Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9ab0802-a480-36f8-b63e-8925398b579e.roa
File:                     a9ab0802-a480-36f8-b63e-8925398b579e.roa (raw, json)
Hash identifier:          4/TtgB8n9F+wSP3aVcSLE1zGmANAQtprjUZcxMQ9SWg=
Subject key identifier:   83:11:A6:1C:0A:1C:38:C6:94:94:05:09:0A:CC:62:18:31:9E:DC:0F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EA3A49E7C00A2143C4100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9ab0802-a480-36f8-b63e-8925398b579e.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        174.166.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:a3:a4:9e:7c:00:a2:14:3c:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=eb1b999b-e8af-4075-9729-224a83db15ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:cb:de:96:bb:53:a2:a4:3b:5e:37:a4:b2:
                    65:96:8b:12:16:2a:77:ea:64:35:6f:65:c9:8d:ab:
                    3b:da:7c:aa:8b:37:d5:31:4a:3f:b6:5b:de:23:12:
                    22:e7:c5:34:b1:3e:f3:0f:fb:79:d7:50:26:55:00:
                    bf:1a:74:f4:e5:0d:1a:c4:38:bc:81:5b:c7:07:5b:
                    af:c0:57:ed:13:b4:f7:e9:e6:36:d9:2c:10:a3:0a:
                    86:5d:c5:fe:da:1b:e8:11:d2:e0:6d:1b:29:db:0b:
                    9f:00:75:e3:13:c8:f0:f3:79:04:00:01:d1:07:12:
                    5d:9d:b5:3f:c4:a2:d6:60:73:95:8a:24:db:d9:61:
                    f0:e6:f9:53:f1:62:41:e6:b0:f1:24:4a:bf:58:83:
                    d6:4f:61:fc:91:e5:35:02:57:a5:1d:ac:c1:08:c0:
                    53:a7:ba:30:1d:cf:b9:1d:1d:1e:37:da:7e:54:44:
                    1e:3e:40:27:98:9c:a9:b6:02:31:85:fe:40:e9:3e:
                    5b:d0:73:7a:c6:b9:d3:8f:62:16:72:91:b2:db:39:
                    a9:0f:13:b2:cc:66:c4:78:91:7a:5b:46:e3:a4:d4:
                    19:22:e8:8f:ab:6f:d5:05:ba:57:c6:bd:dc:5c:87:
                    33:45:20:86:69:d0:a7:91:8d:3b:1f:81:82:9e:a0:
                    e6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:11:A6:1C:0A:1C:38:C6:94:94:05:09:0A:CC:62:18:31:9E:DC:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9ab0802-a480-36f8-b63e-8925398b579e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.166.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:dc:58:b9:33:de:75:df:2b:e3:31:97:a1:44:de:22:49:88:
         85:91:61:6b:af:e4:c4:80:ab:d2:e1:0e:b2:ee:f3:85:f8:78:
         8e:89:a1:56:1d:1c:64:7a:04:be:c3:cb:64:92:a7:a8:17:df:
         76:5b:a6:5e:7e:dd:5d:17:89:19:32:c5:e1:26:16:12:9e:ee:
         79:cd:6c:84:c5:68:58:4c:0f:3a:d2:fe:3a:e3:d5:2d:a0:f6:
         40:03:ac:31:56:73:8b:fa:a9:04:a4:ea:fa:32:a9:3a:68:fe:
         4a:da:29:41:47:68:fe:d0:d9:03:d6:73:c0:52:dd:4b:a1:b2:
         3f:37:16:74:8d:a4:0a:56:38:e8:8e:97:dd:79:95:66:50:43:
         2e:56:23:cd:91:65:8b:6b:50:a9:5d:cb:cd:2e:ac:fc:e7:35:
         6a:73:95:d9:a0:fb:9b:21:29:ac:45:67:45:18:d9:d3:52:10:
         91:21:be:0c:c6:41:6b:18:9b:bf:ce:31:3f:fc:80:9a:72:47:
         7d:16:af:12:80:04:1e:db:f7:04:29:d3:d8:c8:c2:6c:bb:62:
         8f:7f:85:20:e6:36:a8:13:5e:e9:a2:4f:92:d6:ae:e7:f1:af:
         3f:d5:75:71:f4:e0:f1:69:bd:49:03:d3:d9:92:7f:59:4a:23:
         4f:da:ce:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnqOknnwAohQ8QQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZWIxYjk5OWItZThhZi00MDc1LTk3MjktMjI0YTgzZGIxNWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooXL3pa7U6KkO143pLJllosSFip36mQ1b2XJ
jas72nyqizfVMUo/tlveIxIi58U0sT7zD/t511AmVQC/GnT05Q0axDi8gVvHB1uv
wFftE7T36eY22SwQowqGXcX+2hvoEdLgbRsp2wufAHXjE8jw83kEAAHRBxJdnbU/
xKLWYHOViiTb2WHw5vlT8WJB5rDxJEq/WIPWT2H8keU1AlelHazBCMBTp7owHc+5
HR0eN9p+VEQePkAnmJyptgIxhf5A6T5b0HN6xrnTj2IWcpGy2zmpDxOyzGbEeJF6
W0bjpNQZIuiPq2/VBbpXxr3cXIczRSCGadCnkY07H4GCnqDmYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMRphwKHDjGlJQFCQrMYhgxntwPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlhYjA4MDItYTQ4MC0z
NmY4LWI2M2UtODkyNTM5OGI1NzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqYkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMrcWLkz3nXfK+Mxl6FE3iJJiIWRYWuv5MSAq9LhDrLu84X4eI6JoVYd
HGR6BL7Dy2SSp6gX33Zbpl5+3V0XiRkyxeEmFhKe7nnNbITFaFhMDzrS/jrj1S2g
9kADrDFWc4v6qQSk6voyqTpo/kraKUFHaP7Q2QPWc8BS3Uuhsj83FnSNpApWOOiO
l915lWZQQy5WI82RZYtrUKldy80urPznNWpzldmg+5shKaxFZ0UY2dNSEJEhvgzG
QWsYm7/OMT/8gJpyR30WrxKABB7b9wQp09jIwmy7Yo9/hSDmNqgTXumiT5LWrufx
rz/VdXH04PFpvUkD09mSf1lKI0/azts=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:31:59 2024 by rpki-client on console-fra.rpki-client.org