Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a58ee32d-d9c7-39a2-8787-bce2a856a730.roa
File:                     a58ee32d-d9c7-39a2-8787-bce2a856a730.roa (raw, json)
Hash identifier:          WEjiOno+8+81nPfpT/o/uh7N5WYPGBRG9tYeAbV0+QE=
Subject key identifier:   2B:49:44:B4:DC:9D:63:69:83:42:A2:6F:68:8D:8B:85:25:03:72:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBF93E2A0F586EB3973600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a58ee32d-d9c7-39a2-8787-bce2a856a730.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        173.13.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:f9:3e:2a:0f:58:6e:b3:97:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=9388c2b8-872f-4d80-8e04-97d3c4023736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:26:11:bd:54:64:dd:a0:e5:74:1c:0d:64:
                    a9:e9:05:8a:87:e9:38:74:4b:fc:df:40:e3:80:79:
                    9a:67:d8:9c:70:70:01:03:7f:27:15:c0:25:e5:79:
                    6f:a0:16:c3:53:3d:6a:a9:39:d8:24:b7:79:f1:57:
                    ce:d3:ee:51:4f:cf:a9:9b:ee:9a:cc:75:83:7d:77:
                    65:b2:8f:f8:8c:b0:62:9f:be:42:bf:98:99:aa:64:
                    03:22:82:29:b0:85:46:ee:f0:cd:2c:4b:81:c0:0e:
                    ac:fc:f0:24:fa:d0:35:6b:b5:99:12:86:b7:0f:5a:
                    78:2e:4d:2d:e6:6e:85:72:96:ba:6f:88:e9:58:33:
                    c2:4c:04:6e:24:41:6d:c6:32:97:d3:a7:7f:36:ab:
                    c9:a4:e4:d2:ad:2a:f2:b8:88:3d:66:5c:ce:32:fe:
                    68:8c:52:5d:da:cd:82:f2:cb:82:27:93:b5:19:0c:
                    ee:5d:06:aa:ab:23:42:b7:9e:a8:92:f9:27:61:da:
                    0d:8c:65:24:a3:a5:95:88:3a:68:91:0a:9a:ce:35:
                    65:66:7e:43:f8:00:18:73:74:ef:1b:71:b1:b6:8b:
                    51:83:6b:a0:c0:90:7b:3f:06:16:3c:2e:3e:25:13:
                    02:38:f7:70:68:ee:31:e7:74:84:e1:8a:01:74:58:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:49:44:B4:DC:9D:63:69:83:42:A2:6F:68:8D:8B:85:25:03:72:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a58ee32d-d9c7-39a2-8787-bce2a856a730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.13.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7e:8a:c0:fc:3b:17:6a:bd:d2:58:3e:d5:1a:7a:ef:6b:62:
         87:b4:84:e9:a7:c1:5c:3f:90:40:c3:0a:a4:af:74:96:cd:01:
         a6:4b:9b:86:1e:41:df:8c:6a:eb:ad:00:02:a5:99:ac:32:f1:
         92:d7:6c:ba:34:17:d4:0a:17:26:96:fa:6d:d5:eb:14:d3:45:
         94:34:cc:35:f6:ff:03:a1:4a:fc:dd:43:40:31:8e:43:f3:e0:
         71:e7:0a:46:da:f4:94:d1:db:7e:90:ec:5c:c5:ed:9d:3f:c0:
         3b:63:1b:26:e7:15:12:3f:fd:5f:18:1d:eb:02:8e:ad:cc:5a:
         10:ce:0f:bb:b3:88:53:16:8b:4c:d9:0f:5d:96:44:c7:a0:ab:
         b4:49:ec:de:af:e2:03:f0:0b:6d:28:0e:33:84:44:97:04:68:
         78:71:fb:e0:c6:d0:0c:37:8f:c4:0e:f5:ca:88:ae:c3:d9:cf:
         20:3d:88:a2:05:e0:1c:d7:a1:95:8a:9f:30:04:cc:f6:bd:44:
         02:77:44:16:45:47:27:44:bd:01:8e:91:ff:49:6c:07:88:85:
         c8:08:5a:14:d2:0d:25:b0:20:31:2a:d9:d0:0c:51:cb:02:e1:
         22:01:f0:69:6a:6d:5d:81:85:49:f7:7d:35:35:33:1f:69:98:
         9b:f5:2b:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++/k+Kg9YbrOXNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
OTM4OGMyYjgtODcyZi00ZDgwLThlMDQtOTdkM2M0MDIzNzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ4mEb1UZN2g5XQcDWSp6QWKh+k4dEv830Dj
gHmaZ9iccHABA38nFcAl5XlvoBbDUz1qqTnYJLd58VfO0+5RT8+pm+6azHWDfXdl
so/4jLBin75Cv5iZqmQDIoIpsIVG7vDNLEuBwA6s/PAk+tA1a7WZEoa3D1p4Lk0t
5m6Fcpa6b4jpWDPCTARuJEFtxjKX06d/NqvJpOTSrSryuIg9ZlzOMv5ojFJd2s2C
8suCJ5O1GQzuXQaqqyNCt56okvknYdoNjGUko6WViDpokQqazjVlZn5D+AAYc3Tv
G3GxtotRg2ugwJB7PwYWPC4+JRMCOPdwaO4x53SE4YoBdFiFXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtJRLTcnWNpg0Kib2iNi4UlA3IhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU4ZWUzMmQtZDljNy0z
OWEyLTg3ODctYmNlMmE4NTZhNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrQ3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAd+isD8OxdqvdJYPtUaeu9rYoe0hOmnwVw/kEDDCqSvdJbNAaZLm4Ye
Qd+MauutAAKlmawy8ZLXbLo0F9QKFyaW+m3V6xTTRZQ0zDX2/wOhSvzdQ0AxjkPz
4HHnCkba9JTR236Q7FzF7Z0/wDtjGybnFRI//V8YHesCjq3MWhDOD7uziFMWi0zZ
D12WRMegq7RJ7N6v4gPwC20oDjOERJcEaHhx++DG0Aw3j8QO9cqIrsPZzyA9iKIF
4BzXoZWKnzAEzPa9RAJ3RBZFRydEvQGOkf9JbAeIhcgIWhTSDSWwIDEq2dAMUcsC
4SIB8GlqbV2BhUn3fTU1Mx9pmJv1K24=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:02:36 2024 by rpki-client on console-ams.rpki-client.org