Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bfb8b90-ea85-3cbf-923b-ed6a3eb4f229.roa
File:                     4bfb8b90-ea85-3cbf-923b-ed6a3eb4f229.roa (raw, json)
Hash identifier:          ncGKYFIoXwx3eK6DwT8e+YcmQxdieW+bod77tBXkmEE=
Subject key identifier:   E4:48:2F:EA:92:12:E2:5F:1B:56:80:5A:D3:6A:7F:D5:D9:B9:B1:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C63E516F397A09ED2A4280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bfb8b90-ea85-3cbf-923b-ed6a3eb4f229.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        76.115.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:3e:51:6f:39:7a:09:ed:2a:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=893112d4-1420-4b95-bb84-3fb89ede7979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:b8:ea:a6:64:3d:7b:bf:1d:63:dc:5e:54:
                    75:af:fb:06:0f:de:68:0a:2c:a9:8f:19:a1:a7:5d:
                    9a:b5:a8:42:84:aa:72:5e:37:33:22:65:d1:6c:be:
                    ec:d2:51:d0:6d:61:3e:9d:81:2c:d2:3a:0c:f5:eb:
                    3d:95:f3:c3:6c:3d:60:1b:f5:ae:9d:4e:be:5a:38:
                    66:8b:a1:9b:ac:90:6b:8b:d8:06:3b:7f:f4:8f:76:
                    79:c7:64:32:aa:e7:bb:c5:2f:85:25:fb:81:de:b8:
                    b7:44:e7:96:e9:83:ee:34:f8:59:d6:bf:db:61:4d:
                    56:e8:60:8c:ac:f6:68:48:aa:a5:88:c5:17:6f:68:
                    ba:26:21:ba:49:d1:d1:00:e0:4d:b7:a4:dc:fe:7e:
                    72:c5:ea:6b:ad:17:ad:da:8f:63:62:b2:1a:9b:7b:
                    08:33:08:46:1d:62:e6:48:14:e3:13:6a:f1:48:d5:
                    57:69:6f:dd:4b:66:a1:3c:f1:14:77:cb:40:34:03:
                    02:b5:3e:53:77:54:74:82:8c:14:5b:a9:58:5c:8e:
                    6b:cc:07:3b:02:20:a7:b0:c0:96:aa:14:c7:f3:76:
                    7e:14:bb:65:d6:16:b1:ff:a7:4e:0b:12:fe:a4:8f:
                    09:77:1a:46:81:a4:2f:a4:d8:84:27:13:a0:40:1e:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:48:2F:EA:92:12:E2:5F:1B:56:80:5A:D3:6A:7F:D5:D9:B9:B1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bfb8b90-ea85-3cbf-923b-ed6a3eb4f229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:16:46:7d:c6:f7:fa:ce:b8:05:17:62:b8:0a:b5:58:9e:b0:
         75:ee:5c:73:96:49:68:f8:ab:4e:18:c2:a4:5d:5f:78:ce:77:
         c6:c8:42:fd:65:6f:88:ad:33:43:f3:09:c1:c5:23:7b:57:f4:
         57:db:5c:92:4b:11:34:fd:a2:2a:e4:a9:83:88:09:b3:cf:34:
         8c:ba:9f:be:98:c8:da:91:76:46:bb:70:06:77:33:08:69:77:
         a7:e6:72:94:23:d0:c6:85:d1:b7:e8:ef:97:ed:9d:2c:1f:4a:
         39:61:a0:a8:05:39:d1:0b:7a:7e:79:d5:83:2e:44:26:7d:61:
         a9:6a:8b:ed:50:20:81:80:94:dd:e8:6e:4e:65:ce:ed:4e:76:
         5f:da:e4:56:db:d2:35:de:1d:45:fe:3f:06:79:7a:7d:db:62:
         d8:a8:f7:ff:07:be:64:a4:a1:0d:32:ed:f7:ce:08:b0:a1:99:
         6a:42:88:24:22:c0:27:04:67:dd:33:58:94:a6:58:02:5d:b6:
         2b:b2:94:e4:c7:76:7a:45:c0:64:f0:ee:1e:7c:cc:9b:91:a6:
         9e:78:80:b6:01:fb:17:dd:f7:56:58:5b:bb:ab:0f:b5:7c:54:
         9a:44:24:94:df:04:04:22:27:f3:b1:41:50:55:3e:68:20:82:
         98:b0:ed:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xj5Rbzl6Ce0qQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ODkzMTEyZDQtMTQyMC00Yjk1LWJiODQtM2ZiODllZGU3OTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioS46qZkPXu/HWPcXlR1r/sGD95oCiypjxmh
p12atahChKpyXjczImXRbL7s0lHQbWE+nYEs0joM9es9lfPDbD1gG/WunU6+Wjhm
i6GbrJBri9gGO3/0j3Z5x2Qyque7xS+FJfuB3ri3ROeW6YPuNPhZ1r/bYU1W6GCM
rPZoSKqliMUXb2i6JiG6SdHRAOBNt6Tc/n5yxeprrRet2o9jYrIam3sIMwhGHWLm
SBTjE2rxSNVXaW/dS2ahPPEUd8tANAMCtT5Td1R0gowUW6lYXI5rzAc7AiCnsMCW
qhTH83Z+FLtl1hax/6dOCxL+pI8JdxpGgaQvpNiEJxOgQB5ykQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFORIL+qSEuJfG1aAWtNqf9XZubHzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGJmYjhiOTAtZWE4NS0z
Y2JmLTkyM2ItZWQ2YTNlYjRmMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHPUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsWRn3G9/rOuAUXYrgKtViesHXuXHOWSWj4q04YwqRdX3jOd8bIQv1l
b4itM0PzCcHFI3tX9FfbXJJLETT9oirkqYOICbPPNIy6n76YyNqRdka7cAZ3Mwhp
d6fmcpQj0MaF0bfo75ftnSwfSjlhoKgFOdELen551YMuRCZ9Yalqi+1QIIGAlN3o
bk5lzu1Odl/a5Fbb0jXeHUX+PwZ5en3bYtio9/8HvmSkoQ0y7ffOCLChmWpCiCQi
wCcEZ90zWJSmWAJdtiuylOTHdnpFwGTw7h58zJuRpp54gLYB+xfd91ZYW7urD7V8
VJpEJJTfBAQiJ/OxQVBVPmgggpiw7f8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:44 2024 by rpki-client on console-ams.rpki-client.org