Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f939333-0489-3826-b1e9-8fbab51b425d.roa
File:                     2f939333-0489-3826-b1e9-8fbab51b425d.roa (raw, json)
Hash identifier:          cscophXQltCFYuctvoE36Q2wQLV/Nr6r8R+hsRvfNf8=
Subject key identifier:   08:E3:B7:79:B1:33:65:30:98:9A:8D:99:32:6E:B9:4A:FB:DF:50:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5F80BEFF773D0C3281E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f939333-0489-3826-b1e9-8fbab51b425d.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.7.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:f8:0b:ef:f7:73:d0:c3:28:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=33bfb89e-faf5-49c7-806f-62c11c2a61f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:88:33:28:dd:33:65:2f:3d:13:5b:54:d4:
                    24:93:c9:6a:30:29:7d:cc:ce:6b:8e:e9:c1:c8:68:
                    a6:4a:3a:c4:49:c6:14:42:e5:58:15:b6:8d:8b:94:
                    c5:09:96:17:3b:cb:4a:35:fc:fb:f3:77:49:1f:9f:
                    f2:0e:ac:6d:e0:0e:41:40:c4:27:c8:79:4d:98:da:
                    26:68:96:eb:2e:28:40:b9:0f:a8:34:72:66:85:65:
                    00:17:31:2f:ba:c2:a4:6d:ea:6a:62:49:83:09:ed:
                    ca:71:5a:b6:ec:3c:58:6f:0e:7f:2d:a0:db:2b:b4:
                    a7:e2:f8:d3:27:8b:5e:bb:d0:29:3c:ff:fb:ab:00:
                    5f:a9:9c:f0:87:70:d2:de:60:b3:03:59:74:c7:87:
                    fe:75:56:5d:d6:29:52:97:c0:a9:5f:21:7b:bb:e5:
                    f7:54:09:a0:54:22:51:d9:27:8d:66:99:c5:bb:fe:
                    86:0c:37:33:fb:a6:83:a4:95:98:a6:f3:2f:1a:33:
                    4c:55:db:ad:89:16:83:19:3d:66:e1:e3:01:11:15:
                    11:95:d3:66:e5:d0:89:e7:cd:b0:c3:45:fa:80:52:
                    39:07:86:d5:51:e8:2e:34:34:b2:d4:9e:de:40:72:
                    8b:76:b0:f1:fd:be:f5:9d:d4:a3:0a:84:4b:af:3f:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E3:B7:79:B1:33:65:30:98:9A:8D:99:32:6E:B9:4A:FB:DF:50:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f939333-0489-3826-b1e9-8fbab51b425d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.7.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d5:c2:25:f0:0a:53:27:63:75:f7:91:1c:c2:ee:3f:2c:aa:
         55:20:e5:67:aa:16:8f:4b:37:2a:9f:7e:00:a8:c4:b5:d0:53:
         a1:37:66:22:e2:9d:c7:50:7f:21:75:6b:42:a9:a3:0e:4b:82:
         01:d3:c0:c5:74:7e:5e:04:90:88:87:5f:66:8e:c4:3c:14:62:
         78:1d:bc:58:c2:cf:7a:79:5e:be:59:cd:2b:cf:04:9e:e8:ad:
         5e:52:cf:87:ca:a9:1a:a7:ad:b1:9d:3b:ed:f7:b0:01:40:9c:
         22:1d:0f:84:96:4f:d4:44:7a:2c:08:25:a9:c7:ee:64:e2:0e:
         d8:9b:e0:c1:66:45:6d:7d:10:90:ae:9f:0d:7d:a3:ae:2e:c6:
         cf:41:a8:d2:6b:ce:2e:9a:87:2d:80:0e:4e:f7:f8:eb:14:32:
         0b:cf:de:30:f6:0b:be:a6:48:49:1a:e9:60:de:e5:e7:b3:dd:
         94:e7:e1:c4:75:65:fb:3c:d3:f3:94:de:e8:f2:f7:aa:5b:fd:
         3a:04:70:6b:cb:30:a9:d2:f8:53:b9:1b:05:8e:f2:bf:f3:ac:
         79:10:62:43:b6:22:22:ce:ec:bd:8b:f3:e7:f9:7d:7e:2d:3b:
         63:fb:33:49:31:bb:14:cc:b0:d0:dc:f7:a5:2a:55:cd:ae:35:
         a3:aa:43:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5fgL7/dz0MMoHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MzNiZmI4OWUtZmFmNS00OWM3LTgwNmYtNjJjMTFjMmE2MWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSuIMyjdM2UvPRNbVNQkk8lqMCl9zM5rjunB
yGimSjrEScYUQuVYFbaNi5TFCZYXO8tKNfz783dJH5/yDqxt4A5BQMQnyHlNmNom
aJbrLihAuQ+oNHJmhWUAFzEvusKkbepqYkmDCe3KcVq27DxYbw5/LaDbK7Sn4vjT
J4teu9ApPP/7qwBfqZzwh3DS3mCzA1l0x4f+dVZd1ilSl8CpXyF7u+X3VAmgVCJR
2SeNZpnFu/6GDDcz+6aDpJWYpvMvGjNMVdutiRaDGT1m4eMBERURldNm5dCJ582w
w0X6gFI5B4bVUeguNDSy1J7eQHKLdrDx/b71ndSjCoRLrz8cCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAjjt3mxM2UwmJqNmTJuuUr731CnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmY5MzkzMzMtMDQ4OS0z
ODI2LWIxZTktOGZiYWI1MWI0MjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQcIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHVwiXwClMnY3X3kRzC7j8sqlUg5WeqFo9LNyqffgCoxLXQU6E3ZiLi
ncdQfyF1a0Kpow5LggHTwMV0fl4EkIiHX2aOxDwUYngdvFjCz3p5Xr5ZzSvPBJ7o
rV5Sz4fKqRqnrbGdO+33sAFAnCIdD4SWT9REeiwIJanH7mTiDtib4MFmRW19EJCu
nw19o64uxs9BqNJrzi6ahy2ADk73+OsUMgvP3jD2C76mSEka6WDe5eez3ZTn4cR1
Zfs80/OU3ujy96pb/ToEcGvLMKnS+FO5GwWO8r/zrHkQYkO2IiLO7L2L8+f5fX4t
O2P7M0kxuxTMsNDc96UqVc2uNaOqQ88=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:04:53 2024 by rpki-client on console-fra.rpki-client.org