Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52db3aaf-e935-3656-a51e-2b57a56c30d7.roa
File:                     52db3aaf-e935-3656-a51e-2b57a56c30d7.roa (raw, json)
Hash identifier:          L4IipoIgOFDsb5slc8Lkk/BrZ3JMTc4kw8vXJM0EAsM=
Subject key identifier:   49:06:28:6C:FC:9A:D5:63:E2:C5:CA:13:39:A2:63:E4:34:EA:7A:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC895B924D615DEA0C328240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52db3aaf-e935-3656-a51e-2b57a56c30d7.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        73.188.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:5b:92:4d:61:5d:ea:0c:32:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=8523df0c-83c4-49e6-8cd0-e9afc57a795b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:43:d1:31:26:fb:e9:7e:8e:c6:25:d4:47:
                    10:ce:a2:91:4e:0f:bf:c5:93:bb:26:31:d8:79:00:
                    5e:4d:f9:4f:25:8e:9b:18:92:c5:36:5a:f0:5e:f0:
                    90:50:7c:d7:54:86:00:90:44:d5:14:0c:3b:d8:4f:
                    67:d7:70:d0:4b:b1:6e:c8:f4:74:ea:b4:ea:c7:a3:
                    06:33:8c:43:3f:48:d4:40:bf:17:4e:d3:6c:fa:49:
                    8f:0e:3b:45:6b:e9:d9:b9:53:cf:99:f2:5a:75:9d:
                    44:cf:02:bd:7e:c7:ab:b5:c7:d7:5a:0e:76:8f:25:
                    b3:a0:85:0c:74:1d:bf:9b:7c:f6:89:43:58:76:0d:
                    d4:d2:25:b0:83:5d:6b:1d:8a:05:22:eb:97:91:5b:
                    81:f7:59:c6:98:af:2d:b3:ba:84:30:dd:0a:79:1c:
                    1f:32:c0:c1:53:3e:12:96:38:fe:f8:93:49:d5:ba:
                    98:a0:a2:91:46:e2:af:51:aa:bf:3c:0d:ee:0e:07:
                    71:5b:eb:20:98:33:36:77:60:a8:71:b5:e5:da:a7:
                    f9:a8:40:4d:74:3d:29:3d:29:22:45:a4:31:e5:72:
                    50:33:49:d9:b3:1b:a0:4f:c2:a4:fc:f3:0a:95:94:
                    9c:f9:2c:63:3c:dd:24:f9:e9:0c:c1:e9:a6:f5:a3:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:06:28:6C:FC:9A:D5:63:E2:C5:CA:13:39:A2:63:E4:34:EA:7A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52db3aaf-e935-3656-a51e-2b57a56c30d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.188.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:aa:ae:bb:58:ca:c2:da:7c:13:7e:e3:14:fe:20:55:3e:80:
         42:8a:2d:8a:05:e3:5a:4a:48:f2:e6:b2:08:b3:3a:db:21:42:
         aa:71:60:ec:41:79:fb:1c:3c:f0:2e:9b:c1:fb:87:97:4e:ea:
         b2:a2:7e:89:da:fd:db:0e:37:71:23:8d:d8:1a:3d:aa:37:6c:
         f5:ef:77:d1:2c:84:93:0e:89:35:f5:40:3d:28:a7:47:75:68:
         e2:57:66:2a:14:a0:37:ec:53:63:4a:f6:af:34:41:9f:f5:d1:
         33:c8:1a:df:28:a8:95:52:5d:7a:ca:a8:df:48:62:05:e3:ed:
         62:f5:eb:10:33:04:6a:ca:ee:76:8f:e5:3f:dd:88:22:c7:14:
         c5:38:4f:87:cd:8b:06:6d:79:da:9d:e2:d9:8f:99:fd:df:bc:
         79:15:74:a8:e3:c5:9c:36:39:f5:89:59:48:a4:0d:9a:1c:43:
         97:b4:fe:79:29:f3:e0:d0:dd:29:d3:6c:b7:89:d6:39:8e:6a:
         19:ed:9e:d0:5f:a7:cb:b5:6c:2e:9b:e0:c6:84:0e:25:05:9a:
         b5:f7:29:1a:2f:d7:ef:44:ba:ed:43:d8:90:8a:a3:ba:4d:0a:
         a1:c0:6d:ad:9c:96:73:59:b3:84:82:32:8e:75:4e:d7:09:1b:
         f5:ff:e6:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiVuSTWFd6gwygkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
ODUyM2RmMGMtODNjNC00OWU2LThjZDAtZTlhZmM1N2E3OTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjZD0TEm++l+jsYl1EcQzqKRTg+/xZO7JjHY
eQBeTflPJY6bGJLFNlrwXvCQUHzXVIYAkETVFAw72E9n13DQS7FuyPR06rTqx6MG
M4xDP0jUQL8XTtNs+kmPDjtFa+nZuVPPmfJadZ1EzwK9fsertcfXWg52jyWzoIUM
dB2/m3z2iUNYdg3U0iWwg11rHYoFIuuXkVuB91nGmK8ts7qEMN0KeRwfMsDBUz4S
ljj++JNJ1bqYoKKRRuKvUaq/PA3uDgdxW+sgmDM2d2CocbXl2qf5qEBNdD0pPSki
RaQx5XJQM0nZsxugT8Kk/PMKlZSc+SxjPN0k+ekMwemm9aPhLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkGKGz8mtVj4sXKEzmiY+Q06npNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTJkYjNhYWYtZTkzNS0z
NjU2LWE1MWUtMmI1N2E1NmMzMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbzoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMWqrrtYysLafBN+4xT+IFU+gEKKLYoF41pKSPLmsgizOtshQqpxYOxB
efscPPAum8H7h5dO6rKifona/dsON3EjjdgaPao3bPXvd9EshJMOiTX1QD0op0d1
aOJXZioUoDfsU2NK9q80QZ/10TPIGt8oqJVSXXrKqN9IYgXj7WL16xAzBGrK7naP
5T/diCLHFMU4T4fNiwZtedqd4tmPmf3fvHkVdKjjxZw2OfWJWUikDZocQ5e0/nkp
8+DQ3SnTbLeJ1jmOahntntBfp8u1bC6b4MaEDiUFmrX3KRov1+9Euu1D2JCKo7pN
CqHAba2clnNZs4SCMo51TtcJG/X/5mM=
-----END CERTIFICATE-----
Generated at Sun May 5 02:38:54 2024 by rpki-client on console-fra.rpki-client.org