Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab8af84-9360-38dc-b395-d87a2004c6b7.roa
File:                     4ab8af84-9360-38dc-b395-d87a2004c6b7.roa (raw, json)
Hash identifier:          9JpiHrCw1mA2l3umAykQK/gvpGKYCscLjnD3DTGdnRs=
Subject key identifier:   CA:D5:E4:BA:0C:2B:46:D1:48:CE:88:E0:43:C4:34:A6:9A:78:D6:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5928AD8AFF336C52D6500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab8af84-9360-38dc-b395-d87a2004c6b7.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.43.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:92:8a:d8:af:f3:36:c5:2d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=7a718e25-1c3e-4d7e-92a3-3ab5daa0f9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:1b:a4:16:e2:99:21:33:e1:90:d5:ed:70:
                    bb:a4:5e:8d:f3:19:dc:c5:83:39:9e:a2:f2:21:0f:
                    3f:5a:a7:1b:33:52:bd:81:6d:30:c0:3a:62:17:04:
                    3e:69:ce:ca:0a:ca:98:3c:88:d7:5c:6a:82:bc:91:
                    c2:04:53:1f:46:81:0b:49:8f:c0:86:ec:80:08:42:
                    6a:a8:a0:41:b8:c9:f1:af:de:a2:ee:16:2f:95:dd:
                    00:82:ce:a0:a8:a9:b8:c6:d6:53:3f:26:b5:76:25:
                    50:8b:65:73:b3:6a:d9:59:d7:e9:1e:0c:f5:6a:d9:
                    74:b3:e2:f6:fb:24:63:3e:c8:9f:aa:6b:78:fd:de:
                    8c:40:a4:5e:8a:da:f7:ff:1b:11:62:2e:7e:f8:ae:
                    d0:6a:f8:25:0f:f5:9c:ad:ba:23:2d:98:e1:0e:65:
                    56:16:78:68:01:86:ff:ee:34:8b:9f:f2:ea:c0:8d:
                    9c:c6:4b:5a:0f:3d:ec:35:62:30:a0:09:15:9d:81:
                    84:da:b0:d1:95:c3:d9:65:94:af:ad:07:19:e8:22:
                    bc:a5:78:63:c7:4b:4b:41:6b:ed:8f:f9:98:4d:f7:
                    86:b4:70:c9:a2:e3:09:76:39:74:77:60:92:22:7b:
                    00:01:a2:8a:e0:c4:85:bb:57:20:11:d5:be:4a:f1:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D5:E4:BA:0C:2B:46:D1:48:CE:88:E0:43:C4:34:A6:9A:78:D6:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab8af84-9360-38dc-b395-d87a2004c6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.43.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:0a:b5:fe:29:6b:27:d9:f5:b0:85:09:8d:d5:f0:7a:bb:41:
         01:03:6a:38:4c:5d:18:a8:ae:63:b9:7d:d4:73:af:15:20:20:
         a6:31:86:50:78:e0:91:97:60:c5:cc:0e:16:af:21:9c:b8:eb:
         f7:39:66:88:91:5e:3e:db:29:c2:9f:18:b4:f3:7c:83:54:db:
         21:68:39:1d:39:35:1b:c0:53:1d:fc:84:eb:f9:48:07:0d:11:
         b6:f6:b5:f0:b0:74:78:19:4d:6a:4f:50:05:10:c3:4d:ec:ea:
         2d:e7:5b:88:ff:06:c1:6a:ac:f8:c9:85:e3:78:fe:13:f1:c9:
         db:e3:2d:68:ad:e1:98:5a:f0:93:50:71:ed:fb:52:d3:4f:70:
         a5:6d:77:26:15:e1:b7:c2:45:c6:96:b8:e0:94:93:9e:8d:c0:
         94:fc:e3:4c:74:11:f5:71:de:e7:ec:6c:55:a4:cb:0e:49:d6:
         f4:f6:2e:fd:3c:b1:1b:de:a3:cb:98:d5:bc:f2:29:40:6f:80:
         82:26:b4:c7:fb:f8:f3:4b:8c:a0:a6:0a:42:98:9c:3a:ca:3d:
         6b:18:81:23:71:5d:52:e3:c8:6d:a2:ed:fc:c4:6d:88:08:01:
         d8:45:85:1d:38:57:96:70:a8:35:aa:df:cf:f6:c2:be:db:ed:
         37:fe:57:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5ZKK2K/zNsUtZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
N2E3MThlMjUtMWMzZS00ZDdlLTkyYTMtM2FiNWRhYTBmOWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oYbpBbimSEz4ZDV7XC7pF6N8xncxYM5nqLy
IQ8/WqcbM1K9gW0wwDpiFwQ+ac7KCsqYPIjXXGqCvJHCBFMfRoELSY/AhuyACEJq
qKBBuMnxr96i7hYvld0Ags6gqKm4xtZTPya1diVQi2Vzs2rZWdfpHgz1atl0s+L2
+yRjPsifqmt4/d6MQKReitr3/xsRYi5++K7QavglD/WcrbojLZjhDmVWFnhoAYb/
7jSLn/LqwI2cxktaDz3sNWIwoAkVnYGE2rDRlcPZZZSvrQcZ6CK8pXhjx0tLQWvt
j/mYTfeGtHDJouMJdjl0d2CSInsAAaKK4MSFu1cgEdW+SvH3mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrV5LoMK0bRSM6I4EPENKaaeNa9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFiOGFmODQtOTM2MC0z
OGRjLWIzOTUtZDg3YTIwMDRjNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASSudMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM8Ktf4payfZ9bCFCY3V8Hq7QQEDajhMXRiormO5fdRzrxUgIKYxhlB4
4JGXYMXMDhavIZy46/c5ZoiRXj7bKcKfGLTzfINU2yFoOR05NRvAUx38hOv5SAcN
Ebb2tfCwdHgZTWpPUAUQw03s6i3nW4j/BsFqrPjJheN4/hPxydvjLWit4Zha8JNQ
ce37UtNPcKVtdyYV4bfCRcaWuOCUk56NwJT840x0EfVx3ufsbFWkyw5J1vT2Lv08
sRveo8uY1bzyKUBvgIImtMf7+PNLjKCmCkKYnDrKPWsYgSNxXVLjyG2i7fzEbYgI
AdhFhR04V5ZwqDWq38/2wr7b7Tf+V/Q=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:09:34 2024 by rpki-client on console-fra.rpki-client.org