Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd6798fb-51ee-3a22-97a3-a02f0087daab.roa
File:                     cd6798fb-51ee-3a22-97a3-a02f0087daab.roa (raw, json)
Hash identifier:          ljc5WyBPtJPBPte8iS0eXHC9WmFFhx8YR7/DESsRfVg=
Subject key identifier:   38:A2:B8:80:C4:5D:90:4F:24:C6:AC:6D:B0:FC:44:97:C7:67:42:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C71C07F59EE0360D5F6CF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd6798fb-51ee-3a22-97a3-a02f0087daab.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.68.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:1c:07:f5:9e:e0:36:0d:5f:6c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=2f752d20-3a06-4e4d-80f6-1284baee8996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:67:83:2e:bd:27:09:b7:bd:a8:ac:f3:78:
                    b7:da:db:c8:38:6c:3d:cf:97:ec:cb:89:dd:32:9d:
                    38:b1:b0:bb:4a:1c:88:8d:f9:57:92:cf:de:b8:9e:
                    5e:06:b1:6f:52:83:cb:c3:e9:23:bc:e6:eb:d4:3e:
                    18:94:d9:94:30:35:09:ac:75:d1:37:fb:b0:6b:18:
                    1f:73:f2:3a:74:c2:17:d3:26:8e:41:e9:5a:fa:6a:
                    66:35:3f:55:31:d7:c9:47:51:46:cb:93:05:df:d1:
                    dd:f8:c2:78:4b:c2:f5:99:8d:f1:06:22:78:d4:95:
                    ea:82:cb:78:d9:45:74:0c:9c:34:e6:4e:41:d5:37:
                    7e:57:ff:04:70:e3:d4:d3:2e:3f:1d:c6:76:c8:0c:
                    ca:e2:86:28:f8:6b:f3:5b:98:93:40:be:66:02:70:
                    51:a5:ef:1b:c3:c3:42:03:6e:48:f9:71:de:15:d3:
                    a6:90:51:7b:32:97:d3:50:6d:27:4d:6f:f4:d9:57:
                    3a:47:c4:b7:4b:6a:0a:01:1b:08:97:c1:fa:d2:84:
                    20:6e:56:69:fd:f1:a2:e2:e4:a9:c1:0f:99:4d:fe:
                    52:34:0a:1c:33:92:83:8c:90:f5:6d:f4:3c:af:3e:
                    db:e5:5c:8c:df:96:4d:12:85:0c:24:5b:29:e2:86:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A2:B8:80:C4:5D:90:4F:24:C6:AC:6D:B0:FC:44:97:C7:67:42:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd6798fb-51ee-3a22-97a3-a02f0087daab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:37:8c:c3:05:5c:08:84:6a:c5:f2:d2:f8:eb:c6:12:28:18:
         2d:a2:41:55:20:1b:0f:a8:09:53:ab:c4:da:5a:a8:6b:dc:d3:
         9a:3a:19:b2:87:b4:61:34:6b:e1:8f:8c:a5:98:53:09:6c:ca:
         da:18:1d:17:d9:e4:18:a8:1a:85:49:c3:44:dc:41:f5:12:47:
         e0:13:3a:81:08:78:86:13:df:c9:a3:99:5f:9a:b0:53:f0:0e:
         52:0a:9e:fc:9e:d7:22:aa:ef:71:d1:c0:03:24:62:76:40:ad:
         1c:1f:b4:e9:ae:85:2f:ed:94:54:3d:44:f3:79:07:d3:b8:18:
         c8:35:bd:3c:74:a8:52:a2:8a:ec:72:36:d1:8b:61:aa:e2:17:
         54:be:0e:4d:33:10:92:1e:4b:4c:b0:d5:83:bc:ad:c1:c0:0d:
         b1:d6:d3:29:78:26:79:ef:f2:65:5d:fe:d9:81:ac:56:db:15:
         3e:9d:9b:eb:0d:d6:cd:92:01:2d:2c:68:3c:3e:de:13:c0:bb:
         91:18:46:5f:b3:c5:a1:e4:ee:b4:63:2e:0b:c3:09:a0:b6:09:
         ad:32:3b:c9:ee:03:f2:c6:3e:9a:a5:43:b3:a7:6f:4a:26:fb:
         1c:50:87:56:e9:8a:3c:36:7a:24:84:a7:e7:6e:62:bf:51:75:
         02:42:db:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xxwH9Z7gNg1fbPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
MmY3NTJkMjAtM2EwNi00ZTRkLTgwZjYtMTI4NGJhZWU4OTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLJngy69Jwm3vais83i32tvIOGw9z5fsy4nd
Mp04sbC7ShyIjflXks/euJ5eBrFvUoPLw+kjvObr1D4YlNmUMDUJrHXRN/uwaxgf
c/I6dMIX0yaOQela+mpmNT9VMdfJR1FGy5MF39Hd+MJ4S8L1mY3xBiJ41JXqgst4
2UV0DJw05k5B1Td+V/8EcOPU0y4/HcZ2yAzK4oYo+GvzW5iTQL5mAnBRpe8bw8NC
A25I+XHeFdOmkFF7MpfTUG0nTW/02Vc6R8S3S2oKARsIl8H60oQgblZp/fGi4uSp
wQ+ZTf5SNAocM5KDjJD1bfQ8rz7b5VyM35ZNEoUMJFsp4oY0fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDiiuIDEXZBPJMasbbD8RJfHZ0KPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q2Nzk4ZmItNTFlZS0z
YTIyLTk3YTMtYTAyZjAwODdkYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUSCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHc3jMMFXAiEasXy0vjrxhIoGC2iQVUgGw+oCVOrxNpaqGvc05o6GbKH
tGE0a+GPjKWYUwlsytoYHRfZ5BioGoVJw0TcQfUSR+ATOoEIeIYT38mjmV+asFPw
DlIKnvye1yKq73HRwAMkYnZArRwftOmuhS/tlFQ9RPN5B9O4GMg1vTx0qFKiiuxy
NtGLYariF1S+Dk0zEJIeS0yw1YO8rcHADbHW0yl4Jnnv8mVd/tmBrFbbFT6dm+sN
1s2SAS0saDw+3hPAu5EYRl+zxaHk7rRjLgvDCaC2Ca0yO8nuA/LGPpqlQ7Onb0om
+xxQh1bpijw2eiSEp+duYr9RdQJC24c=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:10:53 2024 by rpki-client on console-ams.rpki-client.org