Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c083785-616d-3dd1-bad4-3a5225d3b1ae.roa
File:                     8c083785-616d-3dd1-bad4-3a5225d3b1ae.roa (raw, json)
Hash identifier:          L0XJvm4p3XErfD/KAK8mr0PAw4mETattkpu4VMt9VAI=
Subject key identifier:   C3:6F:A6:7C:9A:60:7C:5A:E5:CC:97:4D:EB:E6:FE:05:59:AE:74:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E58808F73072DC22501180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c083785-616d-3dd1-bad4-3a5225d3b1ae.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.137.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:88:08:f7:30:72:dc:22:50:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=6ee01628-b804-4f3f-b2be-9b0d6c109b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:16:5e:c6:ef:cc:6a:ce:0b:58:b3:66:eb:
                    5b:dc:6f:0a:81:f6:30:0a:78:ad:c1:ab:b1:3e:22:
                    8a:ec:64:f1:d6:5e:d1:44:96:59:6b:f6:e8:92:e6:
                    20:73:6f:b0:3c:d0:c2:d6:4f:ca:bb:f0:0c:ee:d4:
                    bd:02:6d:3a:1d:ca:bb:2e:60:19:16:4c:48:43:57:
                    e7:a8:64:cf:ee:89:ef:21:7f:64:35:eb:de:12:04:
                    6b:7f:1b:34:a5:8e:47:8b:dd:29:b6:17:7e:dc:a1:
                    f9:a3:10:14:a2:20:11:14:97:e0:e1:ad:3e:99:b9:
                    bc:5a:b7:56:ec:13:c9:8e:cd:61:f8:73:50:7d:c3:
                    08:96:9c:f7:98:11:ca:b9:2b:77:4e:d1:29:12:30:
                    12:d0:a1:07:bd:62:d3:43:36:d0:7f:d5:df:9e:e9:
                    de:f4:14:dc:ed:20:54:4e:b9:49:c4:38:ea:4e:3c:
                    19:99:c5:64:4e:ae:d5:db:c6:f4:5a:e7:f8:fa:46:
                    d3:12:ba:1e:9d:4b:22:1b:05:c4:58:cf:cc:cb:fd:
                    1f:76:21:88:2a:0e:d2:3f:53:d5:9d:de:b8:97:f5:
                    0d:41:17:eb:d1:d4:f1:59:bf:cf:73:01:5d:1f:f8:
                    8d:b1:c6:b1:bf:4a:90:d7:d4:28:18:87:8e:86:f1:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6F:A6:7C:9A:60:7C:5A:E5:CC:97:4D:EB:E6:FE:05:59:AE:74:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c083785-616d-3dd1-bad4-3a5225d3b1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.137.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:46:66:ab:47:ab:85:b8:7a:e5:5d:10:0f:7f:6b:4c:1b:80:
         34:01:39:e6:50:ac:af:19:35:51:11:01:89:a7:f3:b0:1f:58:
         22:45:c7:7d:f7:21:ad:86:84:61:fa:dd:de:82:7f:72:66:9a:
         d7:da:2b:44:62:08:f2:0e:34:fa:07:d2:df:af:20:1a:83:d0:
         cb:b3:39:d2:7f:7d:b3:c5:a1:39:78:e2:91:72:32:8e:15:23:
         90:6f:f2:16:bf:ec:64:87:2b:d9:83:91:d0:ad:f2:0e:62:11:
         ab:02:6c:63:b6:e0:b2:e9:3f:3b:01:a8:28:f9:93:b4:84:75:
         83:78:40:d0:bc:d3:76:fb:e1:9c:6c:dc:10:79:be:2d:46:19:
         68:ae:82:a1:8c:aa:53:9f:d2:13:27:8f:8e:e8:cf:9d:ac:a5:
         5f:60:2c:f0:73:aa:91:84:2c:e5:ff:7a:5f:33:90:4e:aa:be:
         8c:86:d9:ae:a7:60:5b:94:62:13:b2:c1:24:8a:e1:32:c2:8a:
         3e:cb:0a:ad:db:85:e5:56:9c:56:35:40:cf:cd:3f:e8:f6:2c:
         83:87:97:8b:57:32:b4:05:49:e6:11:b5:37:3b:0c:f7:57:56:
         6e:7b:c8:10:1d:ff:52:a5:9a:8c:1b:56:19:bf:f0:6c:10:95:
         c3:6e:18:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5YgI9zBy3CJQEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NmVlMDE2MjgtYjgwNC00ZjNmLWIyYmUtOWIwZDZjMTA5YjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRQWXsbvzGrOC1izZutb3G8KgfYwCnitwaux
PiKK7GTx1l7RRJZZa/bokuYgc2+wPNDC1k/Ku/AM7tS9Am06Hcq7LmAZFkxIQ1fn
qGTP7onvIX9kNeveEgRrfxs0pY5Hi90pthd+3KH5oxAUoiARFJfg4a0+mbm8WrdW
7BPJjs1h+HNQfcMIlpz3mBHKuSt3TtEpEjAS0KEHvWLTQzbQf9Xfnune9BTc7SBU
TrlJxDjqTjwZmcVkTq7V28b0Wuf4+kbTEroenUsiGwXEWM/My/0fdiGIKg7SP1PV
nd64l/UNQRfr0dTxWb/PcwFdH/iNscaxv0qQ19QoGIeOhvFR/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNvpnyaYHxa5cyXTevm/gVZrnRmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGMwODM3ODUtNjE2ZC0z
ZGQxLWJhZDQtM2E1MjI1ZDNiMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASYlhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKNGZqtHq4W4euVdEA9/a0wbgDQBOeZQrK8ZNVERAYmn87AfWCJFx333
Ia2GhGH63d6Cf3JmmtfaK0RiCPIONPoH0t+vIBqD0MuzOdJ/fbPFoTl44pFyMo4V
I5Bv8ha/7GSHK9mDkdCt8g5iEasCbGO24LLpPzsBqCj5k7SEdYN4QNC803b74Zxs
3BB5vi1GGWiugqGMqlOf0hMnj47oz52spV9gLPBzqpGELOX/el8zkE6qvoyG2a6n
YFuUYhOywSSK4TLCij7LCq3bheVWnFY1QM/NP+j2LIOHl4tXMrQFSeYRtTc7DPdX
Vm57yBAd/1KlmowbVhm/8GwQlcNuGOo=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:07:51 2024 by rpki-client on console-ams.rpki-client.org