Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/241f8ad3-d8be-3fd1-8649-8397f7ae51da.roa
File:                     241f8ad3-d8be-3fd1-8649-8397f7ae51da.roa (raw, json)
Hash identifier:          71kKjO+E79eYUIwBbcwDeCKZRLFv80wUjxeqpL4HrTc=
Subject key identifier:   22:37:E6:42:0B:2B:D9:88:56:4C:9D:65:89:F2:B2:A9:70:70:A2:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5A0B9539AF526EA7D4E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/241f8ad3-d8be-3fd1-8649-8397f7ae51da.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        76.145.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:a0:b9:53:9a:f5:26:ea:7d:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=a85009df-38b1-4d37-83bc-e00389b5423b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:fa:01:74:6a:72:38:41:e3:1b:85:3b:ea:
                    ac:7c:24:da:d5:94:f8:8e:ec:3b:a3:80:fb:dd:61:
                    c8:f3:74:a8:66:33:45:9c:f3:28:e5:3f:de:9c:50:
                    f3:92:bc:fa:85:60:6f:6a:c5:dc:2e:b8:0d:26:d9:
                    cd:65:8f:8d:20:9e:cd:db:ef:3c:cb:d3:75:f0:57:
                    6b:d4:69:22:9f:d4:aa:c6:91:ed:a8:ab:96:82:e5:
                    76:5c:c8:b1:f2:83:f2:db:7d:5e:97:18:aa:0f:69:
                    d3:99:5f:e4:3c:46:e9:a0:04:ec:4e:2c:bd:b9:3c:
                    54:76:18:d2:de:b9:dd:4a:55:3d:73:f5:0b:14:3d:
                    22:a5:f2:c5:2e:bc:cd:a2:95:a8:87:29:d7:1e:07:
                    35:6d:e8:e9:dd:5f:7c:1d:92:07:49:ba:fc:32:bb:
                    0f:6f:87:97:ed:56:c4:49:27:37:12:bc:e2:6c:1d:
                    af:c6:7a:f6:6b:d4:4a:8e:5e:85:f9:e3:c1:90:1a:
                    24:b7:fb:dc:9e:d3:fc:86:cd:74:0c:db:02:27:9c:
                    42:8b:aa:1c:45:a8:56:32:26:18:68:29:49:08:af:
                    4c:61:94:68:db:3a:cb:70:f5:41:3a:42:d1:1b:d3:
                    07:c9:e8:c8:65:10:fa:f7:5e:40:08:d4:4a:4c:79:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:E6:42:0B:2B:D9:88:56:4C:9D:65:89:F2:B2:A9:70:70:A2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/241f8ad3-d8be-3fd1-8649-8397f7ae51da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:14:27:95:3a:e3:a5:5f:d9:d2:d7:12:7a:5e:05:14:11:e6:
         30:40:77:80:5c:d5:1d:b2:21:c9:f8:27:e5:0d:b8:82:45:33:
         d6:c0:cf:43:4b:9d:58:db:d4:cd:c4:b8:dd:c0:cb:f7:c8:49:
         bb:f4:d1:33:e8:ff:7a:b8:ee:1f:a8:93:32:b8:8c:cb:60:3b:
         29:de:06:cf:1b:71:e0:78:64:4d:cf:e3:40:60:df:b1:46:49:
         1d:3c:5c:1b:9e:dc:95:8a:e6:1a:91:a0:cb:72:ef:a3:f9:aa:
         5c:50:e5:bc:1b:e7:96:2c:d4:6b:3e:aa:bc:19:40:c3:8e:50:
         1b:21:9a:93:9f:b8:db:d1:6b:bf:ef:34:71:bb:5f:45:47:a6:
         68:b3:72:6e:be:c8:69:79:0f:fa:16:d3:31:27:3f:92:30:5c:
         f0:4e:ec:dc:81:b2:99:2f:b9:40:55:f9:70:7e:ae:cf:8f:0c:
         1c:98:14:e8:26:25:7c:0b:82:ef:07:3d:a1:90:58:42:60:0f:
         8b:d4:44:cb:ea:cc:cd:8d:88:c1:0e:85:a0:f7:03:2c:3b:79:
         30:9c:19:a4:86:f4:b6:df:69:91:44:7d:27:9c:ff:0a:19:e1:
         e6:aa:fc:d8:ea:71:31:64:6f:16:be:8e:ba:31:af:66:1c:36:
         ab:07:7e:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5aC5U5r1Jup9ToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
YTg1MDA5ZGYtMzhiMS00ZDM3LTgzYmMtZTAwMzg5YjU0MjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBH6AXRqcjhB4xuFO+qsfCTa1ZT4juw7o4D7
3WHI83SoZjNFnPMo5T/enFDzkrz6hWBvasXcLrgNJtnNZY+NIJ7N2+88y9N18Fdr
1Gkin9SqxpHtqKuWguV2XMix8oPy231elxiqD2nTmV/kPEbpoATsTiy9uTxUdhjS
3rndSlU9c/ULFD0ipfLFLrzNopWohynXHgc1bejp3V98HZIHSbr8MrsPb4eX7VbE
SSc3ErzibB2vxnr2a9RKjl6F+ePBkBokt/vcntP8hs10DNsCJ5xCi6ocRahWMiYY
aClJCK9MYZRo2zrLcPVBOkLRG9MHyejIZRD6915ACNRKTHmBIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCI35kILK9mIVkydZYnysqlwcKLwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQxZjhhZDMtZDhiZS0z
ZmQxLTg2NDktODM5N2Y3YWU1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJEWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN4UJ5U646Vf2dLXEnpeBRQR5jBAd4Bc1R2yIcn4J+UNuIJFM9bAz0NL
nVjb1M3EuN3Ay/fISbv00TPo/3q47h+okzK4jMtgOyneBs8bceB4ZE3P40Bg37FG
SR08XBue3JWK5hqRoMty76P5qlxQ5bwb55Ys1Gs+qrwZQMOOUBshmpOfuNvRa7/v
NHG7X0VHpmizcm6+yGl5D/oW0zEnP5IwXPBO7NyBspkvuUBV+XB+rs+PDByYFOgm
JXwLgu8HPaGQWEJgD4vURMvqzM2NiMEOhaD3Ayw7eTCcGaSG9LbfaZFEfSec/woZ
4eaq/NjqcTFkbxa+jroxr2YcNqsHfog=
-----END CERTIFICATE-----
Generated at Sun Dec 22 12:48:54 2024 by rpki-client on console-ams.rpki-client.org