Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9efb3b72-92f6-3a72-9be1-86b3e711caa0.roa
File:                     9efb3b72-92f6-3a72-9be1-86b3e711caa0.roa (raw, json)
Hash identifier:          IfQcyqlzo4lBtXTInQJzEC3As66R7oMjg+wn+mkXhJM=
Subject key identifier:   01:38:8A:05:C7:60:C7:19:6A:3D:3D:58:50:13:34:CA:B3:7A:11:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E663CBE4562CB0E12BF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9efb3b72-92f6-3a72-9be1-86b3e711caa0.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33660
IP address blocks:        76.23.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:66:3c:be:45:62:cb:0e:12:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=6e8dc2d4-1cee-4248-9873-3d7f0db4813e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:59:cf:19:4e:95:38:65:cc:d7:af:93:75:
                    8a:70:57:74:76:57:a8:bd:9d:91:ff:2a:df:d2:7c:
                    79:92:df:44:27:9a:6d:1a:5e:18:60:e3:fd:fe:ce:
                    44:57:49:35:f7:da:6e:50:36:06:ca:20:34:83:fd:
                    d2:0a:0b:21:94:1c:d3:93:9f:63:5a:14:f0:2b:ad:
                    e2:51:06:75:78:54:5e:85:1a:fe:e2:7a:23:15:a4:
                    e2:2b:9b:45:32:de:e1:ff:f2:25:df:c4:7f:b4:70:
                    a1:7d:bb:c5:d7:69:7a:c1:e0:8d:39:0d:1b:23:d8:
                    1a:bb:ad:45:71:9a:b2:b8:89:53:81:84:e0:5b:be:
                    04:59:e1:3e:77:8d:b7:30:8b:4d:5f:78:15:fa:76:
                    88:0c:ed:b4:b9:de:e3:ea:ea:7c:cd:48:c0:42:d3:
                    1d:c7:5e:2b:03:ca:ea:67:a5:e6:06:69:05:45:db:
                    5a:35:1f:18:e2:97:6e:0b:25:b4:da:59:52:b5:2a:
                    bc:bb:ec:dd:ee:c7:0f:a6:6f:2d:09:36:65:ac:5f:
                    36:2f:21:66:5c:ec:5f:5f:ce:8d:e0:dc:e3:45:9b:
                    d1:02:2d:c9:61:be:74:a4:a3:a0:3c:c2:f4:d9:ad:
                    8e:27:bc:db:82:ce:81:02:87:2f:66:39:25:e3:05:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:38:8A:05:C7:60:C7:19:6A:3D:3D:58:50:13:34:CA:B3:7A:11:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9efb3b72-92f6-3a72-9be1-86b3e711caa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.23.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ef:b7:6c:69:85:bf:4c:c6:d5:3f:b9:ad:75:e2:e4:c6:83:
         8e:e4:7e:21:a3:72:dd:fc:84:32:b7:fd:4e:d5:ff:99:16:3b:
         74:45:b5:34:7a:cc:36:1a:d0:04:c3:bb:f5:6a:2d:96:29:71:
         78:78:06:72:c7:1e:3e:2d:50:c3:bc:be:79:4d:22:08:6b:f1:
         62:60:6d:7c:36:a4:8d:3a:db:87:1d:c0:40:34:2a:2c:05:41:
         34:cf:ba:bb:3b:88:bd:34:46:9b:be:c4:d9:b9:e6:38:7f:22:
         71:61:fd:2d:80:ca:71:bc:6f:20:2c:32:aa:ba:7e:a5:89:d6:
         9f:83:ee:50:2c:2c:2c:9a:8f:56:e8:87:b1:f7:99:60:01:99:
         c4:c5:f2:2b:5a:fd:13:09:9f:cc:04:14:9e:a9:fc:31:95:21:
         8a:e8:03:01:c4:68:1c:6c:e8:d5:8a:af:d2:24:aa:10:97:29:
         73:8a:84:b3:42:c0:91:79:0b:28:89:39:6d:c8:62:b8:af:9c:
         cd:02:f0:a3:43:89:27:3b:3f:e0:3d:18:4a:3d:13:c2:4d:ee:
         de:04:dd:8c:90:61:9a:9b:18:26:2b:bb:bc:c9:cd:55:72:ca:
         b2:6e:1c:55:8a:b4:e9:d6:2a:74:40:8f:b8:87:d3:98:3a:7c:
         8e:f8:de:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnmY8vkViyw4Sv0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NmU4ZGMyZDQtMWNlZS00MjQ4LTk4NzMtM2Q3ZjBkYjQ4MTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQZZzxlOlThlzNevk3WKcFd0dleovZ2R/yrf
0nx5kt9EJ5ptGl4YYOP9/s5EV0k199puUDYGyiA0g/3SCgshlBzTk59jWhTwK63i
UQZ1eFRehRr+4nojFaTiK5tFMt7h//Il38R/tHChfbvF12l6weCNOQ0bI9gau61F
cZqyuIlTgYTgW74EWeE+d423MItNX3gV+naIDO20ud7j6up8zUjAQtMdx14rA8rq
Z6XmBmkFRdtaNR8Y4pduCyW02llStSq8u+zd7scPpm8tCTZlrF82LyFmXOxfX86N
4NzjRZvRAi3JYb50pKOgPML02a2OJ7zbgs6BAocvZjkl4wUmewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAE4igXHYMcZaj09WFATNMqzehHpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWVmYjNiNzItOTJmNi0z
YTcyLTliZTEtODZiM2U3MTFjYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBcQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnvt2xphb9MxtU/ua114uTGg47kfiGjct38hDK3/U7V/5kWO3RFtTR6
zDYa0ATDu/VqLZYpcXh4BnLHHj4tUMO8vnlNIghr8WJgbXw2pI0624cdwEA0KiwF
QTTPurs7iL00Rpu+xNm55jh/InFh/S2AynG8byAsMqq6fqWJ1p+D7lAsLCyaj1bo
h7H3mWABmcTF8ita/RMJn8wEFJ6p/DGVIYroAwHEaBxs6NWKr9IkqhCXKXOKhLNC
wJF5CyiJOW3IYrivnM0C8KNDiSc7P+A9GEo9E8JN7t4E3YyQYZqbGCYru7zJzVVy
yrJuHFWKtOnWKnRAj7iH05g6fI743jo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:41:55 2024 by rpki-client on console-fra.rpki-client.org