Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8ac888e-7890-33e8-b8a8-41a493b031f1.roa
File:                     d8ac888e-7890-33e8-b8a8-41a493b031f1.roa (raw, json)
Hash identifier:          LFXtfwjDEhEy/TSO1TLDKc8HiYmpNuyno/ahdyIRgNA=
Subject key identifier:   E7:49:4F:0E:C4:77:8A:BE:3B:5D:06:9A:F7:D9:52:72:AE:E0:E5:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C62B135EE996E2AC19F200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8ac888e-7890-33e8-b8a8-41a493b031f1.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33490
IP address blocks:        73.37.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c6:2b:13:5e:e9:96:e2:ac:19:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=bb93f9d2-3e4c-424a-9405-e89800295316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:66:8a:bf:e5:c5:38:4c:ac:a4:41:76:20:
                    0f:70:a6:16:84:bf:e8:0c:50:c7:15:01:09:30:2e:
                    a5:eb:6b:f4:7d:5a:28:c9:21:e7:73:45:c8:67:1f:
                    f5:d7:f5:55:b0:bb:3d:d9:45:e2:1c:84:38:4f:42:
                    71:22:53:74:9e:fc:10:70:da:45:31:23:42:c1:f3:
                    0d:e6:d1:98:54:ca:25:b3:10:52:36:f8:35:54:dd:
                    ce:c5:04:9a:83:5f:ab:ab:95:73:b3:55:93:28:70:
                    8a:51:68:e3:eb:f5:c7:7b:98:65:c1:c0:09:75:f2:
                    77:68:51:29:97:fd:2f:75:1c:3d:98:25:f0:e3:30:
                    8c:f2:8c:bf:20:6d:4c:ef:46:e4:6d:5d:75:0a:4b:
                    1d:7c:52:96:72:82:6a:87:17:b1:3f:26:51:56:c3:
                    02:a3:7b:55:46:7d:ca:ef:18:46:e3:55:30:4f:3a:
                    bf:d3:c1:0c:ca:aa:69:72:a6:03:ac:71:03:2f:e0:
                    b3:83:ff:4f:c0:c0:70:e0:e0:33:c0:4d:e4:81:af:
                    e6:a2:51:51:1a:90:83:81:f0:d9:91:fc:0b:5c:ff:
                    a7:50:1d:fe:59:87:89:cc:7c:91:15:91:ac:e8:8d:
                    0e:57:f6:2c:eb:d9:6c:21:2c:65:ce:b1:03:f6:36:
                    6e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:49:4F:0E:C4:77:8A:BE:3B:5D:06:9A:F7:D9:52:72:AE:E0:E5:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8ac888e-7890-33e8-b8a8-41a493b031f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.37.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f5:80:fb:77:17:77:ff:85:54:26:2a:82:a0:9c:ac:85:33:
         76:84:12:81:21:cf:f7:06:74:3a:1f:2c:57:10:df:f7:24:f9:
         8a:3a:a2:dc:e3:f9:2e:d7:63:ee:78:40:3c:bb:d0:3b:bd:3d:
         d3:34:2b:9b:63:01:50:88:e1:52:f3:08:1d:2b:04:da:26:9b:
         2c:6c:a8:14:7a:45:7d:9f:e1:ac:63:86:db:24:98:aa:7a:a5:
         d7:2f:34:88:ec:87:11:0f:6f:80:a0:45:58:40:85:ac:7a:60:
         9b:a6:7b:be:f4:9b:d6:22:9f:cc:10:2e:b1:30:21:ab:7a:85:
         98:c9:fd:8a:53:14:da:ff:5d:64:e3:56:6c:3a:4f:0a:78:78:
         fe:9e:c5:29:ac:ce:52:b3:61:ac:34:04:05:01:a9:bc:c9:76:
         0c:1b:98:d7:03:90:b7:d4:35:76:fb:b8:af:fb:dc:3f:1e:67:
         8a:d8:9b:bd:cd:a9:38:d8:09:2a:d9:54:19:25:af:6d:76:35:
         0c:f6:d1:39:8c:71:5c:ac:05:ec:2c:0c:33:dc:cb:d0:63:68:
         2d:72:82:13:68:9e:98:14:a4:d7:a6:7b:a7:40:21:a5:13:66:
         8f:89:76:f5:12:17:c0:93:11:4b:04:93:a0:62:71:07:a8:5e:
         b0:77:e6:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xisTXumW4qwZ8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
YmI5M2Y5ZDItM2U0Yy00MjRhLTk0MDUtZTg5ODAwMjk1MzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip5mir/lxThMrKRBdiAPcKYWhL/oDFDHFQEJ
MC6l62v0fVooySHnc0XIZx/11/VVsLs92UXiHIQ4T0JxIlN0nvwQcNpFMSNCwfMN
5tGYVMolsxBSNvg1VN3OxQSag1+rq5Vzs1WTKHCKUWjj6/XHe5hlwcAJdfJ3aFEp
l/0vdRw9mCXw4zCM8oy/IG1M70bkbV11CksdfFKWcoJqhxexPyZRVsMCo3tVRn3K
7xhG41UwTzq/08EMyqppcqYDrHEDL+Czg/9PwMBw4OAzwE3kga/molFRGpCDgfDZ
kfwLXP+nUB3+WYeJzHyRFZGs6I0OV/Ys69lsISxlzrED9jZuKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdJTw7Ed4q+O10GmvfZUnKu4OU0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhhYzg4OGUtNzg5MC0z
M2U4LWI4YTgtNDFhNDkzYjAzMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKD1gPt3F3f/hVQmKoKgnKyFM3aEEoEhz/cGdDofLFcQ3/ck+Yo6otzj
+S7XY+54QDy70Du9PdM0K5tjAVCI4VLzCB0rBNommyxsqBR6RX2f4axjhtskmKp6
pdcvNIjshxEPb4CgRVhAhax6YJume770m9Yin8wQLrEwIat6hZjJ/YpTFNr/XWTj
Vmw6Twp4eP6exSmszlKzYaw0BAUBqbzJdgwbmNcDkLfUNXb7uK/73D8eZ4rYm73N
qTjYCSrZVBklr212NQz20TmMcVysBewsDDPcy9BjaC1yghNonpgUpNeme6dAIaUT
Zo+JdvUSF8CTEUsEk6BicQeoXrB35nM=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:11:45 2024 by rpki-client on console-ams.rpki-client.org