Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/572bdc03-6256-3d57-87a4-71efb5ad9e5b.roa
File:                     572bdc03-6256-3d57-87a4-71efb5ad9e5b.roa (raw, json)
Hash identifier:          w3Pn73rONKI/TSVSIDe+ODJV/eGXt0/nJuVmEzBN8DU=
Subject key identifier:   80:64:34:54:47:FB:22:71:8B:E8:23:91:05:10:A2:C8:4A:DC:CC:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E26F7DE1F9E44814A6400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/572bdc03-6256-3d57-87a4-71efb5ad9e5b.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        71.225.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:26:f7:de:1f:9e:44:81:4a:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=b41776ca-59f6-4556-8841-666bd397c99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:62:16:70:0d:32:d4:7a:3a:11:95:0b:65:
                    35:29:18:6c:e8:80:a2:63:f5:54:a2:52:94:65:51:
                    2e:a3:22:65:93:39:14:cf:a4:0d:8e:65:b7:f0:ef:
                    b1:da:34:94:11:89:d0:3c:20:a1:8e:b8:2c:ec:7d:
                    89:71:5a:88:70:2c:20:79:7f:37:6e:3b:cf:aa:67:
                    ae:28:6e:85:9f:17:10:af:70:07:db:2a:1b:9c:e2:
                    67:f2:18:e7:04:4d:cb:32:78:23:b0:76:2b:d7:c5:
                    9d:3a:b5:09:7f:e8:08:82:dc:77:5d:4b:95:ad:36:
                    3c:7a:63:17:86:50:05:e5:81:8f:ec:29:19:9e:18:
                    85:00:c5:42:26:0d:4f:97:7a:1b:b6:b3:61:a9:e6:
                    5e:e7:8a:22:95:a7:d0:db:3d:3c:b1:e4:34:fb:95:
                    f0:94:40:ab:7c:0f:0e:c7:41:48:a5:78:2d:bc:1b:
                    98:04:f1:c5:32:8f:11:dc:0f:5e:07:2d:4a:a9:a5:
                    71:bf:b5:95:11:b4:e3:13:51:69:1c:96:6e:f1:a8:
                    97:0a:fe:60:5e:e2:8a:79:eb:e3:5b:59:03:a4:f5:
                    ad:d6:18:ee:fd:d1:fd:b5:b0:f8:76:b7:a4:4a:38:
                    b6:9a:ad:8d:28:57:40:76:b2:c5:6a:19:38:ff:7d:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:34:54:47:FB:22:71:8B:E8:23:91:05:10:A2:C8:4A:DC:CC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/572bdc03-6256-3d57-87a4-71efb5ad9e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.225.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:32:80:96:90:0a:5f:8d:5c:a6:09:93:c6:22:2c:44:e1:
         fe:e6:96:64:db:85:dd:47:7c:b6:fd:7f:f8:69:38:d7:23:5e:
         3b:d5:27:0f:de:ac:37:ea:63:00:30:69:38:77:53:51:c8:35:
         f2:09:5b:3c:f1:19:86:f0:fc:6f:1d:c7:f9:b3:f3:08:18:47:
         51:16:3d:d4:5e:4e:3b:c3:05:c9:0f:c9:c1:8b:98:13:a6:af:
         9d:94:46:a1:d0:c4:69:4a:45:00:1e:64:6e:ae:e3:ab:ba:81:
         dd:54:ba:22:19:cd:d6:be:d4:35:d4:53:be:73:34:94:bb:61:
         eb:25:c1:d0:f7:77:e5:82:50:0b:27:3e:fb:4b:60:2c:19:21:
         3e:29:bd:8b:bc:bf:27:d7:91:b2:d2:c4:7a:5f:23:b2:c1:6b:
         77:67:17:8b:89:59:07:3a:37:24:e3:1f:32:27:a0:99:57:c8:
         5d:cb:f5:77:8f:e0:dc:b9:26:f3:6e:46:73:0f:56:e3:68:a7:
         74:e4:e7:11:3b:0b:d9:01:ed:0c:1d:5f:c6:43:4a:75:be:24:
         72:e8:13:ba:fa:99:dd:01:59:a4:21:d8:e8:b2:e3:09:7d:71:
         e5:2f:e9:08:f5:b4:20:13:19:eb:ad:6d:80:6c:a7:ac:6f:3b:
         81:ec:fb:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnib33h+eRIFKZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
YjQxNzc2Y2EtNTlmNi00NTU2LTg4NDEtNjY2YmQzOTdjOTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLliFnANMtR6OhGVC2U1KRhs6ICiY/VUolKU
ZVEuoyJlkzkUz6QNjmW38O+x2jSUEYnQPCChjrgs7H2JcVqIcCwgeX83bjvPqmeu
KG6FnxcQr3AH2yobnOJn8hjnBE3LMngjsHYr18WdOrUJf+gIgtx3XUuVrTY8emMX
hlAF5YGP7CkZnhiFAMVCJg1Pl3obtrNhqeZe54oilafQ2z08seQ0+5XwlECrfA8O
x0FIpXgtvBuYBPHFMo8R3A9eBy1KqaVxv7WVEbTjE1FpHJZu8aiXCv5gXuKKeevj
W1kDpPWt1hju/dH9tbD4drekSji2mq2NKFdAdrLFahk4/333eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBkNFRH+yJxi+gjkQUQoshK3MyiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTcyYmRjMDMtNjI1Ni0z
ZDU3LTg3YTQtNzFlZmI1YWQ5ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+EYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGOMoCWkApfjVymCZPGIixE4f7mlmTbhd1HfLb9f/hpONcjXjvVJw/e
rDfqYwAwaTh3U1HINfIJWzzxGYbw/G8dx/mz8wgYR1EWPdReTjvDBckPycGLmBOm
r52URqHQxGlKRQAeZG6u46u6gd1UuiIZzda+1DXUU75zNJS7YeslwdD3d+WCUAsn
PvtLYCwZIT4pvYu8vyfXkbLSxHpfI7LBa3dnF4uJWQc6NyTjHzInoJlXyF3L9XeP
4Ny5JvNuRnMPVuNop3Tk5xE7C9kB7QwdX8ZDSnW+JHLoE7r6md0BWaQh2Oiy4wl9
ceUv6Qj1tCATGeutbYBsp6xvO4Hs+zk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:55:43 2024 by rpki-client on console-ams.rpki-client.org