Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8374e09-bb2a-3f69-ae98-5d91908a1051.roa
File:                     d8374e09-bb2a-3f69-ae98-5d91908a1051.roa (raw, json)
Hash identifier:          ESvWjEl66aseGcwFEjihgmUP17W02CCHb4MgCEgZztg=
Subject key identifier:   AE:66:56:D0:73:81:7A:BB:3C:6C:9A:32:87:8B:47:7E:D2:D4:55:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E85476A301F26F1AA8F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8374e09-bb2a-3f69-ae98-5d91908a1051.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.160.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:85:47:6a:30:1f:26:f1:aa:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d4ff6026-ab63-4752-b70f-b4cf718f39c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:3a:3e:b8:ca:d9:05:93:cb:ae:e7:0e:f7:
                    fc:20:3a:9e:17:8e:9a:6c:3d:d4:93:ee:03:0d:dc:
                    57:1c:18:ef:7e:a0:7e:38:ff:6a:f8:d2:fc:99:5c:
                    c6:20:39:a5:e6:46:9b:79:36:ce:48:dc:fe:8b:9c:
                    ce:55:21:9a:6d:88:cc:3f:f7:9b:d2:be:38:d1:69:
                    86:ac:c2:08:8d:94:dd:43:84:d1:3c:ae:db:34:7c:
                    21:1d:1d:52:eb:5f:ac:e1:b6:b3:b9:ec:e2:66:bb:
                    8f:8b:d0:d2:66:54:02:a1:cb:a5:66:86:be:d6:e1:
                    5d:0f:13:87:e2:d9:24:33:66:34:3a:98:fa:a7:9a:
                    6a:be:d9:1f:9f:ac:74:fe:d4:6a:ce:a2:5a:28:48:
                    9f:ae:2f:8c:3b:95:eb:22:09:03:80:b6:70:61:83:
                    e5:4b:19:97:f9:4c:f1:66:69:8c:fd:bf:b9:c8:98:
                    cc:7c:c3:6e:49:78:26:b7:28:09:21:a3:43:bb:f2:
                    b4:34:f6:b1:bb:7e:8f:a5:6c:7a:32:bd:fd:1e:fc:
                    13:ec:dd:04:2f:a7:e4:b5:ab:95:b3:df:47:2a:71:
                    21:e8:7d:ef:47:b9:20:52:6b:82:41:90:34:ea:47:
                    f6:7c:48:37:ad:10:07:4d:1c:e1:59:da:d5:70:33:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:66:56:D0:73:81:7A:BB:3C:6C:9A:32:87:8B:47:7E:D2:D4:55:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8374e09-bb2a-3f69-ae98-5d91908a1051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.160.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:1c:f7:60:23:d7:ef:0b:dd:84:80:4e:d5:56:a5:73:1b:c6:
         9a:ca:94:99:1d:1d:9a:7b:5a:36:28:dc:e4:25:38:de:4b:39:
         2e:bd:26:73:72:e4:db:28:28:e0:d2:d8:e5:5f:0a:cd:77:50:
         97:f1:9d:b1:b2:ff:bf:5a:cf:7e:98:80:42:47:65:90:ec:24:
         95:03:fe:24:ab:64:be:aa:e8:0e:3e:50:71:92:6f:c5:04:7e:
         79:63:0d:39:a8:7e:ff:ac:f3:ca:5b:a5:ec:e5:14:93:99:7a:
         6c:e0:44:8d:15:65:2e:52:42:a1:68:ee:53:3b:bc:00:19:88:
         bd:33:6f:e4:04:29:2c:3f:2b:19:19:07:fe:c3:ac:f8:ae:f2:
         54:d9:8e:0b:d6:99:8c:d1:36:37:4f:cb:f3:e5:3b:e9:a7:7b:
         ea:49:4d:a9:de:64:3d:f0:7b:83:4e:e4:4c:ad:70:96:6c:b4:
         75:a0:d8:5a:b3:f2:59:6a:be:a0:25:50:7e:16:ec:ab:21:c7:
         6f:9b:52:cc:eb:b9:fa:9c:ec:f6:b4:ba:cf:79:80:76:81:a9:
         6e:9f:6b:9d:84:f9:fd:fa:d1:4c:f0:96:2a:d6:77:b1:5f:91:
         53:2c:50:ab:5b:9f:ca:75:90:37:fe:cd:45:5b:de:5b:03:b2:
         68:f8:38:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnoVHajAfJvGqj0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZDRmZjYwMjYtYWI2My00NzUyLWI3MGYtYjRjZjcxOGYzOWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty86PrjK2QWTy67nDvf8IDqeF46abD3Uk+4D
DdxXHBjvfqB+OP9q+NL8mVzGIDml5kabeTbOSNz+i5zOVSGabYjMP/eb0r440WmG
rMIIjZTdQ4TRPK7bNHwhHR1S61+s4bazueziZruPi9DSZlQCoculZoa+1uFdDxOH
4tkkM2Y0Opj6p5pqvtkfn6x0/tRqzqJaKEifri+MO5XrIgkDgLZwYYPlSxmX+Uzx
ZmmM/b+5yJjMfMNuSXgmtygJIaNDu/K0NPaxu36PpWx6Mr39HvwT7N0EL6fktauV
s99HKnEh6H3vR7kgUmuCQZA06kf2fEg3rRAHTRzhWdrVcDPhOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5mVtBzgXq7PGyaMoeLR37S1FW/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDgzNzRlMDktYmIyYS0z
ZjY5LWFlOTgtNWQ5MTkwOGExMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM8c92Aj1+8L3YSATtVWpXMbxprKlJkdHZp7WjYo3OQlON5LOS69JnNy
5NsoKODS2OVfCs13UJfxnbGy/79az36YgEJHZZDsJJUD/iSrZL6q6A4+UHGSb8UE
fnljDTmofv+s88pbpezlFJOZemzgRI0VZS5SQqFo7lM7vAAZiL0zb+QEKSw/KxkZ
B/7DrPiu8lTZjgvWmYzRNjdPy/PlO+mne+pJTaneZD3we4NO5EytcJZstHWg2Fqz
8llqvqAlUH4W7Kshx2+bUszrufqc7Pa0us95gHaBqW6fa52E+f360UzwlirWd7Ff
kVMsUKtbn8p1kDf+zUVb3lsDsmj4OHs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:28 2024 by rpki-client on console-fra.rpki-client.org