Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b6c1360-1848-3210-bb17-dcbc3801e36a.roa
File:                     3b6c1360-1848-3210-bb17-dcbc3801e36a.roa (raw, json)
Hash identifier:          JHymn33HhVfZtZ+zOkKFXMWUGQPujqj6oQLupBYaZkw=
Subject key identifier:   73:A9:71:65:00:36:85:A1:2F:D8:F1:E0:2C:C8:F2:08:14:D4:0E:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7CEBFFA85E5F9E1133A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b6c1360-1848-3210-bb17-dcbc3801e36a.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        76.156.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:ce:bf:fa:85:e5:f9:e1:13:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=76e43319-52db-4172-93ee-3564047d230a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4f:89:f4:38:eb:c5:3c:4c:a7:d9:d9:07:d7:
                    6e:f1:14:aa:af:0e:fa:e9:ea:fc:a5:c0:b9:ef:dc:
                    ad:9b:01:b2:b5:a0:69:c4:df:32:01:55:09:a6:cd:
                    e2:c7:63:78:bc:23:43:e0:73:b4:c7:da:71:33:d5:
                    f2:b6:85:7c:fe:77:a8:84:23:db:e5:a0:b7:a7:c9:
                    c7:c0:4c:c8:fb:e4:31:5d:23:9b:50:f1:9d:36:39:
                    23:d7:9f:f0:40:cf:c7:8b:b0:a3:35:3e:e3:99:09:
                    c6:d5:35:a7:2e:b6:d6:ed:74:a7:7a:24:fa:a0:0e:
                    90:b0:93:8e:0e:a2:8c:c0:9b:9c:ce:58:c8:18:6e:
                    c2:88:9b:cf:ed:22:84:e0:4a:68:da:c4:29:8f:33:
                    e2:53:3c:43:5f:ba:6f:92:ab:27:91:83:55:dd:48:
                    20:64:60:7e:48:ee:c6:7c:aa:10:d9:26:40:ec:07:
                    f5:c7:5c:e6:97:63:c1:7d:15:01:49:0e:f8:32:6d:
                    44:02:23:c6:25:15:ff:00:76:e9:22:9c:b8:3f:59:
                    66:64:fa:4a:cb:78:7e:e7:b1:d9:d0:e0:5d:8f:e7:
                    cc:ff:90:e3:53:76:30:e2:09:0b:5b:9c:9b:98:c4:
                    5f:11:e8:25:24:6a:6c:87:f4:98:b0:57:fb:f2:de:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A9:71:65:00:36:85:A1:2F:D8:F1:E0:2C:C8:F2:08:14:D4:0E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b6c1360-1848-3210-bb17-dcbc3801e36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.156.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:85:3c:81:24:6e:55:fc:18:84:78:fe:08:00:84:f7:67:3c:
         7f:30:39:42:17:55:5f:2c:43:f9:75:f5:37:65:2e:4f:bd:87:
         00:18:7d:06:c5:5e:d5:e9:fa:ec:b5:00:25:7a:98:6b:12:62:
         c7:b1:1a:d2:23:77:42:07:e7:d1:a4:bb:20:ec:40:b7:1b:ea:
         3c:75:58:ed:82:93:37:bf:49:07:60:d4:0e:07:79:c4:e6:59:
         54:b2:49:07:7b:67:93:2e:70:1f:1d:1e:ee:f4:10:7c:e3:61:
         5e:e2:54:e0:b1:5c:8a:b7:e2:6e:f2:50:a3:38:72:16:70:1c:
         d4:32:ec:80:0f:90:a3:cd:0a:26:b8:8c:f8:e1:10:d5:ec:0c:
         31:76:60:3e:f3:0f:fc:79:f3:9a:3b:fb:c7:ea:10:a3:d4:d4:
         f6:5f:ab:c1:9b:7f:ae:7a:50:e7:eb:3f:e1:a8:0b:be:46:6b:
         8b:4f:80:2c:a1:ab:fb:7e:d0:d8:a2:3f:2b:fa:d2:06:f9:b5:
         cf:ce:fa:cc:f6:2f:0b:08:9f:a5:cc:d9:84:1d:5e:b9:3b:6f:
         95:47:ae:33:7c:20:62:c2:f2:48:82:d0:ed:03:cc:86:0f:d5:
         41:f1:93:55:2e:03:4e:3a:64:5c:73:0c:e1:e7:e8:24:5f:7c:
         44:cb:9c:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+986/+oXl+eETOkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NzZlNDMzMTktNTJkYi00MTcyLTkzZWUtMzU2NDA0N2QyMzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E+J9DjrxTxMp9nZB9du8RSqrw766er8pcC5
79ytmwGytaBpxN8yAVUJps3ix2N4vCND4HO0x9pxM9XytoV8/neohCPb5aC3p8nH
wEzI++QxXSObUPGdNjkj15/wQM/Hi7CjNT7jmQnG1TWnLrbW7XSneiT6oA6QsJOO
DqKMwJuczljIGG7CiJvP7SKE4Epo2sQpjzPiUzxDX7pvkqsnkYNV3UggZGB+SO7G
fKoQ2SZA7Af1x1zml2PBfRUBSQ74Mm1EAiPGJRX/AHbpIpy4P1lmZPpKy3h+57HZ
0OBdj+fM/5DjU3Yw4gkLW5ybmMRfEeglJGpsh/SYsFf78t7iuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOpcWUANoWhL9jx4CzI8ggU1A53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2I2YzEzNjAtMTg0OC0z
MjEwLWJiMTctZGNiYzM4MDFlMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJx2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWFPIEkblX8GIR4/ggAhPdnPH8wOUIXVV8sQ/l19TdlLk+9hwAYfQbF
XtXp+uy1ACV6mGsSYsexGtIjd0IH59GkuyDsQLcb6jx1WO2Ckze/SQdg1A4HecTm
WVSySQd7Z5MucB8dHu70EHzjYV7iVOCxXIq34m7yUKM4chZwHNQy7IAPkKPNCia4
jPjhENXsDDF2YD7zD/x585o7+8fqEKPU1PZfq8Gbf656UOfrP+GoC75Ga4tPgCyh
q/t+0NiiPyv60gb5tc/O+sz2LwsIn6XM2YQdXrk7b5VHrjN8IGLC8kiC0O0DzIYP
1UHxk1UuA046ZFxzDOHn6CRffETLnPY=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:06:57 2024 by rpki-client on console-fra.rpki-client.org