Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e41662a2-d635-3d2d-bc0a-a5c7d855973a.roa
File:                     e41662a2-d635-3d2d-bc0a-a5c7d855973a.roa (raw, json)
Hash identifier:          dlyncVI5IouiZJkqVxx2TYn1EUJzeI1ldKf9IhI6ZsY=
Subject key identifier:   A3:33:0C:50:97:FD:04:F4:D7:45:56:B3:AC:80:36:ED:EB:23:51:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9E030410ADD0A5D039D140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e41662a2-d635-3d2d-bc0a-a5c7d855973a.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33659
IP address blocks:        73.197.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:03:04:10:ad:d0:a5:d0:39:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=6a066c1d-5a7a-4931-abdb-8ba12aba6a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:f2:f3:39:6d:81:76:8e:a4:79:49:22:72:
                    e4:5f:80:67:ed:6d:92:fc:f8:77:ec:13:df:ad:de:
                    5d:de:d0:d1:26:af:18:8a:72:8b:ea:5d:00:34:b6:
                    11:96:b6:d6:0c:31:e4:5b:a1:02:88:47:bf:f8:54:
                    77:6f:21:2f:37:e2:77:49:76:09:6b:46:69:80:8e:
                    8d:d3:7d:c6:d6:94:ce:04:f1:9c:8c:85:b9:af:3d:
                    f5:a3:fa:b6:da:9f:8a:85:c0:37:ab:53:34:4f:4e:
                    b7:c6:07:6a:c9:38:ba:2f:7d:31:35:eb:63:ec:7d:
                    be:1a:19:7a:01:6f:87:d7:dc:04:3d:50:d1:ba:94:
                    b3:bf:62:74:79:88:b4:2a:ea:52:4f:bb:2b:69:7c:
                    16:a7:04:8f:2d:a0:32:e7:db:ed:6d:a9:42:f9:aa:
                    8c:8b:81:c2:cc:d7:5c:86:7a:7e:ba:13:ff:04:57:
                    77:6e:94:91:79:1b:07:eb:77:5a:00:2d:1e:15:41:
                    d7:47:75:6e:4c:70:e0:13:72:fd:5e:0e:af:2f:42:
                    f1:20:15:e1:df:ce:8c:cc:4b:72:a5:65:88:a4:dc:
                    be:94:0c:95:50:d5:87:9c:bf:b8:09:cf:98:ba:6a:
                    ff:92:c3:7f:e3:99:a9:fe:0e:b8:8b:1e:b2:7f:73:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:33:0C:50:97:FD:04:F4:D7:45:56:B3:AC:80:36:ED:EB:23:51:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e41662a2-d635-3d2d-bc0a-a5c7d855973a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.197.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:4e:ac:6c:3c:e3:ca:e3:e3:fe:ff:26:f2:3a:c9:5c:c9:
         8d:6e:fd:79:12:5e:93:f7:a2:bf:d9:29:c6:27:eb:e0:07:97:
         fe:0b:8b:1f:e6:54:0d:98:58:29:34:e9:e1:37:09:38:74:98:
         6c:0d:0c:09:71:91:b8:95:09:71:f6:7f:34:27:ff:35:48:a6:
         94:06:e6:8f:c2:c8:1d:37:66:20:10:c2:22:c7:bb:fc:05:dd:
         b7:52:9d:fc:6c:48:c2:7e:3b:8a:73:e8:e6:f1:e4:fa:a7:5e:
         a8:8c:26:ac:fa:a7:63:58:7b:93:ba:d7:37:86:35:c6:60:08:
         cc:55:c2:95:54:58:0b:25:16:0b:ab:b6:b0:df:7e:ff:ab:9a:
         81:e5:c1:64:7d:c0:23:8e:df:da:57:07:32:a0:58:a9:eb:f6:
         35:29:73:37:12:5d:7d:d6:43:67:79:3b:ad:bd:fe:87:dd:a1:
         f6:7e:19:f4:d0:e1:54:cc:e6:cc:15:f5:17:bc:28:e5:b5:81:
         80:6e:8e:68:6d:e5:1a:c7:7b:e9:26:0b:63:36:bb:06:71:df:
         1b:e9:d9:1a:6f:4a:f6:75:19:22:9b:88:b1:39:43:3d:ac:8f:
         db:48:9d:bc:84:03:d4:d1:ca:5c:2f:3e:49:6c:03:86:23:20:
         c9:63:fb:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsngMEEK3QpdA50UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NmEwNjZjMWQtNWE3YS00OTMxLWFiZGItOGJhMTJhYmE2YTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZXy8zltgXaOpHlJInLkX4Bn7W2S/Ph37BPf
rd5d3tDRJq8YinKL6l0ANLYRlrbWDDHkW6ECiEe/+FR3byEvN+J3SXYJa0ZpgI6N
033G1pTOBPGcjIW5rz31o/q22p+KhcA3q1M0T063xgdqyTi6L30xNetj7H2+Ghl6
AW+H19wEPVDRupSzv2J0eYi0KupST7sraXwWpwSPLaAy59vtbalC+aqMi4HCzNdc
hnp+uhP/BFd3bpSReRsH63daAC0eFUHXR3VuTHDgE3L9Xg6vL0LxIBXh386MzEty
pWWIpNy+lAyVUNWHnL+4Cc+Yumr/ksN/45mp/g64ix6yf3OPCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMzDFCX/QT010VWs6yANu3rI1GVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTQxNjYyYTItZDYzNS0z
ZDJkLWJjMGEtYTVjN2Q4NTU5NzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScWMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2vTqxsPOPK4+P+/ybyOslcyY1u/XkSXpP3or/ZKcYn6+AHl/4Lix/m
VA2YWCk06eE3CTh0mGwNDAlxkbiVCXH2fzQn/zVIppQG5o/CyB03ZiAQwiLHu/wF
3bdSnfxsSMJ+O4pz6Obx5PqnXqiMJqz6p2NYe5O61zeGNcZgCMxVwpVUWAslFgur
trDffv+rmoHlwWR9wCOO39pXBzKgWKnr9jUpczcSXX3WQ2d5O629/ofdofZ+GfTQ
4VTM5swV9Re8KOW1gYBujmht5RrHe+kmC2M2uwZx3xvp2RpvSvZ1GSKbiLE5Qz2s
j9tInbyEA9TRylwvPklsA4YjIMlj+5I=
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:16:38 2024 by rpki-client on console-ams.rpki-client.org