Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7079474f-466e-3303-b5e3-c4f8064327d1.roa
File:                     7079474f-466e-3303-b5e3-c4f8064327d1.roa (raw, json)
Hash identifier:          1iJjf1/oh9uEz207rlCzt/eIs+ag/PAiKCq21TYyOqc=
Subject key identifier:   D0:D8:47:79:FF:93:64:75:67:32:98:32:E7:10:83:27:62:65:04:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7025255475F4448284A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7079474f-466e-3303-b5e3-c4f8064327d1.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.38.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:02:52:55:47:5f:44:48:28:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=42503b34-3497-4f4f-aa6b-36820b4d5377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:50:7b:d2:17:54:43:9a:fd:c3:f1:b6:2d:30:
                    ae:e7:8d:f8:98:91:85:7a:ee:cb:6a:57:77:c3:e9:
                    93:76:95:23:1b:95:d7:8a:9e:ea:a3:a0:13:f9:d8:
                    62:1a:d4:fb:a2:db:79:a3:06:e6:9f:94:0d:4f:9b:
                    ea:28:88:e9:9c:f0:d5:77:27:48:08:70:9f:9c:d9:
                    90:21:dc:f2:32:ec:8a:56:da:95:55:e9:a5:50:15:
                    b7:f4:30:22:ee:31:f9:b8:a0:7e:a1:ac:a2:6a:e2:
                    f7:6f:4c:ca:75:9a:27:5b:b4:d5:d6:d1:6e:b9:c5:
                    c5:23:5b:49:7b:df:a7:fb:1e:99:d8:bd:03:2a:26:
                    7a:6f:24:9d:7d:5e:83:21:ed:a5:5e:9a:f1:b2:8b:
                    1b:38:9d:7a:af:ee:f6:f5:3f:fe:76:87:43:a5:ed:
                    94:11:dd:04:a6:14:43:8a:c9:78:a2:2a:b1:96:bf:
                    27:a5:6c:e7:c6:1f:04:8c:7c:bf:1f:bb:92:53:ea:
                    51:44:4f:7f:bc:1c:a6:fb:62:e3:3a:5f:89:57:b2:
                    bc:2e:4f:ee:72:53:6c:87:29:87:e6:5c:07:54:c9:
                    ef:9a:ae:b1:d3:bc:4b:81:04:81:e9:7d:e2:d2:a2:
                    af:62:ce:55:d3:5a:3a:90:ac:f7:43:80:e4:51:ef:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D8:47:79:FF:93:64:75:67:32:98:32:E7:10:83:27:62:65:04:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7079474f-466e-3303-b5e3-c4f8064327d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.38.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:37:78:63:c9:a2:4b:16:47:a1:7e:b8:3c:9c:bc:01:d6:82:
         83:44:1c:bc:7b:88:07:a0:4d:8d:09:3c:cd:db:4c:8d:18:b8:
         de:99:3e:7f:a9:52:13:6c:af:ff:73:a5:11:2d:0d:cd:f3:23:
         50:d2:e6:02:f8:70:64:b0:cc:bb:3c:6d:be:d8:67:6a:f2:16:
         e1:c4:46:cb:69:e3:9b:48:2e:d1:a6:ff:75:e2:e4:40:d1:4f:
         6f:77:c8:76:f4:d0:3d:22:b6:3d:35:23:74:04:04:9d:1f:f4:
         80:bc:a1:07:6b:79:07:23:7c:4d:55:68:d8:6a:5b:53:10:5f:
         8e:11:ee:e8:35:46:34:6c:63:47:f2:f3:f7:fe:77:97:da:ae:
         2c:05:06:6b:ef:4c:85:fa:24:90:d6:6d:8a:3f:f0:9b:db:e6:
         6f:e6:f7:e0:54:4a:ca:d7:1f:fd:4f:0e:67:29:e0:af:eb:fd:
         b3:2f:45:81:b5:bc:8c:c6:04:d5:ed:04:4b:bf:35:11:df:90:
         e5:73:91:a0:bd:0f:8b:c7:f5:ed:2c:96:de:b4:83:07:34:57:
         27:83:3d:16:57:55:25:01:36:5e:40:7f:a3:d8:6e:80:0c:fc:
         05:9d:d3:e9:09:d1:d2:2d:3b:dc:a4:2b:3d:dd:cb:41:2f:ee:
         11:de:b0:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xwJSVUdfREgoSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
NDI1MDNiMzQtMzQ5Ny00ZjRmLWFhNmItMzY4MjBiNGQ1Mzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VB70hdUQ5r9w/G2LTCu5434mJGFeu7Lald3
w+mTdpUjG5XXip7qo6AT+dhiGtT7ott5owbmn5QNT5vqKIjpnPDVdydICHCfnNmQ
IdzyMuyKVtqVVemlUBW39DAi7jH5uKB+oayiauL3b0zKdZonW7TV1tFuucXFI1tJ
e9+n+x6Z2L0DKiZ6bySdfV6DIe2lXprxsosbOJ16r+729T/+dodDpe2UEd0EphRD
isl4oiqxlr8npWznxh8EjHy/H7uSU+pRRE9/vBym+2LjOl+JV7K8Lk/uclNshymH
5lwHVMnvmq6x07xLgQSB6X3i0qKvYs5V01o6kKz3Q4DkUe8hfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDYR3n/k2R1ZzKYMucQgydiZQSEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzA3OTQ3NGYtNDY2ZS0z
MzAzLWI1ZTMtYzRmODA2NDMyN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASSaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALg3eGPJoksWR6F+uDycvAHWgoNEHLx7iAegTY0JPM3bTI0YuN6ZPn+p
UhNsr/9zpREtDc3zI1DS5gL4cGSwzLs8bb7YZ2ryFuHERstp45tILtGm/3Xi5EDR
T293yHb00D0itj01I3QEBJ0f9IC8oQdreQcjfE1VaNhqW1MQX44R7ug1RjRsY0fy
8/f+d5fariwFBmvvTIX6JJDWbYo/8Jvb5m/m9+BUSsrXH/1PDmcp4K/r/bMvRYG1
vIzGBNXtBEu/NRHfkOVzkaC9D4vH9e0slt60gwc0VyeDPRZXVSUBNl5Af6PYboAM
/AWd0+kJ0dItO9ykKz3dy0Ev7hHesMg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:27:23 2024 by rpki-client on console-fra.rpki-client.org