Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4f760c1-e981-317f-ae14-27bb8ed537bb.roa
File:                     a4f760c1-e981-317f-ae14-27bb8ed537bb.roa (raw, json)
Hash identifier:          dhEiOjJYjSRKi0EB4xXZ13BMlhKhm3La9v6kLfFf4k0=
Subject key identifier:   4F:CE:87:C6:25:4C:13:24:FD:5C:43:35:88:68:0F:57:F4:6D:D6:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DE4BFD482D9A8258BA880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4f760c1-e981-317f-ae14-27bb8ed537bb.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.10.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:e4:bf:d4:82:d9:a8:25:8b:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=0f445926-d5e8-45d8-bac6-a2927012d17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:86:d9:a8:14:46:23:72:95:7d:3f:09:ad:
                    76:01:f6:6e:55:3a:2d:86:44:73:e9:c0:5b:4a:cb:
                    9e:8a:e1:c6:32:9f:27:0a:9b:79:72:14:f1:5d:25:
                    41:e8:77:c0:86:69:53:cd:2b:f2:68:86:6d:77:e5:
                    c3:d6:83:c5:b4:c4:e3:df:d7:90:67:1a:e6:0a:12:
                    ce:f5:52:c6:81:e3:1a:72:ff:06:5f:cc:7f:2f:28:
                    a7:9a:61:7b:73:42:0f:54:0c:cb:ee:e5:23:aa:af:
                    d4:32:5b:2f:2d:82:10:53:41:25:9a:a3:29:ad:19:
                    e0:fc:99:3c:ce:63:cd:09:99:5e:02:92:0d:d6:eb:
                    4d:f1:e1:eb:02:ef:07:bb:ca:c2:65:e5:34:3c:4e:
                    3d:19:e9:85:7d:d7:d9:98:a4:65:f0:fd:ca:03:62:
                    4f:3e:1d:af:1f:f0:d9:5b:96:60:72:29:79:e3:2d:
                    b3:3c:45:6b:8c:1e:04:ed:05:8c:4c:cc:09:89:7a:
                    13:21:19:1d:ef:7f:21:22:ff:fe:57:65:26:b9:93:
                    2c:31:c6:cd:9b:ab:ac:31:11:6d:4d:15:32:02:16:
                    88:28:dc:9d:19:c8:31:7f:b8:d0:6a:38:fb:0a:6f:
                    b8:38:f6:5b:97:ba:d6:e9:29:da:35:0e:b2:a9:4f:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CE:87:C6:25:4C:13:24:FD:5C:43:35:88:68:0F:57:F4:6D:D6:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4f760c1-e981-317f-ae14-27bb8ed537bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.10.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:f7:2d:93:ea:af:09:84:2a:0d:25:8e:67:66:42:28:2a:b6:
         98:4a:4e:5c:21:71:f5:0a:f8:e0:bc:11:56:79:28:41:73:86:
         73:bd:f1:24:ef:c2:40:48:33:3d:f6:a9:94:68:7b:ef:cd:66:
         b1:0e:c7:1f:0a:c6:8c:ec:b7:0c:3c:a2:88:93:a5:51:cd:26:
         95:3c:96:e3:da:ac:47:a7:37:89:ed:84:92:0b:9e:25:b9:89:
         79:91:41:9f:76:b6:8c:66:5b:4b:70:ac:08:2a:d9:33:ea:b6:
         a9:d6:85:f1:0b:06:88:4b:09:c2:a7:b5:e0:76:8f:2b:b7:6d:
         34:f8:bf:e7:e2:3b:06:f0:51:ab:44:28:a7:6a:f1:72:b2:e5:
         3a:bc:b4:25:2b:01:ec:8b:4e:63:e7:bc:cb:3e:a9:4f:50:f2:
         58:87:ef:db:fe:76:bf:a7:ca:5f:6f:5a:df:4d:50:6f:0a:33:
         63:dc:ea:12:ec:6e:c1:0d:a2:6e:6b:e8:d5:ea:64:57:e9:6e:
         94:d6:dd:12:4e:41:11:e4:11:79:83:50:83:0a:19:67:d9:a1:
         04:dd:e3:aa:61:ae:c6:12:0e:3c:03:7b:c0:12:6a:9e:6d:ed:
         4f:d7:b4:80:8d:4c:88:a9:cb:28:74:81:e6:16:31:db:f0:70:
         5e:79:51:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsneS/1ILZqCWLqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
MGY0NDU5MjYtZDVlOC00NWQ4LWJhYzYtYTI5MjcwMTJkMTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka+G2agURiNylX0/Ca12AfZuVTothkRz6cBb
SsueiuHGMp8nCpt5chTxXSVB6HfAhmlTzSvyaIZtd+XD1oPFtMTj39eQZxrmChLO
9VLGgeMacv8GX8x/LyinmmF7c0IPVAzL7uUjqq/UMlsvLYIQU0ElmqMprRng/Jk8
zmPNCZleApIN1utN8eHrAu8Hu8rCZeU0PE49GemFfdfZmKRl8P3KA2JPPh2vH/DZ
W5Zgcil54y2zPEVrjB4E7QWMTMwJiXoTIRkd738hIv/+V2UmuZMsMcbNm6usMRFt
TRUyAhaIKNydGcgxf7jQajj7Cm+4OPZbl7rW6SnaNQ6yqU+g3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/Oh8YlTBMk/VxDNYhoD1f0bdaPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTRmNzYwYzEtZTk4MS0z
MTdmLWFlMTQtMjdiYjhlZDUzN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSQoYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN33LZPqrwmEKg0ljmdmQigqtphKTlwhcfUK+OC8EVZ5KEFzhnO98STv
wkBIMz32qZRoe+/NZrEOxx8Kxozstww8ooiTpVHNJpU8luParEenN4nthJILniW5
iXmRQZ92toxmW0twrAgq2TPqtqnWhfELBohLCcKnteB2jyu3bTT4v+fiOwbwUatE
KKdq8XKy5Tq8tCUrAeyLTmPnvMs+qU9Q8liH79v+dr+nyl9vWt9NUG8KM2Pc6hLs
bsENom5r6NXqZFfpbpTW3RJOQRHkEXmDUIMKGWfZoQTd46phrsYSDjwDe8ASap5t
7U/XtICNTIipyyh0geYWMdvwcF55UQQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:02:34 2024 by rpki-client on console-ams.rpki-client.org