Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559a0bf8-deb2-356d-acbe-fe57ca3d5f15.roa
File:                     559a0bf8-deb2-356d-acbe-fe57ca3d5f15.roa (raw, json)
Hash identifier:          xaS0hl/X4IyBBROXicxwGN3tRFg9HzEEFNqk2WTdS9M=
Subject key identifier:   3B:AE:AD:A2:66:60:74:DF:11:6B:50:C6:76:59:F2:05:F3:4B:61:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D1B7777CCFE0E076CFB20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559a0bf8-deb2-356d-acbe-fe57ca3d5f15.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        73.15.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:1b:77:77:cc:fe:0e:07:6c:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=940a8837-1b72-4897-b362-12e1fe99e2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:18:bd:31:a5:41:42:b8:3c:33:aa:cc:46:
                    f3:b0:c7:85:1f:cd:20:b3:40:83:b8:51:04:52:dc:
                    a3:a3:e5:47:4a:93:c3:16:dd:5b:b6:f2:7d:8c:35:
                    54:66:09:10:15:44:79:ad:8b:c8:cf:dd:af:09:d3:
                    69:ca:b6:0f:c2:56:13:6d:c5:fd:9b:c5:62:25:cc:
                    a5:21:da:f7:6c:86:71:99:8a:8c:8d:12:4e:c2:2b:
                    39:a4:d4:5b:e7:63:c8:c9:11:ae:72:fe:30:c1:99:
                    38:f4:b2:16:27:ba:7b:1a:fb:56:20:1d:b1:84:a7:
                    08:c7:58:08:8d:ff:84:6c:e0:96:12:0a:8b:c3:9d:
                    bb:8d:e5:f8:9c:fa:dc:82:9e:18:c1:48:e9:11:fe:
                    19:44:5e:f2:eb:4e:d0:3f:28:63:42:e3:6f:d6:6c:
                    b8:6d:35:02:3c:78:a7:25:82:e6:0f:f6:2d:37:fb:
                    a8:49:79:e4:54:99:38:78:25:2b:30:61:ff:15:70:
                    bc:65:8c:50:91:e2:e2:c2:b7:ef:b1:c0:bf:76:9e:
                    49:56:c6:17:d8:16:cd:b8:33:79:73:b1:8b:70:30:
                    8c:07:66:31:04:87:83:74:a0:b6:4e:2b:a1:85:2e:
                    ea:d1:48:a7:de:ec:10:1e:fd:7d:1c:92:71:e0:58:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AE:AD:A2:66:60:74:DF:11:6B:50:C6:76:59:F2:05:F3:4B:61:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559a0bf8-deb2-356d-acbe-fe57ca3d5f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.15.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d3:1f:a3:1f:8a:f9:1b:85:ad:60:b6:a8:2f:86:72:07:00:
         3e:cb:72:a1:bc:a9:c7:f7:4f:41:ca:62:41:1c:f7:59:98:ed:
         8c:4e:3f:b8:4d:36:08:0c:be:e0:69:b4:31:1f:65:1e:4e:a2:
         a4:9a:07:83:28:26:0c:0c:d3:85:cd:bc:f1:d5:35:1d:ff:1a:
         f6:cb:fe:df:47:95:71:3f:01:08:19:36:01:ce:a7:61:cc:46:
         bd:5d:0d:20:6e:34:65:22:24:da:d2:52:45:e9:d6:6a:65:59:
         57:8c:00:40:2b:b6:8d:87:38:64:f6:74:cd:3a:97:10:c6:5f:
         08:18:0d:17:58:e9:2c:4b:03:a8:a1:2c:bd:94:10:d4:be:48:
         af:5c:60:30:85:02:23:4b:d2:20:5c:42:35:7c:df:98:b7:2d:
         e9:3e:59:79:82:b8:60:26:39:8d:d0:28:8b:69:32:68:94:72:
         19:8f:26:08:54:f0:27:16:49:c5:0c:29:0b:46:03:6c:ad:fd:
         56:72:e7:7b:07:b1:cb:dd:23:8c:29:5e:62:7e:e9:e7:51:9d:
         89:b1:01:f7:b8:bd:60:e4:a2:31:27:cb:54:05:79:28:a2:10:
         83:01:56:ea:68:f6:07:d0:d2:f5:ac:55:16:b9:c1:95:07:34:
         26:5c:5f:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnRt3d8z+Dgds+yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
OTQwYTg4MzctMWI3Mi00ODk3LWIzNjItMTJlMWZlOTllMmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8gYvTGlQUK4PDOqzEbzsMeFH80gs0CDuFEE
Utyjo+VHSpPDFt1btvJ9jDVUZgkQFUR5rYvIz92vCdNpyrYPwlYTbcX9m8ViJcyl
Idr3bIZxmYqMjRJOwis5pNRb52PIyRGucv4wwZk49LIWJ7p7GvtWIB2xhKcIx1gI
jf+EbOCWEgqLw527jeX4nPrcgp4YwUjpEf4ZRF7y607QPyhjQuNv1my4bTUCPHin
JYLmD/YtN/uoSXnkVJk4eCUrMGH/FXC8ZYxQkeLiwrfvscC/dp5JVsYX2BbNuDN5
c7GLcDCMB2YxBIeDdKC2TiuhhS7q0Uin3uwQHv19HJJx4FiGmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDuuraJmYHTfEWtQxnZZ8gXzS2HKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTU5YTBiZjgtZGViMi0z
NTZkLWFjYmUtZmU1N2NhM2Q1ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQ8OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTTH6Mfivkbha1gtqgvhnIHAD7LcqG8qcf3T0HKYkEc91mY7YxOP7hN
NggMvuBptDEfZR5OoqSaB4MoJgwM04XNvPHVNR3/GvbL/t9HlXE/AQgZNgHOp2HM
Rr1dDSBuNGUiJNrSUkXp1mplWVeMAEArto2HOGT2dM06lxDGXwgYDRdY6SxLA6ih
LL2UENS+SK9cYDCFAiNL0iBcQjV835i3Lek+WXmCuGAmOY3QKItpMmiUchmPJghU
8CcWScUMKQtGA2yt/VZy53sHscvdI4wpXmJ+6edRnYmxAfe4vWDkojEny1QFeSii
EIMBVupo9gfQ0vWsVRa5wZUHNCZcXyg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:55:35 2024 by rpki-client on console-ams.rpki-client.org