Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b94ee8-59bb-3dea-98b0-04c5cbdd3991.roa
File:                     e7b94ee8-59bb-3dea-98b0-04c5cbdd3991.roa (raw, json)
Hash identifier:          1zN7X6h3L+WVdU/KQsScBezXoLoWO0WSqwuU4IekJBA=
Subject key identifier:   7F:2D:22:B0:52:5B:96:A3:AB:88:61:BC:71:F5:2B:DB:09:E7:F1:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7B9D3BC14F453F904BA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b94ee8-59bb-3dea-98b0-04c5cbdd3991.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        73.144.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:b9:d3:bc:14:f4:53:f9:04:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=eae54be5-ef56-4f88-a351-b9b2f96ef670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:ed:7a:bd:d5:a8:3c:b9:90:a9:86:d1:e0:
                    d3:a6:9b:71:47:da:96:37:83:00:e9:4d:f8:32:53:
                    c9:cf:38:c2:18:e2:5a:41:7c:09:35:71:9e:f2:d7:
                    72:fa:40:d5:db:f8:d6:73:09:07:9c:e5:4d:e0:cc:
                    aa:85:8f:3a:b3:4e:98:73:46:c0:2a:5a:c8:a9:6f:
                    60:12:9a:a7:10:4a:f9:96:0a:9b:38:85:2e:b9:0f:
                    0e:ad:01:43:a4:54:53:0f:ff:55:46:bf:2a:46:23:
                    b5:e8:3f:c2:03:13:a9:be:92:d8:d1:06:11:13:32:
                    32:ac:b9:99:ed:33:0f:67:96:15:0e:73:a8:3d:9b:
                    a2:0f:31:8b:8f:cf:91:17:18:7c:0e:29:d3:46:10:
                    e9:f7:c0:12:d8:44:58:08:7e:90:0c:54:2c:3d:a6:
                    15:a5:ab:02:fd:d9:08:eb:fd:fd:d8:a4:61:bb:d2:
                    8d:ba:58:6b:9d:43:15:77:b4:86:a7:cb:b4:61:fe:
                    4a:ac:89:3f:dc:72:12:18:81:0f:20:6f:ee:de:20:
                    7e:37:9b:c0:af:82:78:d6:ca:6f:91:e9:2a:3a:f9:
                    7e:89:14:47:ee:d8:1a:78:ba:0f:21:26:31:87:84:
                    df:ff:2c:bc:54:22:3d:a9:1b:36:4d:4c:94:84:d7:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2D:22:B0:52:5B:96:A3:AB:88:61:BC:71:F5:2B:DB:09:E7:F1:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b94ee8-59bb-3dea-98b0-04c5cbdd3991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.144.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:a8:f3:5e:39:e4:a6:1d:76:df:d1:4e:3d:27:77:95:14:df:
         6a:47:d3:4d:d3:3c:9c:f6:24:16:85:9c:1f:92:9e:a4:64:d7:
         ff:23:de:13:39:ba:f3:97:d8:01:49:68:e6:57:e7:2d:80:a3:
         4e:9b:6b:b1:49:bf:9e:ab:b5:eb:af:0f:d6:c6:08:df:f0:4f:
         a7:ef:12:90:c4:42:2f:9a:be:89:f7:92:a1:6b:de:17:28:f0:
         83:a9:9a:6d:18:5e:9b:16:f0:08:cc:3c:8f:52:7b:c5:19:a6:
         84:18:7f:c6:ba:de:f9:23:38:67:f6:81:55:7d:05:3d:eb:2d:
         ef:c1:bd:e8:46:d2:84:49:91:07:46:be:fc:32:92:92:29:f4:
         19:ee:d9:96:a9:c7:dd:79:c9:dc:45:f8:cc:a4:1f:96:e3:61:
         2e:1a:da:4a:4d:c1:ba:0f:48:cd:dd:6a:f4:a4:b7:ee:e9:9f:
         88:dd:9c:53:c2:9e:04:8e:69:63:95:9f:63:73:89:ef:fb:78:
         cf:3a:50:a3:c9:56:e7:35:b7:3c:d1:85:ce:63:47:b7:89:b7:
         f6:eb:49:2e:2d:88:ab:1f:de:a2:d2:0c:e1:d2:56:91:c0:55:
         5f:1c:63:de:83:f6:5a:3f:1a:80:20:ea:72:d6:6a:28:ef:1a:
         f6:de:4b:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x7nTvBT0U/kEuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZWFlNTRiZTUtZWY1Ni00Zjg4LWEzNTEtYjliMmY5NmVmNjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon3ter3VqDy5kKmG0eDTpptxR9qWN4MA6U34
MlPJzzjCGOJaQXwJNXGe8tdy+kDV2/jWcwkHnOVN4MyqhY86s06Yc0bAKlrIqW9g
EpqnEEr5lgqbOIUuuQ8OrQFDpFRTD/9VRr8qRiO16D/CAxOpvpLY0QYREzIyrLmZ
7TMPZ5YVDnOoPZuiDzGLj8+RFxh8DinTRhDp98AS2ERYCH6QDFQsPaYVpasC/dkI
6/392KRhu9KNulhrnUMVd7SGp8u0Yf5KrIk/3HISGIEPIG/u3iB+N5vAr4J41spv
kekqOvl+iRRH7tgaeLoPISYxh4Tf/yy8VCI9qRs2TUyUhNeIWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8tIrBSW5ajq4hhvHH1K9sJ5/HtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTdiOTRlZTgtNTliYi0z
ZGVhLTk4YjAtMDRjNWNiZGQzOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSZBwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2o81455KYddt/RTj0nd5UU32pH003TPJz2JBaFnB+SnqRk1/8j3hM5
uvOX2AFJaOZX5y2Ao06ba7FJv56rteuvD9bGCN/wT6fvEpDEQi+avon3kqFr3hco
8IOpmm0YXpsW8AjMPI9Se8UZpoQYf8a63vkjOGf2gVV9BT3rLe/BvehG0oRJkQdG
vvwykpIp9Bnu2Zapx915ydxF+MykH5bjYS4a2kpNwboPSM3davSkt+7pn4jdnFPC
ngSOaWOVn2Nzie/7eM86UKPJVuc1tzzRhc5jR7eJt/brSS4tiKsf3qLSDOHSVpHA
VV8cY96D9lo/GoAg6nLWaijvGvbeS48=
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:58:43 2024 by rpki-client on console-fra.rpki-client.org