Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbf1c504-8725-37ef-90a1-6f252540a7a7.roa
File:                     dbf1c504-8725-37ef-90a1-6f252540a7a7.roa (raw, json)
Hash identifier:          NDt8Avvpr1AsQk+EeM/hCHuD/UJJgYezdNQqrepKFGM=
Subject key identifier:   F6:F3:6A:10:EA:07:02:DD:DC:61:37:D4:25:76:29:E8:52:06:DB:7E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C72DE7DB83EF5BDECD8240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbf1c504-8725-37ef-90a1-6f252540a7a7.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     7015
IP address blocks:        73.69.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:2d:e7:db:83:ef:5b:de:cd:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=bcf0b975-24b3-4b73-92e7-6864db1a70cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:94:50:ee:96:c8:8a:88:20:5d:b8:d5:09:
                    36:6c:c3:0d:a8:ac:88:6f:fd:73:b7:2f:67:65:d8:
                    6c:4a:18:bb:e2:16:4f:d8:7c:78:14:73:9d:c4:50:
                    88:28:b3:cb:1f:e6:a3:08:af:be:90:31:ba:aa:21:
                    71:0a:89:04:5f:0b:84:15:bd:15:3f:b5:d7:b8:97:
                    b4:b7:28:2c:bd:f0:7e:84:14:c1:21:40:9d:98:a1:
                    17:b3:5c:54:6a:ea:33:5b:51:50:1c:16:86:5e:22:
                    b6:1b:72:2c:dc:16:3a:b3:94:23:20:64:3e:5a:90:
                    d0:9d:46:56:ba:d0:73:55:6e:77:20:a7:42:09:ea:
                    a8:02:83:1a:f7:c0:9f:1f:dd:c2:ca:47:c8:36:f6:
                    11:5a:a2:31:d7:5e:c1:05:bb:19:7e:67:02:b1:69:
                    49:b4:71:49:64:fb:71:55:22:7a:dd:54:01:7c:ec:
                    8b:5b:14:7a:be:59:50:8e:db:b6:0b:55:e2:11:9c:
                    39:02:2a:21:f8:70:53:ed:08:45:61:b5:ec:c3:88:
                    c5:60:87:77:b0:6e:ed:97:8c:be:69:dc:d6:c0:46:
                    0b:29:aa:c1:87:ec:9d:77:69:79:e0:13:51:0d:a2:
                    ab:4a:50:ab:51:f5:16:ba:12:0c:0d:cf:2f:96:3c:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:6A:10:EA:07:02:DD:DC:61:37:D4:25:76:29:E8:52:06:DB:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbf1c504-8725-37ef-90a1-6f252540a7a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.69.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:55:5c:d1:ab:37:d6:08:2c:b5:83:ee:f6:1e:44:5d:fd:5e:
         44:87:63:b1:3b:63:75:54:af:30:1c:76:61:00:fb:21:3d:bf:
         cd:80:e5:e9:6f:bb:23:2a:c3:a8:e2:5e:b9:72:ea:e7:8b:75:
         7c:25:ef:25:6c:ac:28:60:76:5f:72:88:33:0a:48:19:f0:36:
         9a:b8:0f:0e:56:40:e6:46:4d:31:96:63:69:4a:4e:07:cd:ad:
         d9:d2:4c:cf:4e:28:ca:2e:22:63:d0:cf:44:71:5e:71:eb:17:
         ab:5b:dc:27:9c:02:5d:33:f8:0c:09:c1:cf:7f:be:88:b7:b9:
         06:66:df:b9:b2:a1:7d:12:21:b7:9c:7f:be:93:ad:cf:eb:fa:
         69:c1:5c:8f:c6:78:e4:89:3a:83:9c:8f:fc:35:72:03:fb:d8:
         d1:bd:ab:0f:18:a2:1e:75:cb:e5:d6:8b:22:50:0d:cd:c8:68:
         77:79:9b:2f:c5:39:85:ae:52:11:9f:67:c5:84:86:e3:ee:10:
         a3:7f:0c:31:a1:15:0c:36:e7:ae:c7:87:42:71:5c:7c:bd:78:
         b6:12:19:5e:c2:94:cb:04:03:a5:c2:ef:0f:a7:4f:9a:b7:73:
         6c:66:dd:d9:73:20:64:7d:28:7b:64:1f:9e:dd:ed:74:e1:09:
         93:33:9f:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0xy3n24PvW97NgkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
YmNmMGI5NzUtMjRiMy00YjczLTkyZTctNjg2NGRiMWE3MGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3qUUO6WyIqIIF241Qk2bMMNqKyIb/1zty9n
ZdhsShi74hZP2Hx4FHOdxFCIKLPLH+ajCK++kDG6qiFxCokEXwuEFb0VP7XXuJe0
tygsvfB+hBTBIUCdmKEXs1xUauozW1FQHBaGXiK2G3Is3BY6s5QjIGQ+WpDQnUZW
utBzVW53IKdCCeqoAoMa98CfH93CykfINvYRWqIx117BBbsZfmcCsWlJtHFJZPtx
VSJ63VQBfOyLWxR6vllQjtu2C1XiEZw5Aioh+HBT7QhFYbXsw4jFYId3sG7tl4y+
adzWwEYLKarBh+ydd2l54BNRDaKrSlCrUfUWuhIMDc8vljzRmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbzahDqBwLd3GE31CV2KehSBtt+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGJmMWM1MDQtODcyNS0z
N2VmLTkwYTEtNmYyNTI1NDBhN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUVEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM1VXNGrN9YILLWD7vYeRF39XkSHY7E7Y3VUrzAcdmEA+yE9v82A5elv
uyMqw6jiXrly6ueLdXwl7yVsrChgdl9yiDMKSBnwNpq4Dw5WQOZGTTGWY2lKTgfN
rdnSTM9OKMouImPQz0RxXnHrF6tb3CecAl0z+AwJwc9/voi3uQZm37myoX0SIbec
f76Trc/r+mnBXI/GeOSJOoOcj/w1cgP72NG9qw8Yoh51y+XWiyJQDc3IaHd5my/F
OYWuUhGfZ8WEhuPuEKN/DDGhFQw2567Hh0JxXHy9eLYSGV7ClMsEA6XC7w+nT5q3
c2xm3dlzIGR9KHtkH57d7XThCZMznzE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:07:25 2024 by rpki-client on console-ams.rpki-client.org