Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36502b7-469d-39e7-aced-1adaf1dc0db6.roa
File:                     d36502b7-469d-39e7-aced-1adaf1dc0db6.roa (raw, json)
Hash identifier:          ELy9TaZ3VxlYAkmyVVHGnzBtA9F/9/3bqzoxYJpU4x0=
Subject key identifier:   38:AC:9A:1C:8E:52:85:67:C8:93:FB:41:D2:AD:4F:33:3D:2A:C9:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7C2A0B03E2A3A687712E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36502b7-469d-39e7-aced-1adaf1dc0db6.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        73.161.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:c2:a0:b0:3e:2a:3a:68:77:12:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=a465332b-0e8d-4de1-891b-5c85e6e1da50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:dc:b2:78:61:35:c0:7e:67:9f:ab:1a:76:
                    dc:98:3c:1e:c6:2b:a0:4f:4b:a9:2e:84:06:06:31:
                    db:17:4f:52:3a:36:30:4e:29:a6:61:70:c9:c4:6e:
                    da:4f:7a:94:7b:3a:b6:76:27:e5:b9:04:b6:fc:43:
                    e7:39:8b:cd:f2:0f:d1:db:8c:19:59:47:7b:51:75:
                    49:bd:18:db:83:c9:6c:ed:c8:50:f1:0c:ea:09:e7:
                    2f:c9:5b:96:99:a0:81:50:2f:4c:a9:94:d0:6e:51:
                    21:bd:ab:56:8c:3f:21:d6:93:e5:24:3e:6c:14:96:
                    8e:6e:ff:41:30:10:36:0b:e0:dc:fd:09:b3:fc:85:
                    1f:84:cd:ee:80:34:57:ad:95:6b:ca:f7:0a:38:41:
                    40:ae:d4:4f:92:e8:1c:30:37:ab:af:d5:9b:95:44:
                    82:fc:c5:22:ac:81:aa:70:0a:f3:40:2b:bc:06:ee:
                    17:96:8a:94:9b:72:cf:b7:37:2f:3b:b0:97:cf:44:
                    d3:66:62:72:fa:41:59:52:1b:01:2b:20:cc:f6:98:
                    c2:f3:0c:6b:1f:b9:74:f6:0d:a9:6d:ea:30:23:e4:
                    c7:94:d0:a5:3b:ee:05:c2:91:34:91:08:2e:3a:e6:
                    1f:cd:c1:05:55:38:bf:5a:b3:a3:53:c0:d8:c1:7b:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:9A:1C:8E:52:85:67:C8:93:FB:41:D2:AD:4F:33:3D:2A:C9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36502b7-469d-39e7-aced-1adaf1dc0db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.161.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:7a:7c:3b:df:67:84:67:00:e8:fc:fa:cc:4e:e1:d7:7d:
         79:d8:fc:ba:51:12:11:cf:f6:17:d3:73:ec:6a:8a:9a:7c:ec:
         9b:b5:e0:0c:63:8b:a9:41:0c:a9:c6:8f:68:6d:39:c9:61:35:
         a5:34:6a:3d:1c:83:44:08:89:04:fa:c0:14:5e:da:bb:58:91:
         a3:26:d4:9b:29:86:6e:d5:9a:ad:48:17:d6:a6:3d:7d:1d:f9:
         80:31:0b:67:ba:ce:b1:b6:2e:40:9c:1a:80:c6:db:c9:c9:03:
         67:fa:14:af:6e:25:5f:ba:fe:9c:0a:98:20:bb:b7:2c:a8:ef:
         c6:64:a6:44:1f:cc:e9:74:3b:8d:4a:73:f7:0a:e0:0e:f4:3c:
         1e:ad:53:50:25:92:75:5b:63:0b:75:39:6a:60:39:e5:5f:b4:
         8b:18:8c:7f:23:06:10:61:08:38:bd:e4:d0:0d:11:a6:72:12:
         d2:d0:a1:41:13:16:3d:18:99:36:c6:fe:0c:85:a9:91:a3:f8:
         5d:70:6f:6a:9e:d5:68:1d:e7:dc:f5:43:eb:25:26:c9:e0:c3:
         ea:a0:cf:d7:0d:b3:98:fb:36:48:e1:b8:2c:87:98:ed:5b:cd:
         2f:b7:21:32:aa:7f:04:a1:0c:b3:90:99:00:36:c4:de:47:5b:
         18:1a:c6:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x8KgsD4qOmh3EuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
YTQ2NTMzMmItMGU4ZC00ZGUxLTg5MWItNWM4NWU2ZTFkYTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIDcsnhhNcB+Z5+rGnbcmDwexiugT0upLoQG
BjHbF09SOjYwTimmYXDJxG7aT3qUezq2difluQS2/EPnOYvN8g/R24wZWUd7UXVJ
vRjbg8ls7chQ8QzqCecvyVuWmaCBUC9MqZTQblEhvatWjD8h1pPlJD5sFJaObv9B
MBA2C+Dc/Qmz/IUfhM3ugDRXrZVryvcKOEFArtRPkugcMDerr9WblUSC/MUirIGq
cArzQCu8Bu4XloqUm3LPtzcvO7CXz0TTZmJy+kFZUhsBKyDM9pjC8wxrH7l09g2p
beowI+THlNClO+4FwpE0kQguOuYfzcEFVTi/WrOjU8DYwXv1wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDismhyOUoVnyJP7QdKtTzM9KsmsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDM2NTAyYjctNDY5ZC0z
OWU3LWFjZWQtMWFkYWYxZGMwZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaFCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHy6enw732eEZwDo/PrMTuHXfXnY/LpREhHP9hfTc+xqipp87Ju14Axj
i6lBDKnGj2htOclhNaU0aj0cg0QIiQT6wBRe2rtYkaMm1Jsphm7Vmq1IF9amPX0d
+YAxC2e6zrG2LkCcGoDG28nJA2f6FK9uJV+6/pwKmCC7tyyo78ZkpkQfzOl0O41K
c/cK4A70PB6tU1AlknVbYwt1OWpgOeVftIsYjH8jBhBhCDi95NANEaZyEtLQoUET
Fj0YmTbG/gyFqZGj+F1wb2qe1Wgd59z1Q+slJsngw+qgz9cNs5j7NkjhuCyHmO1b
zS+3ITKqfwShDLOQmQA2xN5HWxgaxsw=
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:57:04 2024 by rpki-client on console-fra.rpki-client.org