Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3798f3e-de81-3298-989f-23615054fc88.roa
File:                     c3798f3e-de81-3298-989f-23615054fc88.roa (raw, json)
Hash identifier:          NxKez3HDioHonyCpFApezl+8V0T83x6S7mCaMn8p7vA=
Subject key identifier:   AA:47:2B:49:5C:B2:1B:9C:94:3F:49:E5:21:FE:36:DB:08:B2:20:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC89A50F5EFE3E440822C040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3798f3e-de81-3298-989f-23615054fc88.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33659
IP address blocks:        73.160.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:89:a5:0f:5e:fe:3e:44:08:22:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=747c539f-4b19-4210-b661-7a1ca7892f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:a8:82:5d:e0:72:fd:0d:43:c9:6e:40:a0:
                    fe:19:2b:3c:82:ef:f1:74:bc:2d:48:9b:f6:13:ea:
                    d9:f7:6a:58:13:b3:4d:46:72:20:fe:52:86:7b:82:
                    82:95:a9:42:db:91:6a:3c:6f:d0:6c:9c:61:12:9c:
                    71:95:03:f6:8a:22:32:35:93:43:db:e7:c9:e3:ae:
                    d7:54:62:6c:2f:25:f1:44:00:e6:c5:22:ea:14:8c:
                    e4:67:b7:4b:47:c7:18:fe:5d:f4:61:5c:b1:4e:27:
                    71:ef:56:a5:aa:51:79:92:76:d4:c8:b1:67:cb:49:
                    67:27:27:67:f3:09:cc:4e:db:2c:20:8f:6c:75:0d:
                    50:76:5c:1a:34:fb:44:0a:27:a6:96:22:d5:29:43:
                    ae:57:17:8d:ae:56:4c:e9:1a:93:db:32:bd:70:1a:
                    6b:9a:b4:0c:19:9a:a9:d0:91:62:f2:46:d0:4b:5a:
                    31:f5:b1:a3:77:5c:b3:81:bb:5c:6e:57:cf:a5:07:
                    56:71:6f:9c:8b:26:21:1e:f7:64:b5:cb:ab:b5:74:
                    df:cc:8b:4e:eb:46:73:72:0c:af:32:88:38:bd:a2:
                    45:cd:1a:8b:6d:bf:1e:f6:b3:1a:ac:01:4b:93:05:
                    b2:ca:88:9b:51:a8:02:fd:da:f5:13:b6:0c:9a:3e:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:47:2B:49:5C:B2:1B:9C:94:3F:49:E5:21:FE:36:DB:08:B2:20:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3798f3e-de81-3298-989f-23615054fc88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:39:80:45:20:30:3c:50:19:d9:a2:08:29:c2:7b:39:95:61:
         4a:32:46:e8:8c:91:3c:d0:db:9f:43:77:45:db:7c:de:74:06:
         89:13:bf:e0:c4:53:74:33:96:43:99:90:3d:5f:9d:d3:df:fb:
         a5:64:1d:be:7b:52:85:55:02:2d:13:44:b3:b8:3f:27:fa:b9:
         47:38:37:a7:e0:9f:21:0d:57:3c:fc:fd:1a:e7:d5:d3:8d:c4:
         55:08:46:17:e3:c5:86:0b:37:fa:5c:bc:25:d9:c9:2c:8c:0c:
         21:c0:58:0a:31:2a:40:51:ee:43:63:04:2e:0a:f6:60:8c:f5:
         d4:22:de:dc:4d:3e:b8:66:f9:3f:a9:56:14:65:5a:ba:3d:3f:
         d4:95:ac:33:50:57:97:ff:f6:22:ba:c3:ea:99:12:01:0c:4a:
         ad:69:65:8c:e5:f1:69:40:62:47:7a:35:6a:ab:72:c7:84:14:
         ef:6e:8d:b3:93:31:e7:31:fa:bb:97:9a:e5:e8:48:b3:85:13:
         e2:2b:0e:5e:c7:a2:14:e8:dd:ee:5e:9f:93:82:66:b3:49:ab:
         87:e6:bf:10:ef:1a:ed:30:2b:8e:ba:65:95:fe:32:3a:05:8d:
         6c:3f:25:87:c4:f3:de:3c:df:53:37:75:d8:d1:72:20:67:ae:
         49:38:13:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiaUPXv4+RAgiwEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
NzQ3YzUzOWYtNGIxOS00MjEwLWI2NjEtN2ExY2E3ODkyZjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf6ogl3gcv0NQ8luQKD+GSs8gu/xdLwtSJv2
E+rZ92pYE7NNRnIg/lKGe4KClalC25FqPG/QbJxhEpxxlQP2iiIyNZND2+fJ467X
VGJsLyXxRADmxSLqFIzkZ7dLR8cY/l30YVyxTidx71alqlF5knbUyLFny0lnJydn
8wnMTtssII9sdQ1QdlwaNPtECiemliLVKUOuVxeNrlZM6RqT2zK9cBprmrQMGZqp
0JFi8kbQS1ox9bGjd1yzgbtcblfPpQdWcW+ciyYhHvdktcurtXTfzItO60Zzcgyv
Mog4vaJFzRqLbb8e9rMarAFLkwWyyoibUagC/dr1E7YMmj6QwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpHK0lcshuclD9J5SH+NtsIsiB0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzM3OThmM2UtZGU4MS0z
Mjk4LTk4OWYtMjM2MTUwNTRmYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEk5gEUgMDxQGdmiCCnCezmVYUoyRuiMkTzQ259Dd0XbfN50BokTv+DE
U3QzlkOZkD1fndPf+6VkHb57UoVVAi0TRLO4Pyf6uUc4N6fgnyENVzz8/Rrn1dON
xFUIRhfjxYYLN/pcvCXZySyMDCHAWAoxKkBR7kNjBC4K9mCM9dQi3txNPrhm+T+p
VhRlWro9P9SVrDNQV5f/9iK6w+qZEgEMSq1pZYzl8WlAYkd6NWqrcseEFO9ujbOT
Mecx+ruXmuXoSLOFE+IrDl7HohTo3e5en5OCZrNJq4fmvxDvGu0wK466ZZX+MjoF
jWw/JYfE894831M3ddjRciBnrkk4Ezk=
-----END CERTIFICATE-----
Generated at Sat May 4 14:57:15 2024 by rpki-client on console-ams.rpki-client.org