Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d90784e-0b52-38e3-baec-22dbe8cd808a.roa
File:                     5d90784e-0b52-38e3-baec-22dbe8cd808a.roa (raw, json)
Hash identifier:          TJCYbkgvytHYGFvQi6FM7Gue2FFM45Gct3C94glnq7Y=
Subject key identifier:   86:10:AE:64:B4:4D:F9:8F:3A:85:8D:86:33:88:B0:F0:9D:61:9A:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE3815BC9F0CB03D900E20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d90784e-0b52-38e3-baec-22dbe8cd808a.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33489
IP address blocks:        75.144.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:38:15:bc:9f:0c:b0:3d:90:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=7a3d5eca-a0b2-45bd-b83e-75858de6ed45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a4:c6:06:a7:a6:56:06:ec:07:4f:a1:50:d3:
                    4c:31:12:84:d9:44:ff:f0:d9:5b:b3:c1:b4:0e:19:
                    94:81:5d:b8:54:ca:ff:1e:30:56:d3:cd:6b:93:2d:
                    62:44:7c:e9:77:f1:a6:48:42:5f:b6:74:a0:45:ab:
                    58:cb:71:53:6a:7c:da:b4:cd:e6:9a:24:d8:42:96:
                    52:d0:77:6b:20:21:f6:cc:63:66:bc:74:87:6a:56:
                    44:03:6b:67:c7:66:f9:29:d4:ae:8b:35:0d:b6:34:
                    ad:83:1a:4e:d1:aa:2a:46:f0:87:47:d5:4c:61:d0:
                    13:94:a8:ad:fe:34:88:ce:df:1d:cf:1f:2f:c8:79:
                    05:80:a4:02:b8:ed:bf:d4:44:e4:2d:18:2f:ba:26:
                    76:ec:da:0d:9b:5e:de:bf:c3:11:08:22:d7:65:97:
                    69:df:4e:66:77:30:ea:2a:6a:21:58:95:f6:74:36:
                    3a:03:fa:59:69:b8:cd:70:81:c7:69:74:19:a0:7a:
                    18:cd:24:c0:82:a5:19:ae:94:0f:59:09:6b:81:93:
                    2c:07:8c:a9:22:f5:89:15:71:43:bf:14:49:f7:fe:
                    d9:5c:a9:62:db:8d:d8:82:c4:56:ae:1c:52:2a:5c:
                    2e:15:44:9a:92:af:71:c2:d2:fe:5e:e9:52:f7:47:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:10:AE:64:B4:4D:F9:8F:3A:85:8D:86:33:88:B0:F0:9D:61:9A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d90784e-0b52-38e3-baec-22dbe8cd808a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.144.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:df:ec:53:a5:48:24:78:63:7c:25:e6:e5:81:fd:a8:b8:
         04:f5:f8:0c:f9:85:37:e7:25:65:2d:18:b4:28:46:50:dd:0a:
         43:b0:e6:c9:42:c3:a3:c3:75:b9:7c:ca:88:7d:d1:fe:e1:68:
         a0:45:b6:1d:7e:4a:ab:05:2e:26:63:22:98:8b:fe:0c:8f:d0:
         fe:55:5b:4d:f6:8f:3b:f1:fb:13:de:c6:22:02:c0:a7:b9:06:
         58:3a:92:8c:e7:fc:e4:ea:86:70:9c:b0:6c:9e:3c:f0:ce:d5:
         a2:33:0c:0f:e3:7b:4c:ac:7a:57:cc:2d:4e:80:10:a2:a0:7d:
         b4:52:61:4e:d7:bc:6d:36:f3:25:94:4a:85:4c:3b:60:37:47:
         92:10:59:06:5a:59:15:11:26:9d:85:0b:fc:dc:8a:25:53:34:
         5a:8a:65:9c:29:c4:e6:98:47:ee:9a:b3:29:75:79:0c:f5:d6:
         0a:0a:3a:4c:b7:2f:5c:30:60:e7:13:3d:c2:f7:d9:8c:79:98:
         35:52:07:2f:06:e2:6b:ea:5f:4a:1f:a6:e6:c6:ab:c2:ed:d7:
         9e:85:77:d4:94:7c:80:94:8c:0f:d2:b8:1b:7f:99:bb:cc:2a:
         33:a0:85:43:d8:77:09:62:14:16:62:2b:4d:18:76:1e:a2:bd:
         ed:2e:75:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrjgVvJ8MsD2QDiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
N2EzZDVlY2EtYTBiMi00NWJkLWI4M2UtNzU4NThkZTZlZDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKTGBqemVgbsB0+hUNNMMRKE2UT/8Nlbs8G0
DhmUgV24VMr/HjBW081rky1iRHzpd/GmSEJftnSgRatYy3FTanzatM3mmiTYQpZS
0HdrICH2zGNmvHSHalZEA2tnx2b5KdSuizUNtjStgxpO0aoqRvCHR9VMYdATlKit
/jSIzt8dzx8vyHkFgKQCuO2/1ETkLRgvuiZ27NoNm17ev8MRCCLXZZdp305mdzDq
KmohWJX2dDY6A/pZabjNcIHHaXQZoHoYzSTAgqUZrpQPWQlrgZMsB4ypIvWJFXFD
vxRJ9/7ZXKli243YgsRWrhxSKlwuFUSakq9xwtL+XulS90emqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYQrmS0TfmPOoWNhjOIsPCdYZoFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQ5MDc4NGUtMGI1Mi0z
OGUzLWJhZWMtMjJkYmU4Y2Q4MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS5BwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7W3+xTpUgkeGN8Jeblgf2ouAT1+Az5hTfnJWUtGLQoRlDdCkOw5slC
w6PDdbl8yoh90f7haKBFth1+SqsFLiZjIpiL/gyP0P5VW032jzvx+xPexiICwKe5
Blg6kozn/OTqhnCcsGyePPDO1aIzDA/je0yselfMLU6AEKKgfbRSYU7XvG028yWU
SoVMO2A3R5IQWQZaWRURJp2FC/zciiVTNFqKZZwpxOaYR+6asyl1eQz11goKOky3
L1wwYOcTPcL32Yx5mDVSBy8G4mvqX0ofpubGq8Lt156Fd9SUfICUjA/SuBt/mbvM
KjOghUPYdwliFBZiK00Ydh6ive0udcQ=
-----END CERTIFICATE-----
Generated at Sun May 5 02:39:34 2024 by rpki-client on console-fra.rpki-client.org