Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45e12945-22b0-318f-9885-fb14a7c86601.roa
File:                     45e12945-22b0-318f-9885-fb14a7c86601.roa (raw, json)
Hash identifier:          /VIRz+M8v+mqN/GmYl7Qb/IXUG85f5v49nsbHg67ayQ=
Subject key identifier:   D9:BC:2C:39:F1:5A:25:4B:72:D4:8B:1C:E9:50:32:EF:31:28:2F:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC892359873515FFAB296180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45e12945-22b0-318f-9885-fb14a7c86601.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.199.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:23:59:87:35:15:ff:ab:29:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=dfd9dc5e-669a-407a-824d-bf0fa3d9d6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:ee:cd:ec:77:7d:7e:e4:61:1d:ea:0c:8a:
                    26:57:f4:cc:a8:34:a3:31:8a:9d:cd:b4:1a:fd:cc:
                    27:72:03:6d:62:db:24:c5:f0:9a:93:c9:c9:c7:8c:
                    b0:1d:c1:3b:10:28:d4:fc:94:d8:93:04:74:9a:3a:
                    33:82:6a:22:46:34:9e:fb:03:bd:9d:4f:c5:b1:41:
                    1d:18:24:0b:bc:db:e6:43:1b:cc:1c:01:6d:96:5b:
                    53:30:5c:71:9f:78:98:46:07:79:f5:ec:43:f3:8d:
                    18:f6:e9:b4:96:3a:cf:2b:9f:e0:cd:77:6e:29:8b:
                    65:f6:7b:30:e2:1b:f1:ba:2a:78:fb:46:7b:fa:4b:
                    3c:c7:77:7a:f0:2a:11:08:05:1c:0c:ed:29:f6:cd:
                    32:30:d8:cc:cb:c9:6d:01:3b:e6:04:84:09:17:c6:
                    df:94:19:a7:0d:c2:ac:89:c6:2b:4e:2d:69:ac:6d:
                    70:5a:f7:c2:a5:25:6f:37:46:10:43:6d:1c:96:09:
                    b0:90:b8:cb:db:76:ec:a8:1e:fa:60:ad:0b:ef:6c:
                    02:87:73:7e:6f:fb:c2:a3:d5:82:91:40:11:b1:f6:
                    56:be:2f:8f:7e:60:2b:20:58:0e:70:2f:73:91:0f:
                    dd:46:cb:60:7d:03:35:22:67:2c:f9:cc:37:14:6c:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BC:2C:39:F1:5A:25:4B:72:D4:8B:1C:E9:50:32:EF:31:28:2F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45e12945-22b0-318f-9885-fb14a7c86601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.199.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:56:65:90:ba:e2:41:3d:a7:cd:c1:98:4f:b1:64:03:ca:
         98:13:ef:d4:f9:7d:0d:87:a7:41:65:4a:ab:b8:c1:17:c6:50:
         9e:2d:76:2d:2e:a1:b4:82:d5:64:ef:02:33:db:5a:9a:ba:05:
         65:d1:d9:41:4c:11:60:65:48:80:93:a2:e5:7b:c8:c0:f5:dd:
         3d:a7:a9:68:f3:ce:1b:c0:dc:69:f2:7a:ea:3f:7b:c8:22:31:
         c1:b0:5c:b8:92:4f:e0:c2:58:87:b2:eb:1d:5a:f0:96:95:87:
         f9:7c:83:19:6d:a1:94:d8:10:6a:6c:44:b0:ab:f6:ff:81:f1:
         d3:cd:b7:d0:24:e3:f4:af:64:22:69:d9:a2:2e:2c:49:b7:82:
         dd:be:68:84:44:7c:61:6a:93:90:91:04:12:39:04:23:5e:2a:
         16:67:87:78:b5:b8:28:0f:9b:50:67:45:8a:b2:80:14:3c:26:
         f7:db:9b:57:91:b4:ea:66:78:fc:ed:d7:a2:01:77:a1:24:35:
         51:0a:4f:60:52:5d:7b:11:32:1d:9b:24:ca:fd:4e:54:46:d8:
         bc:de:52:ac:57:44:a7:a5:61:23:c9:1b:62:94:19:1d:c3:b2:
         e6:93:0a:ad:02:66:03:95:09:59:ab:b5:75:85:bc:8b:87:08:
         8b:98:ad:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiSNZhzUV/6spYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
ZGZkOWRjNWUtNjY5YS00MDdhLTgyNGQtYmYwZmEzZDlkNmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD/uzex3fX7kYR3qDIomV/TMqDSjMYqdzbQa
/cwncgNtYtskxfCak8nJx4ywHcE7ECjU/JTYkwR0mjozgmoiRjSe+wO9nU/FsUEd
GCQLvNvmQxvMHAFtlltTMFxxn3iYRgd59exD840Y9um0ljrPK5/gzXduKYtl9nsw
4hvxuip4+0Z7+ks8x3d68CoRCAUcDO0p9s0yMNjMy8ltATvmBIQJF8bflBmnDcKs
icYrTi1prG1wWvfCpSVvN0YQQ20clgmwkLjL23bsqB76YK0L72wCh3N+b/vCo9WC
kUARsfZWvi+PfmArIFgOcC9zkQ/dRstgfQM1Imcs+cw3FGydnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNm8LDnxWiVLctSLHOlQMu8xKC/uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDVlMTI5NDUtMjJiMC0z
MThmLTk4ODUtZmIxNGE3Yzg2NjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDScdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6WVmWQuuJBPafNwZhPsWQDypgT79T5fQ2Hp0FlSqu4wRfGUJ4tdi0u
obSC1WTvAjPbWpq6BWXR2UFMEWBlSICTouV7yMD13T2nqWjzzhvA3Gnyeuo/e8gi
McGwXLiST+DCWIey6x1a8JaVh/l8gxltoZTYEGpsRLCr9v+B8dPNt9Ak4/SvZCJp
2aIuLEm3gt2+aIREfGFqk5CRBBI5BCNeKhZnh3i1uCgPm1BnRYqygBQ8Jvfbm1eR
tOpmePzt16IBd6EkNVEKT2BSXXsRMh2bJMr9TlRG2LzeUqxXRKelYSPJG2KUGR3D
suaTCq0CZgOVCVmrtXWFvIuHCIuYrfI=
-----END CERTIFICATE-----
Generated at Sun May 5 02:16:15 2024 by rpki-client on console-ams.rpki-client.org