Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d38c610b-464d-3c62-8f0a-99e90c0f5e04.roa
File:                     d38c610b-464d-3c62-8f0a-99e90c0f5e04.roa (raw, json)
Hash identifier:          Gwty8qPrMfKRIDeBEytrBb5MZJFFyap3N/pYtj6p1mo=
Subject key identifier:   C9:C4:C3:F5:75:7F:F9:AF:0E:85:DC:57:9D:FD:5A:F6:5B:CE:54:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C6524410A7ED9107289D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d38c610b-464d-3c62-8f0a-99e90c0f5e04.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        174.169.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:52:44:10:a7:ed:91:07:28:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=83473737-9ed6-48df-91e1-16feafb34371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:c5:a7:27:56:15:eb:3e:24:24:11:31:5d:
                    54:23:5f:95:76:31:d7:8d:30:04:d6:b5:f8:53:d7:
                    df:e4:58:ee:07:70:73:46:8e:05:c2:5d:cd:05:44:
                    6a:66:77:da:ea:a9:a4:03:11:eb:12:80:9f:ae:60:
                    f9:45:76:ca:fa:4e:7c:5f:ee:8b:ea:fd:d1:78:bc:
                    47:e4:d2:98:5e:86:a5:88:1e:6d:5e:cd:f8:73:32:
                    c2:8e:60:53:5b:36:04:d2:b3:57:60:87:c5:37:06:
                    27:7b:61:a7:e1:e6:5e:2c:56:da:95:8c:60:03:67:
                    6e:be:3d:1d:63:b1:93:6e:59:83:3e:dc:e4:4b:64:
                    c2:c0:3d:4e:55:1f:4e:5a:17:2b:c2:45:b9:0f:e2:
                    9d:e1:9d:1e:53:8c:ab:04:52:2c:6b:db:c4:41:1b:
                    92:58:0b:93:23:6b:da:35:bc:10:6a:97:2f:94:6f:
                    e4:c6:d6:71:39:49:b3:67:0a:01:c8:b3:6b:d9:70:
                    80:bb:4e:44:8e:50:13:f5:57:fb:cb:40:d4:e9:70:
                    9f:91:8e:ce:f4:59:e4:66:76:83:5d:44:6a:a3:59:
                    08:20:76:4c:f5:b6:a9:bc:d8:95:fe:28:e7:47:ed:
                    dc:e4:aa:f7:28:ff:44:c2:f2:79:b4:ac:de:76:06:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C4:C3:F5:75:7F:F9:AF:0E:85:DC:57:9D:FD:5A:F6:5B:CE:54:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d38c610b-464d-3c62-8f0a-99e90c0f5e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.169.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:ea:fe:0e:ff:b0:13:8d:50:62:c8:bb:87:59:86:12:10:41:
         54:46:4a:15:6f:e3:46:3a:71:95:b0:4c:51:e8:de:e6:65:a8:
         3a:93:ea:10:5c:13:5b:4d:80:eb:ac:57:36:b4:01:20:aa:f8:
         ce:ea:c3:a3:bc:e8:79:45:2c:67:bf:2a:7e:4d:59:14:2b:5a:
         a9:30:1f:6a:d9:97:2d:60:b8:f9:a3:2f:00:d9:7d:49:18:cb:
         a3:d7:26:c9:21:91:b0:30:49:bd:6a:9a:fb:32:90:83:76:ae:
         85:bd:80:dc:f4:e7:7b:1a:44:f6:84:3c:53:12:aa:c2:b2:d1:
         a4:77:78:c9:49:7d:e5:54:7e:f7:5d:d4:63:e7:b4:26:ec:f0:
         16:b1:63:7c:4c:a7:b2:1c:44:84:cd:49:dd:fb:6d:f5:c2:9f:
         91:a6:69:9a:24:df:72:66:2b:8e:08:e8:e4:5e:de:14:26:57:
         3c:2a:03:97:b5:b9:cf:fa:8f:03:bc:30:1e:ef:55:d7:0c:90:
         e1:31:bb:df:f9:85:cc:1b:79:20:ef:89:f6:54:99:3b:76:d5:
         4b:eb:a6:56:81:72:62:0a:c6:e5:60:f8:6d:fa:1d:3c:a7:c1:
         44:35:44:15:f2:81:8d:1f:a1:31:89:c8:24:76:a6:d6:8b:38:
         21:ce:a4:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xlJEEKftkQconYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ODM0NzM3MzctOWVkNi00OGRmLTkxZTEtMTZmZWFmYjM0MzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdXFpydWFes+JCQRMV1UI1+VdjHXjTAE1rX4
U9ff5FjuB3BzRo4Fwl3NBURqZnfa6qmkAxHrEoCfrmD5RXbK+k58X+6L6v3ReLxH
5NKYXoaliB5tXs34czLCjmBTWzYE0rNXYIfFNwYne2Gn4eZeLFbalYxgA2duvj0d
Y7GTblmDPtzkS2TCwD1OVR9OWhcrwkW5D+Kd4Z0eU4yrBFIsa9vEQRuSWAuTI2va
NbwQapcvlG/kxtZxOUmzZwoByLNr2XCAu05EjlAT9Vf7y0DU6XCfkY7O9FnkZnaD
XURqo1kIIHZM9bapvNiV/ijnR+3c5Kr3KP9EwvJ5tKzedgaURQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMnEw/V1f/mvDoXcV539WvZbzlTUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDM4YzYxMGItNDY0ZC0z
YzYyLThmMGEtOTllOTBjMGY1ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqlYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANfq/g7/sBONUGLIu4dZhhIQQVRGShVv40Y6cZWwTFHo3uZlqDqT6hBc
E1tNgOusVza0ASCq+M7qw6O86HlFLGe/Kn5NWRQrWqkwH2rZly1guPmjLwDZfUkY
y6PXJskhkbAwSb1qmvsykIN2roW9gNz053saRPaEPFMSqsKy0aR3eMlJfeVUfvdd
1GPntCbs8BaxY3xMp7IcRITNSd37bfXCn5GmaZok33JmK44I6ORe3hQmVzwqA5e1
uc/6jwO8MB7vVdcMkOExu9/5hcwbeSDvifZUmTt21UvrplaBcmIKxuVg+G36HTyn
wUQ1RBXygY0foTGJyCR2ptaLOCHOpKU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:11:21 2024 by rpki-client on console-ams.rpki-client.org