Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfb3d811-cc42-39df-ae3c-6d62b2755435.roa
File:                     bfb3d811-cc42-39df-ae3c-6d62b2755435.roa (raw, json)
Hash identifier:          F1MHaKRcTTnhQkfRxGuCrHE+hQdRGKZVvtY0ix+2rHA=
Subject key identifier:   2C:38:CC:EC:91:00:03:DC:9F:B4:2D:EE:86:DB:CD:1B:B3:EC:76:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC890F12E2B95E5847905CD8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfb3d811-cc42-39df-ae3c-6d62b2755435.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.160.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:0f:12:e2:b9:5e:58:47:90:5c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=f4b29722-131a-47e6-896e-f6924cd2e179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:c1:9d:3d:d7:01:de:dd:b0:64:2f:5b:ff:
                    30:2b:0a:6c:cd:18:ae:ee:c8:5c:84:3f:68:ae:1f:
                    e4:17:87:63:62:36:41:0b:08:5c:6d:77:6b:62:ab:
                    eb:01:38:32:18:83:12:6e:af:c6:7f:d0:89:87:c7:
                    15:9a:d6:cb:ab:88:93:ca:f1:9b:fa:49:15:e7:af:
                    1f:ea:06:0e:61:40:31:99:94:14:16:75:2b:21:ad:
                    43:db:84:7c:11:0b:7d:cd:4c:e5:52:8b:74:5f:44:
                    41:d7:4f:5e:14:e6:ca:cf:a5:ab:7e:89:63:fb:f0:
                    fb:33:14:c5:a2:27:92:d5:38:c1:5c:ee:0b:19:a6:
                    23:05:01:bb:36:7e:a9:a4:10:84:3a:6c:0c:ab:df:
                    db:0e:cb:04:83:c2:a8:58:d0:bb:69:b3:12:0f:19:
                    8b:30:91:76:6d:ce:4f:f9:dd:6d:9e:87:a1:86:25:
                    ca:52:08:61:b3:fd:dc:3f:3b:98:c8:37:26:6e:48:
                    85:e9:27:9c:f8:76:fe:4e:2b:8c:63:df:bc:d7:cb:
                    32:22:fa:f5:65:2d:f2:3b:40:8f:a9:93:7e:74:1c:
                    2f:f5:55:ba:23:a5:08:cd:47:86:55:9a:df:6d:ba:
                    e9:a4:94:53:7b:a0:22:c1:23:f7:ff:a8:e8:ab:de:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:38:CC:EC:91:00:03:DC:9F:B4:2D:EE:86:DB:CD:1B:B3:EC:76:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfb3d811-cc42-39df-ae3c-6d62b2755435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:eb:bf:8d:25:dd:61:50:af:1a:84:17:af:b1:c8:b6:4b:
         da:63:d2:aa:59:49:72:f0:bb:22:de:27:74:45:42:28:1d:07:
         a2:bd:0c:89:8a:d7:b0:91:3c:8e:b9:91:de:c8:b5:12:76:82:
         c5:0d:4e:28:dd:12:73:7f:c7:ee:9a:8a:89:d7:ea:fb:dd:9c:
         d6:06:c4:d8:73:e9:6a:3b:3b:4a:7d:7e:fe:62:49:36:5e:24:
         78:8d:15:2d:d3:53:a0:f4:4f:de:31:10:c1:10:9c:bd:f2:f7:
         1f:d8:2a:60:18:56:29:18:bc:24:4b:c8:2c:4f:60:84:66:89:
         d1:3b:09:1a:84:cd:f3:83:27:ec:4a:02:09:40:83:5c:93:83:
         b3:76:ba:d5:4d:50:e6:96:ba:2d:44:00:49:92:8b:3a:3c:4a:
         a2:59:7c:92:80:fe:da:3e:3d:d8:82:b8:eb:46:67:44:31:f8:
         62:60:a9:aa:a4:28:4b:de:45:ce:9e:55:aa:bb:4f:6b:c7:3b:
         93:a7:21:ee:45:e8:f2:fc:65:c8:61:af:d3:4f:f5:d3:88:d1:
         05:72:86:5f:72:96:ec:a2:8c:85:41:b8:5e:26:06:59:23:1a:
         c1:40:46:77:67:0e:95:6e:ad:a4:30:96:03:39:02:01:38:a7:
         a4:04:92:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiQ8S4rleWEeQXNgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
ZjRiMjk3MjItMTMxYS00N2U2LTg5NmUtZjY5MjRjZDJlMTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSbBnT3XAd7dsGQvW/8wKwpszRiu7shchD9o
rh/kF4djYjZBCwhcbXdrYqvrATgyGIMSbq/Gf9CJh8cVmtbLq4iTyvGb+kkV568f
6gYOYUAxmZQUFnUrIa1D24R8EQt9zUzlUot0X0RB109eFObKz6Wrfolj+/D7MxTF
oieS1TjBXO4LGaYjBQG7Nn6ppBCEOmwMq9/bDssEg8KoWNC7abMSDxmLMJF2bc5P
+d1tnoehhiXKUghhs/3cPzuYyDcmbkiF6Sec+Hb+TiuMY9+818syIvr1ZS3yO0CP
qZN+dBwv9VW6I6UIzUeGVZrfbbrppJRTe6AiwSP3/6joq95sQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCw4zOyRAAPcn7Qt7obbzRuz7HZxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZiM2Q4MTEtY2M0Mi0z
OWRmLWFlM2MtNmQ2MmIyNzU1NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaDWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgd67+NJd1hUK8ahBevsci2S9pj0qpZSXLwuyLeJ3RFQigdB6K9DImK
17CRPI65kd7ItRJ2gsUNTijdEnN/x+6aionX6vvdnNYGxNhz6Wo7O0p9fv5iSTZe
JHiNFS3TU6D0T94xEMEQnL3y9x/YKmAYVikYvCRLyCxPYIRmidE7CRqEzfODJ+xK
AglAg1yTg7N2utVNUOaWui1EAEmSizo8SqJZfJKA/to+PdiCuOtGZ0Qx+GJgqaqk
KEveRc6eVaq7T2vHO5OnIe5F6PL8Zchhr9NP9dOI0QVyhl9yluyijIVBuF4mBlkj
GsFARndnDpVuraQwlgM5AgE4p6QEkuo=
-----END CERTIFICATE-----
Generated at Sun May 5 02:21:38 2024 by rpki-client on console-ams.rpki-client.org