Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3ecbf50-1036-3185-9547-f93100ab5636.roa
File:                     a3ecbf50-1036-3185-9547-f93100ab5636.roa (raw, json)
Hash identifier:          Ygpp32bUvnEzHK0HPfLe73FO+4hqHPhu75eiItRdcXo=
Subject key identifier:   C7:CA:E1:70:50:CF:33:EA:29:FB:D9:59:7A:58:8C:38:55:BB:3E:46
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF6FBEABE20DC46F2521D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3ecbf50-1036-3185-9547-f93100ab5636.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        76.114.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:fb:ea:be:20:dc:46:f2:52:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=a4a39268-d1b7-4c4d-8def-bf6c6d9a26ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:2b:f4:c7:ed:60:41:b8:fd:0f:77:e6:f6:
                    0a:ed:b4:5b:2e:47:27:87:7f:1a:d1:ab:2d:98:ec:
                    ae:21:e0:90:05:d3:ed:50:ca:a0:20:82:f9:74:55:
                    3d:2d:ec:95:d2:ac:45:2f:ee:ff:52:84:bd:26:ad:
                    de:ff:94:f5:4f:ef:94:20:81:8c:07:2d:ed:03:ba:
                    84:4a:f8:bb:15:73:45:cb:e3:1e:cb:21:51:f3:ad:
                    28:86:68:c1:cd:53:6d:2d:d1:2e:9d:42:56:90:3c:
                    17:93:e8:67:c3:8a:ef:f7:10:48:a7:04:86:f4:7f:
                    fb:99:ed:ff:3a:a8:9f:66:9b:23:88:8f:8b:8b:39:
                    5a:15:52:0e:73:e5:f8:3c:8a:60:4e:d5:79:75:77:
                    27:16:94:4e:95:c1:f2:06:1b:19:ed:45:b3:98:9c:
                    d6:b5:86:56:d3:51:a8:3f:1b:53:40:54:f5:8e:df:
                    ac:3e:87:f0:86:99:aa:aa:3b:97:6a:56:11:b4:17:
                    3a:38:9f:f5:62:d4:99:e7:d7:e1:73:8d:29:46:35:
                    d6:56:8a:5b:11:5d:71:40:6b:b3:55:6b:b3:0e:cd:
                    37:3c:b8:23:5a:90:aa:c5:c2:7b:99:d7:cc:5c:b6:
                    fe:00:ba:37:c8:8a:46:a9:c2:09:33:77:f1:d3:a8:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CA:E1:70:50:CF:33:EA:29:FB:D9:59:7A:58:8C:38:55:BB:3E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3ecbf50-1036-3185-9547-f93100ab5636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.114.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:32:41:e7:6f:81:6b:b2:8f:e7:0b:a2:77:2f:5c:da:64:8a:
         d9:93:40:9f:0f:47:82:ae:6d:d1:6c:bf:5a:82:75:da:cc:1a:
         96:ca:55:3a:3e:86:fd:44:04:57:59:f1:8f:e3:87:9c:2b:cf:
         ca:62:b0:d7:df:f2:2b:b5:08:68:fc:70:c4:d5:97:66:ef:76:
         98:3d:6f:1d:a9:11:5e:1e:17:56:f9:78:84:a4:81:e0:ed:db:
         e1:ee:68:c7:09:d7:4f:47:4d:12:2b:56:ad:c6:94:44:96:c3:
         8b:46:c8:81:ef:83:eb:cf:4b:70:63:04:ea:a1:24:d2:73:b8:
         a9:3e:a9:49:4e:d2:cd:02:21:94:3c:82:36:f2:88:9d:1f:df:
         fb:ff:c5:0c:91:34:13:6f:57:99:c4:f6:f8:e7:60:75:04:89:
         d5:8e:0b:26:c9:1b:b7:1c:fe:f4:d7:ad:c2:e9:9f:c9:f3:da:
         24:37:b1:b2:85:50:ec:c2:19:b0:b3:52:92:df:0e:5f:9b:92:
         2f:a7:76:5c:cd:68:22:5c:93:90:e7:af:55:92:d8:3b:04:13:
         c2:e4:fd:fc:0e:8b:28:58:41:d8:f9:32:f0:c2:85:ea:65:ff:
         96:1b:98:75:f5:3e:6b:31:a4:e5:d2:69:f9:cb:9e:a1:16:ef:
         93:93:76:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9vvqviDcRvJSHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
YTRhMzkyNjgtZDFiNy00YzRkLThkZWYtYmY2YzZkOWEyNmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgQr9MftYEG4/Q935vYK7bRbLkcnh38a0ast
mOyuIeCQBdPtUMqgIIL5dFU9LeyV0qxFL+7/UoS9Jq3e/5T1T++UIIGMBy3tA7qE
Svi7FXNFy+MeyyFR860ohmjBzVNtLdEunUJWkDwXk+hnw4rv9xBIpwSG9H/7me3/
OqifZpsjiI+LizlaFVIOc+X4PIpgTtV5dXcnFpROlcHyBhsZ7UWzmJzWtYZW01Go
PxtTQFT1jt+sPofwhpmqqjuXalYRtBc6OJ/1YtSZ59fhc40pRjXWVopbEV1xQGuz
VWuzDs03PLgjWpCqxcJ7mdfMXLb+ALo3yIpGqcIJM3fx06gydQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfK4XBQzzPqKfvZWXpYjDhVuz5GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNlY2JmNTAtMTAzNi0z
MTg1LTk1NDctZjkzMTAwYWI1NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHJKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIyQedvgWuyj+cLoncvXNpkitmTQJ8PR4KubdFsv1qCddrMGpbKVTo+
hv1EBFdZ8Y/jh5wrz8pisNff8iu1CGj8cMTVl2bvdpg9bx2pEV4eF1b5eISkgeDt
2+HuaMcJ109HTRIrVq3GlESWw4tGyIHvg+vPS3BjBOqhJNJzuKk+qUlO0s0CIZQ8
gjbyiJ0f3/v/xQyRNBNvV5nE9vjnYHUEidWOCybJG7cc/vTXrcLpn8nz2iQ3sbKF
UOzCGbCzUpLfDl+bki+ndlzNaCJck5Dnr1WS2DsEE8Lk/fwOiyhYQdj5MvDChepl
/5YbmHX1PmsxpOXSafnLnqEW75OTdqo=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:12:11 2024 by rpki-client on console-ams.rpki-client.org