Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3591064-5ff2-33d5-be8a-d563793846b3.roa
File:                     b3591064-5ff2-33d5-be8a-d563793846b3.roa (raw, json)
Hash identifier:          MEGuqsBvpHsZRYHH8RptbHmVJAlimIYIw+wC5DJ22M8=
Subject key identifier:   CD:4E:14:F5:28:C9:B7:9D:18:15:6F:24:93:AF:A6:C2:AE:E8:DF:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC895C83019A9F5B37A293C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3591064-5ff2-33d5-be8a-d563793846b3.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33287
IP address blocks:        73.195.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:5c:83:01:9a:9f:5b:37:a2:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=c7c3c2a7-2dd3-4dc4-b4a1-1a8904a1d00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:67:dc:b5:93:13:ff:fa:80:5f:2f:71:fd:b4:
                    9a:2e:68:73:1c:1b:d5:4a:1e:f4:77:67:3b:a3:e4:
                    fa:86:a9:bc:f8:83:d6:7a:c9:1f:a2:d0:4c:46:51:
                    80:20:28:6f:ff:bb:8f:17:a6:3f:55:1b:02:fa:f4:
                    a7:7d:98:be:28:ea:35:0d:66:89:6c:fe:d5:bb:5a:
                    26:d5:fb:25:d4:29:7c:4d:50:b9:f9:bb:08:ba:cc:
                    e3:1b:ca:e6:c7:0b:0e:b4:ec:b2:dc:da:2e:92:58:
                    d5:af:20:4c:9d:d2:cb:e0:cd:26:f3:bc:9e:eb:cc:
                    88:74:2b:47:81:7d:33:84:e8:6a:69:7a:3f:ae:4d:
                    7a:af:fc:80:e5:bd:7c:cd:da:87:1e:10:06:9b:72:
                    65:a8:f0:86:68:4d:65:20:e8:2a:e5:cc:b9:68:ba:
                    cd:99:e7:da:92:62:e7:c8:3b:87:f1:20:3c:0a:6e:
                    a2:4f:69:0f:b4:73:16:45:eb:11:ec:f9:bc:3c:7a:
                    06:d5:f7:57:df:70:44:bc:57:aa:aa:92:db:16:42:
                    8f:a5:9e:1e:ef:59:10:13:2f:09:94:ab:31:e6:f6:
                    f4:c6:44:c2:59:8f:78:5f:6a:aa:0b:23:de:21:db:
                    3a:d7:1c:bb:e4:96:d4:d5:51:6a:b4:01:93:71:3f:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4E:14:F5:28:C9:B7:9D:18:15:6F:24:93:AF:A6:C2:AE:E8:DF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3591064-5ff2-33d5-be8a-d563793846b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.195.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ef:50:25:e0:43:56:a1:b7:04:e4:4d:af:f6:1b:14:ed:55:
         9e:84:63:06:6e:86:d4:37:ed:fb:e3:eb:72:8a:8f:ad:8d:c1:
         8c:24:81:39:11:be:b6:05:0a:ec:76:7d:94:42:36:7e:29:36:
         64:93:34:c6:68:87:5c:be:0e:97:9a:c2:5a:c0:36:31:9d:d0:
         07:6a:7b:38:39:fe:00:be:40:95:30:da:5e:b4:0c:ee:8d:f4:
         a4:bd:ee:c8:89:9b:61:8b:63:53:d9:22:cd:1b:d5:15:ce:db:
         dd:0d:1b:41:0c:7c:2e:22:9f:16:70:47:c4:65:15:4a:91:24:
         ee:9a:7a:2e:d4:1a:7f:1e:e3:75:6e:00:84:c4:e8:1e:21:b5:
         10:da:d5:3a:c0:f8:24:41:eb:68:6d:95:07:fd:27:60:55:71:
         0e:b0:91:7c:c3:d7:94:90:38:ae:e6:85:93:b7:a4:a7:44:cb:
         25:a1:c2:b6:ae:ec:28:ca:17:b1:ca:b0:20:32:60:49:03:a1:
         99:7c:13:76:0a:17:ba:11:80:8a:1a:e0:89:6a:d1:bc:0c:62:
         1e:57:73:cf:d9:55:a7:04:fc:44:c3:1b:13:44:a9:0e:6c:fe:
         56:40:2f:0e:dd:1e:1e:b8:5d:eb:37:90:0c:05:44:53:cd:37:
         da:aa:c5:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiVyDAZqfWzeik8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
YzdjM2MyYTctMmRkMy00ZGM0LWI0YTEtMWE4OTA0YTFkMDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2fctZMT//qAXy9x/bSaLmhzHBvVSh70d2c7
o+T6hqm8+IPWeskfotBMRlGAIChv/7uPF6Y/VRsC+vSnfZi+KOo1DWaJbP7Vu1om
1fsl1Cl8TVC5+bsIuszjG8rmxwsOtOyy3NoukljVryBMndLL4M0m87ye68yIdCtH
gX0zhOhqaXo/rk16r/yA5b18zdqHHhAGm3JlqPCGaE1lIOgq5cy5aLrNmefakmLn
yDuH8SA8Cm6iT2kPtHMWResR7Pm8PHoG1fdX33BEvFeqqpLbFkKPpZ4e71kQEy8J
lKsx5vb0xkTCWY94X2qqCyPeIds61xy75JbU1VFqtAGTcT8RFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM1OFPUoybedGBVvJJOvpsKu6N+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjM1OTEwNjQtNWZmMi0z
M2Q1LWJlOGEtZDU2Mzc5Mzg0NmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScMqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLvUCXgQ1ahtwTkTa/2GxTtVZ6EYwZuhtQ37fvj63KKj62NwYwkgTkR
vrYFCux2fZRCNn4pNmSTNMZoh1y+DpeawlrANjGd0Adqezg5/gC+QJUw2l60DO6N
9KS97siJm2GLY1PZIs0b1RXO290NG0EMfC4inxZwR8RlFUqRJO6aei7UGn8e43Vu
AITE6B4htRDa1TrA+CRB62htlQf9J2BVcQ6wkXzD15SQOK7mhZO3pKdEyyWhwrau
7CjKF7HKsCAyYEkDoZl8E3YKF7oRgIoa4Ilq0bwMYh5Xc8/ZVacE/ETDGxNEqQ5s
/lZALw7dHh64Xes3kAwFRFPNN9qqxfo=
-----END CERTIFICATE-----
Generated at Sun May 5 02:45:08 2024 by rpki-client on console-fra.rpki-client.org