Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89d8f57-a76f-39fa-9382-fe86cf385d7d.roa
File:                     c89d8f57-a76f-39fa-9382-fe86cf385d7d.roa (raw, json)
Hash identifier:          80lEcSEuxHaurZmZRqlIdR3XObFIl74Yw+ocmBOeDwc=
Subject key identifier:   1F:A7:AA:C2:24:79:25:E9:D6:9B:E8:CC:E8:5D:1D:65:71:78:F4:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C60E8E5B0F9666C5C9FF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89d8f57-a76f-39fa-9382-fe86cf385d7d.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        73.157.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:0e:8e:5b:0f:96:66:c5:c9:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=7e3aa05b-2765-4254-8236-31499adf44b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:3c:76:f2:7e:7b:33:fd:79:95:2b:3d:c8:
                    98:66:4d:a7:6b:96:8f:e3:5e:2e:0b:8e:c1:72:a2:
                    b2:f7:bc:32:1c:21:71:d1:73:99:7d:d4:23:dd:75:
                    b0:a7:04:90:07:a5:82:17:88:dd:ae:05:2d:a0:f4:
                    7f:ce:65:bf:76:f4:92:08:4c:e5:59:02:45:32:29:
                    e1:cc:4f:28:cc:1f:f3:71:3f:1a:61:a9:b7:b7:7b:
                    75:92:76:47:81:6e:b0:d8:4b:04:88:93:28:3d:83:
                    29:ad:80:61:a7:0a:84:04:f5:c8:a0:5f:78:71:70:
                    c3:80:49:40:f9:df:34:40:70:2a:ec:7b:17:25:ad:
                    3d:ce:37:f9:65:02:70:cb:21:33:ca:d3:0a:60:c8:
                    1f:72:b3:dc:f3:47:e3:a6:16:8d:d7:08:85:27:76:
                    96:7a:a9:45:e0:db:20:b7:72:31:60:2b:19:61:03:
                    b2:72:c1:c8:b5:f6:42:e2:af:b6:53:c0:00:b6:88:
                    74:ff:8e:ee:0d:43:07:ee:49:07:5d:b1:af:e3:e9:
                    7c:f4:62:78:23:cc:2f:54:cb:b8:05:c3:34:15:99:
                    13:b5:d9:6b:5a:22:c0:92:d8:42:dd:d1:f9:c8:64:
                    cf:6e:ce:48:60:bb:31:40:bb:c6:24:2e:8d:4c:bf:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A7:AA:C2:24:79:25:E9:D6:9B:E8:CC:E8:5D:1D:65:71:78:F4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89d8f57-a76f-39fa-9382-fe86cf385d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.157.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:66:5e:af:49:bb:53:b2:05:5f:da:19:b9:54:2c:3a:c5:cb:
         54:5c:a1:a0:ef:df:8b:1c:aa:60:e3:b0:26:c1:98:78:6d:b9:
         91:c9:7b:ec:c3:c6:b3:89:c9:a4:d8:d5:7c:ee:c0:86:8b:4a:
         bf:b0:63:d8:6d:69:79:cc:02:6d:1b:7b:dc:c6:8d:9f:c2:d4:
         3e:a1:6a:53:24:1d:a3:b5:08:05:43:f8:56:71:65:19:4f:2c:
         f0:22:d0:cc:99:c8:04:05:e3:ed:e6:bc:14:de:42:e2:5d:e5:
         e0:21:40:72:33:87:97:f9:3b:74:15:18:c6:53:dd:98:b3:85:
         cc:2b:72:5e:79:f8:fa:4a:2d:c6:47:90:ca:97:9a:94:ad:72:
         46:44:12:00:32:31:c6:c7:43:39:dc:1e:1c:ce:92:0d:97:07:
         2d:0a:db:45:05:c5:1f:c3:89:85:4d:53:79:9b:d6:a7:f6:6a:
         0d:14:9a:15:ea:27:0c:87:02:87:dc:dc:83:e3:a7:2d:d1:60:
         b9:bf:65:cc:6f:4c:24:df:6b:e9:99:77:93:53:69:bc:66:87:
         d5:63:7f:37:28:5c:0a:f7:55:51:78:26:bf:a4:75:c3:9b:c7:
         6a:8f:76:94:28:fa:1c:ba:18:eb:de:f2:06:04:16:f5:3a:bd:
         4a:7b:11:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xg6OWw+WZsXJ/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
N2UzYWEwNWItMjc2NS00MjU0LTgyMzYtMzE0OTlhZGY0NGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWk8dvJ+ezP9eZUrPciYZk2na5aP414uC47B
cqKy97wyHCFx0XOZfdQj3XWwpwSQB6WCF4jdrgUtoPR/zmW/dvSSCEzlWQJFMinh
zE8ozB/zcT8aYam3t3t1knZHgW6w2EsEiJMoPYMprYBhpwqEBPXIoF94cXDDgElA
+d80QHAq7HsXJa09zjf5ZQJwyyEzytMKYMgfcrPc80fjphaN1wiFJ3aWeqlF4Nsg
t3IxYCsZYQOycsHItfZC4q+2U8AAtoh0/47uDUMH7kkHXbGv4+l89GJ4I8wvVMu4
BcM0FZkTtdlrWiLAkthC3dH5yGTPbs5IYLsxQLvGJC6NTL+6pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+nqsIkeSXp1pvozOhdHWVxePSMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzg5ZDhmNTctYTc2Zi0z
OWZhLTkzODItZmU4NmNmMzg1ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ2qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABpmXq9Ju1OyBV/aGblULDrFy1RcoaDv34scqmDjsCbBmHhtuZHJe+zD
xrOJyaTY1XzuwIaLSr+wY9htaXnMAm0be9zGjZ/C1D6halMkHaO1CAVD+FZxZRlP
LPAi0MyZyAQF4+3mvBTeQuJd5eAhQHIzh5f5O3QVGMZT3Zizhcwrcl55+PpKLcZH
kMqXmpStckZEEgAyMcbHQzncHhzOkg2XBy0K20UFxR/DiYVNU3mb1qf2ag0UmhXq
JwyHAofc3IPjpy3RYLm/ZcxvTCTfa+mZd5NTabxmh9VjfzcoXAr3VVF4Jr+kdcOb
x2qPdpQo+hy6GOve8gYEFvU6vUp7EeQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:34:37 2024 by rpki-client on console-fra.rpki-client.org