Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcd828f1-0466-327f-b523-35e03424c25f.roa
File:                     dcd828f1-0466-327f-b523-35e03424c25f.roa (raw, json)
Hash identifier:          MvgB0MfejlUzKc3eaRHGP3AZWarBPylBAU7nUZT9D9s=
Subject key identifier:   0A:13:55:8F:8A:33:27:CD:DC:6B:F2:49:31:F0:2F:22:19:90:E3:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB115E5FAB9C57761275C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcd828f1-0466-327f-b523-35e03424c25f.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        73.88.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:11:5e:5f:ab:9c:57:76:12:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=945517df-5610-48f6-9a58-fa58a61f85c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:ed:e6:b9:4a:21:d4:cd:6d:3d:a5:b0:e6:
                    3a:1e:67:3c:d6:db:53:0a:d5:0e:7c:b4:4f:bc:af:
                    d0:09:24:b8:26:2f:49:ed:db:c5:f6:f0:7d:0d:71:
                    a3:a7:34:f4:ee:ae:3b:7c:71:fe:8f:1a:0f:1a:73:
                    cb:cf:2e:13:66:2a:41:a1:15:66:ba:22:1a:4f:ac:
                    78:5c:ea:2b:98:0d:27:a5:92:12:58:36:fd:85:9d:
                    72:14:b6:48:f2:3c:f0:6b:61:2c:82:6f:c7:a7:a5:
                    05:94:ef:43:0c:3e:b1:44:0e:5f:fa:b4:2b:57:f2:
                    8b:89:7e:87:0e:72:63:94:33:32:4b:07:66:b7:5e:
                    93:82:e6:2f:7a:38:02:98:67:98:e5:b4:d5:ff:70:
                    f0:3a:90:a3:7a:79:71:43:66:86:5f:a7:34:59:36:
                    44:d5:ca:b7:33:03:00:c2:2a:c8:fc:79:90:18:76:
                    c0:83:7c:a6:d3:77:03:19:64:45:2e:31:7f:6f:fe:
                    2a:18:0b:c0:88:ea:8e:e0:44:fc:2c:cc:d1:9e:fb:
                    5c:ab:82:9a:98:61:68:8a:69:8a:61:cb:b8:ef:0a:
                    e5:6d:ae:97:01:21:11:32:f5:4c:c2:79:ab:5c:ce:
                    a2:ee:f6:f7:d6:ab:45:ce:6f:eb:f6:82:47:77:65:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:55:8F:8A:33:27:CD:DC:6B:F2:49:31:F0:2F:22:19:90:E3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcd828f1-0466-327f-b523-35e03424c25f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.88.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:96:69:61:97:2a:a8:62:a5:77:cf:60:4f:ba:46:72:08:
         f1:7e:e8:39:f0:0c:86:c3:e8:37:23:de:23:8b:54:e8:56:5a:
         83:a4:d5:fa:3d:da:c8:d1:67:ce:a4:6d:5d:5a:ed:64:49:f9:
         db:80:0d:8e:1a:2a:02:ce:e3:ba:bb:c6:67:1b:29:51:58:8d:
         07:e6:c9:73:3e:47:96:c4:eb:6f:39:36:3a:0b:8a:95:bb:9f:
         cf:3a:97:d2:95:7e:90:1d:3d:e2:6e:86:52:5c:85:5e:85:e4:
         e2:35:f9:a7:f3:e0:3a:8f:a3:40:ee:f1:2d:80:8e:c4:2c:69:
         64:67:54:34:f3:97:1a:99:81:38:0c:11:d8:f5:9f:60:fb:db:
         05:ad:ad:bb:86:0a:03:35:d4:db:ea:e6:6d:80:5d:85:12:12:
         ec:65:06:70:61:3c:70:55:98:91:70:d7:99:c8:38:56:05:2b:
         b5:39:b4:2a:4d:9e:5d:b1:7a:63:9b:c5:a3:76:24:d8:b7:e2:
         68:cc:73:ee:65:44:15:1f:38:07:29:f7:bb:a7:ea:06:a7:f5:
         20:b8:b5:78:6e:5a:79:b6:17:9a:2a:cb:80:79:25:34:81:18:
         a2:19:ab:ca:91:16:61:c6:95:d7:2f:76:93:bf:30:d0:2f:d1:
         fd:48:f7:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqxFeX6ucV3YSdcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
OTQ1NTE3ZGYtNTYxMC00OGY2LTlhNTgtZmE1OGE2MWY4NWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc/t5rlKIdTNbT2lsOY6Hmc81ttTCtUOfLRP
vK/QCSS4Ji9J7dvF9vB9DXGjpzT07q47fHH+jxoPGnPLzy4TZipBoRVmuiIaT6x4
XOormA0npZISWDb9hZ1yFLZI8jzwa2Esgm/Hp6UFlO9DDD6xRA5f+rQrV/KLiX6H
DnJjlDMySwdmt16TguYvejgCmGeY5bTV/3DwOpCjenlxQ2aGX6c0WTZE1cq3MwMA
wirI/HmQGHbAg3ym03cDGWRFLjF/b/4qGAvAiOqO4ET8LMzRnvtcq4KamGFoimmK
Ycu47wrlba6XASERMvVMwnmrXM6i7vb31qtFzm/r9oJHd2XSHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAoTVY+KMyfN3GvySTHwLyIZkON3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGNkODI4ZjEtMDQ2Ni0z
MjdmLWI1MjMtMzVlMDM0MjRjMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSViMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITwlmlhlyqoYqV3z2BPukZyCPF+6DnwDIbD6Dcj3iOLVOhWWoOk1fo9
2sjRZ86kbV1a7WRJ+duADY4aKgLO47q7xmcbKVFYjQfmyXM+R5bE6285NjoLipW7
n886l9KVfpAdPeJuhlJchV6F5OI1+afz4DqPo0Du8S2AjsQsaWRnVDTzlxqZgTgM
Edj1n2D72wWtrbuGCgM11Nvq5m2AXYUSEuxlBnBhPHBVmJFw15nIOFYFK7U5tCpN
nl2xemObxaN2JNi34mjMc+5lRBUfOAcp97un6gan9SC4tXhuWnm2F5oqy4B5JTSB
GKIZq8qRFmHGldcvdpO/MNAv0f1I9w0=
-----END CERTIFICATE-----
Generated at Sun May 5 01:36:46 2024 by rpki-client on console-fra.rpki-client.org