b8:42:13:08:d1:73:04:5c:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=ab8897b1-e8f5-4e45-b280-9a2e79b9403e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:f4:53:21:2e:fb:05:12:5c:77:b2:cb:d3:
                    21:90:cc:95:03:93:c3:f3:24:c3:57:d4:16:c3:eb:
                    76:b4:e8:c7:4a:57:ab:e1:ff:ff:c7:e6:fa:93:64:
                    90:79:4d:e1:13:cc:02:44:a5:43:3b:7d:87:aa:b3:
                    10:62:81:c8:cf:af:f3:47:15:57:06:07:ff:c2:c1:
                    29:d6:c4:32:50:dd:86:12:da:14:d6:b0:56:94:9c:
                    9b:ea:2e:ee:01:90:95:07:41:06:a7:3f:e9:e7:68:
                    15:d6:82:22:39:b4:aa:c5:af:08:21:8d:b9:d7:38:
                    da:be:05:de:1a:74:2c:6a:41:dd:cb:eb:df:f7:9c:
                    24:77:49:df:96:fa:17:f8:71:dd:bd:41:10:90:f2:
                    2d:3f:f9:f2:c8:e9:95:9b:49:f3:92:78:bf:31:d2:
                    9f:94:9e:b2:77:53:0f:82:a9:ee:1c:73:d8:50:a5:
                    90:17:29:47:65:bd:10:7c:56:d2:f2:c2:84:44:3e:
                    16:f0:bd:2d:7d:9a:cc:9f:60:c1:f7:56:84:1b:e4:
                    5c:41:26:a6:d5:61:ed:d3:5b:6a:a8:78:a6:98:bf:
                    1e:ac:d5:1f:a6:56:1d:81:96:f0:d6:aa:2d:13:dc:
                    02:4b:df:f3:ed:c8:d5:f1:de:a7:f4:ff:86:06:6c:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A6:D3:86:47:E4:93:CE:9F:6C:33:13:7C:BE:91:C0:0E:28:7D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15d2dfdc-7af1-384a-ac19-7be520d6e8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:a1:a4:c1:4f:2e:da:94:eb:19:2e:a3:76:d9:a0:57:60:
         37:00:c0:a6:ec:73:eb:9e:89:eb:a7:79:81:89:b7:f5:4b:60:
         4e:7e:e4:a7:69:27:f5:8d:f1:f8:36:a2:1d:5b:f2:f2:d4:66:
         ef:6c:9b:02:bb:f6:df:28:41:17:04:cb:4c:53:fb:ac:76:de:
         43:d9:7e:f6:dc:06:80:07:2f:3f:50:67:fa:5a:4c:a8:a8:53:
         e3:3f:e2:b7:73:ad:d3:17:95:be:f2:cb:72:03:8f:c7:a8:c3:
         79:92:5e:d9:8c:6b:c4:ce:23:a2:cf:ab:5e:53:77:d1:25:17:
         d2:62:6a:68:47:91:12:a0:48:40:d2:24:ca:e1:8d:7a:cb:d8:
         16:f9:9c:e6:a6:fb:0b:e9:4b:c5:ee:39:10:da:3d:10:1c:7a:
         c6:87:8c:b0:2a:f2:03:db:40:46:7a:5e:63:63:9b:50:b6:6d:
         e0:c7:99:d8:32:be:e1:6c:88:60:dc:9d:5c:14:4e:c0:3f:64:
         74:af:3e:62:63:5b:32:9b:84:74:e8:49:ea:05:61:86:1f:0b:
         ca:b1:8d:a5:a6:34:89:50:b7:1c:58:e7:43:cc:2b:9f:34:87:
         bb:3c:34:e0:84:ff:f0:6c:14:16:81:df:31:a4:9e:c5:28:4b:
         56:c5:f7:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsibhCEwjRcwRcOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
YWI4ODk3YjEtZThmNS00ZTQ1LWIyODAtOWEyZTc5Yjk0MDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg70UyEu+wUSXHeyy9MhkMyVA5PD8yTDV9QW
w+t2tOjHSler4f//x+b6k2SQeU3hE8wCRKVDO32HqrMQYoHIz6/zRxVXBgf/wsEp
1sQyUN2GEtoU1rBWlJyb6i7uAZCVB0EGpz/p52gV1oIiObSqxa8IIY251zjavgXe
GnQsakHdy+vf95wkd0nflvoX+HHdvUEQkPItP/nyyOmVm0nzkni/MdKflJ6yd1MP
gqnuHHPYUKWQFylHZb0QfFbS8sKERD4W8L0tfZrMn2DB91aEG+RcQSam1WHt01tq
qHimmL8erNUfplYdgZbw1qotE9wCS9/z7cjV8d6n9P+GBmxEkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqm04ZH5JPOn2wzE3y+kcAOKH0MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTVkMmRmZGMtN2FmMS0z
ODRhLWFjMTktN2JlNTIwZDZlOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSccgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6YoaTBTy7alOsZLqN22aBXYDcAwKbsc+ueieuneYGJt/VLYE5+5Kdp
J/WN8fg2oh1b8vLUZu9smwK79t8oQRcEy0xT+6x23kPZfvbcBoAHLz9QZ/paTKio
U+M/4rdzrdMXlb7yy3IDj8eow3mSXtmMa8TOI6LPq15Td9ElF9JiamhHkRKgSEDS
JMrhjXrL2Bb5nOam+wvpS8XuORDaPRAcesaHjLAq8gPbQEZ6XmNjm1C2beDHmdgy
vuFsiGDcnVwUTsA/ZHSvPmJjWzKbhHToSeoFYYYfC8qxjaWmNIlQtxxY50PMK580
h7s8NOCE//BsFBaB3zGknsUoS1bF96I=
-----END CERTIFICATE-----
Generated at Sat May 4 14:45:07 2024 by rpki-client on console-fra.rpki-client.org