Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c667d4c6-415f-369c-a5bd-2b89b840f9b9.roa
File:                     c667d4c6-415f-369c-a5bd-2b89b840f9b9.roa (raw, json)
Hash identifier:          MW6j+XtXFf9waFzIkju+uREKCTXx6gCIchNrJVpXfJg=
Subject key identifier:   14:B1:6E:AF:1B:66:E7:FE:12:C0:BB:57:76:33:61:81:A3:34:F4:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF700DEBD6DC26220729400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c667d4c6-415f-369c-a5bd-2b89b840f9b9.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        76.129.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:00:de:bd:6d:c2:62:20:72:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=44b6d87e-03f0-40b4-9374-fb42b09d9725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:55:77:dc:8b:28:1f:02:e5:34:67:58:b0:
                    94:76:39:15:95:f8:2e:b7:7d:86:76:cf:55:ab:cc:
                    29:29:01:25:c7:7f:3c:ea:6b:a8:fa:b7:8d:42:fb:
                    b3:4e:88:a6:de:3d:3b:b4:1a:4d:c5:a9:c1:22:a7:
                    b6:9c:f6:f1:9b:e1:e4:b0:10:ed:e3:48:e4:86:a9:
                    86:97:f2:ff:b0:e6:53:ab:c5:7d:fb:80:de:43:4a:
                    0d:fa:bf:06:9f:6e:c3:f8:2f:59:ed:b2:a3:b0:6d:
                    8f:ca:85:a1:ff:ff:dc:79:f4:30:50:b4:be:11:ac:
                    c4:1c:6a:0e:8e:4d:50:0a:2b:68:5a:39:19:38:50:
                    fe:81:10:f4:6d:03:f9:f3:29:1a:75:a2:36:c7:c6:
                    c5:56:e6:31:74:c3:15:f5:46:bd:3e:1d:19:f2:57:
                    4b:f8:70:2d:7d:79:01:87:5a:74:ed:88:97:19:86:
                    e7:2c:d0:22:d1:69:0e:f8:f8:67:ec:4d:9c:fe:41:
                    a2:5b:41:3a:33:31:80:a9:bc:aa:ff:bf:d5:0a:79:
                    07:e6:9a:3d:3c:d7:97:0c:c2:e6:08:91:24:5d:33:
                    d6:00:c4:26:f0:2d:5f:c2:54:5e:78:5b:9d:22:8a:
                    b6:1e:c2:a8:25:d5:0e:dc:8c:0b:a5:79:04:25:3e:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B1:6E:AF:1B:66:E7:FE:12:C0:BB:57:76:33:61:81:A3:34:F4:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c667d4c6-415f-369c-a5bd-2b89b840f9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:76:8d:3e:6f:d2:df:05:17:45:16:36:b1:2a:94:61:98:
         ee:08:08:3c:f6:b1:81:75:99:df:8e:5a:a8:1b:05:c4:8f:1f:
         cd:7f:8d:7c:e6:90:19:56:84:da:0c:88:64:f5:f9:f7:b5:62:
         82:83:3d:97:24:94:d3:b5:8f:aa:97:4b:ba:83:31:50:b4:b3:
         56:d7:42:98:5d:45:b6:6d:dd:85:59:a4:dc:99:14:24:92:f5:
         fb:02:bc:e6:6f:ff:82:a5:97:13:22:ee:19:96:09:32:22:96:
         72:82:d6:95:c1:e0:ff:26:2d:c4:be:55:00:fd:4a:f5:ef:58:
         09:f5:ce:88:bb:73:05:62:2c:be:71:69:d5:d7:86:80:2f:11:
         48:c2:89:5f:f5:a0:3c:16:34:7a:4f:12:e6:cd:6c:2c:3a:e8:
         31:6d:77:8a:89:2d:c6:fe:8f:f9:e3:c7:72:52:89:e4:82:cc:
         43:d4:d2:8c:d3:e7:7d:29:96:a3:b5:35:6c:3c:b1:7d:7e:aa:
         d1:e7:6a:21:bf:21:44:51:11:29:cc:83:c7:41:22:15:14:4e:
         3c:0a:3a:6a:26:51:67:45:d3:ea:65:75:86:c2:63:e7:60:c0:
         23:22:e0:1d:42:4a:83:bd:a1:67:3d:7a:8e:d6:41:df:e2:4a:
         49:ec:b5:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9wDevW3CYiBylAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NDRiNmQ4N2UtMDNmMC00MGI0LTkzNzQtZmI0MmIwOWQ5NzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsBVd9yLKB8C5TRnWLCUdjkVlfgut32Gds9V
q8wpKQElx3886muo+reNQvuzToim3j07tBpNxanBIqe2nPbxm+HksBDt40jkhqmG
l/L/sOZTq8V9+4DeQ0oN+r8Gn27D+C9Z7bKjsG2PyoWh///cefQwULS+EazEHGoO
jk1QCitoWjkZOFD+gRD0bQP58ykadaI2x8bFVuYxdMMV9Ua9Ph0Z8ldL+HAtfXkB
h1p07YiXGYbnLNAi0WkO+Phn7E2c/kGiW0E6MzGAqbyq/7/VCnkH5po9PNeXDMLm
CJEkXTPWAMQm8C1fwlReeFudIoq2HsKoJdUO3IwLpXkEJT4yKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSxbq8bZuf+EsC7V3YzYYGjNPSVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzY2N2Q0YzYtNDE1Zi0z
NjljLWE1YmQtMmI4OWI4NDBmOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIHoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsbdo0+b9LfBRdFFjaxKpRhmO4ICDz2sYF1md+OWqgbBcSPH81/jXzm
kBlWhNoMiGT1+fe1YoKDPZcklNO1j6qXS7qDMVC0s1bXQphdRbZt3YVZpNyZFCSS
9fsCvOZv/4KllxMi7hmWCTIilnKC1pXB4P8mLcS+VQD9SvXvWAn1zoi7cwViLL5x
adXXhoAvEUjCiV/1oDwWNHpPEubNbCw66DFtd4qJLcb+j/njx3JSieSCzEPU0ozT
530plqO1NWw8sX1+qtHnaiG/IURRESnMg8dBIhUUTjwKOmomUWdF0+pldYbCY+dg
wCMi4B1CSoO9oWc9eo7WQd/iSknstaI=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:18:07 2024 by rpki-client on console-ams.rpki-client.org