Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f37efbfc-ea69-3abf-b967-671ef92449f2.roa
File:                     f37efbfc-ea69-3abf-b967-671ef92449f2.roa (raw, json)
Hash identifier:          pKZvemr+TMXKC6aV+psLyyHPeOynbEH5q7F7xcc/a38=
Subject key identifier:   C2:96:49:53:E7:5A:88:CE:5C:6C:F6:C6:C1:AC:20:C0:EA:E6:78:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5FDFE23802574FBE0BDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f37efbfc-ea69-3abf-b967-671ef92449f2.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        76.145.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:fd:fe:23:80:25:74:fb:e0:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=6eda2ee6-b1ed-4658-b5db-fde1cab0639f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:d8:7d:66:77:43:54:ce:29:39:9e:0e:3b:
                    98:7b:b7:6b:18:05:3d:2e:26:a9:13:f3:9e:62:5b:
                    74:7f:0f:63:27:ec:1b:99:e9:39:c7:da:c0:b9:1a:
                    99:17:64:0f:59:dc:86:83:35:2d:cb:79:2e:62:80:
                    76:06:4d:21:e0:a7:61:e1:72:19:27:2e:05:72:07:
                    fc:22:c8:42:9d:1c:04:70:3f:72:15:fd:d3:86:74:
                    c8:f7:20:cf:4b:ee:c4:30:1e:72:f0:8d:04:99:c2:
                    35:37:e8:a9:b0:4d:12:e0:55:f9:f3:94:50:1d:dc:
                    56:5d:a0:b1:98:e3:f3:52:79:31:74:b9:4c:1c:4e:
                    bd:64:97:b9:62:00:23:79:84:c0:11:48:bc:3d:2c:
                    66:a2:53:1d:22:8f:e7:88:f4:b8:58:b6:e4:bb:2b:
                    d0:5d:74:40:d0:53:98:28:99:94:da:c5:fe:2e:1b:
                    43:43:3f:d7:52:b9:79:d1:9d:55:c0:53:4f:7a:68:
                    99:55:0f:e9:02:c0:38:df:71:cd:ab:bf:30:72:ad:
                    b7:52:fc:df:08:5f:04:d6:6e:5a:9e:fc:f6:28:2f:
                    c8:ec:80:79:23:a2:be:fc:01:a9:0e:d8:74:f2:cc:
                    1d:c3:5e:92:10:e7:b4:94:ac:0b:71:d7:f2:a7:66:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:96:49:53:E7:5A:88:CE:5C:6C:F6:C6:C1:AC:20:C0:EA:E6:78:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f37efbfc-ea69-3abf-b967-671ef92449f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:b5:21:17:55:22:d6:9a:4d:00:45:7c:4b:af:68:58:e0:
         be:7d:17:58:70:b7:39:b8:5e:80:0c:a2:be:bb:4d:cb:39:1e:
         b0:ba:2c:8b:d7:06:b8:74:29:65:71:d4:9a:07:d8:7f:b4:f3:
         64:5c:31:09:08:1f:82:b7:78:02:79:0c:21:69:63:b6:cc:95:
         84:9c:62:af:f5:8c:31:76:fd:cc:ed:6b:34:06:78:3d:65:d1:
         83:91:ad:d1:2d:bb:42:b1:f2:05:cb:82:a9:c0:67:cc:78:fe:
         c5:b3:af:1d:7a:2d:53:a8:f2:8b:4a:85:ce:8a:bf:b9:cb:59:
         ac:b3:6d:36:95:83:df:65:a4:b0:6f:b3:ef:d7:70:ba:3f:7c:
         99:49:02:52:0b:9f:00:6d:85:88:7f:4f:59:44:8d:14:00:de:
         b6:c3:17:16:e4:84:b2:cb:a3:d4:dd:70:cf:e2:f1:b7:19:f9:
         c4:c1:a7:64:b9:11:70:33:ce:74:33:c2:2b:4d:13:0d:e2:0d:
         95:a0:68:91:67:4f:53:fa:9f:1b:f2:9d:c6:71:09:44:62:be:
         5a:ed:42:78:da:6e:75:d1:d1:54:a2:f0:00:c0:bf:07:ad:cc:
         04:86:c9:63:4b:32:d4:6d:97:a8:4f:fb:20:56:c8:54:a5:46:
         44:4c:7f:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5f3+I4AldPvgvcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NmVkYTJlZTYtYjFlZC00NjU4LWI1ZGItZmRlMWNhYjA2MzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfHYfWZ3Q1TOKTmeDjuYe7drGAU9LiapE/Oe
Ylt0fw9jJ+wbmek5x9rAuRqZF2QPWdyGgzUty3kuYoB2Bk0h4Kdh4XIZJy4Fcgf8
IshCnRwEcD9yFf3ThnTI9yDPS+7EMB5y8I0EmcI1N+ipsE0S4FX585RQHdxWXaCx
mOPzUnkxdLlMHE69ZJe5YgAjeYTAEUi8PSxmolMdIo/niPS4WLbkuyvQXXRA0FOY
KJmU2sX+LhtDQz/XUrl50Z1VwFNPemiZVQ/pAsA433HNq78wcq23UvzfCF8E1m5a
nvz2KC/I7IB5I6K+/AGpDth08swdw16SEOe0lKwLcdfyp2Y1GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKWSVPnWojOXGz2xsGsIMDq5niOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjM3ZWZiZmMtZWE2OS0z
YWJmLWI5NjctNjcxZWY5MjQ0OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJHqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2HtSEXVSLWmk0ARXxLr2hY4L59F1hwtzm4XoAMor67Tcs5HrC6LIvX
Brh0KWVx1JoH2H+082RcMQkIH4K3eAJ5DCFpY7bMlYScYq/1jDF2/cztazQGeD1l
0YORrdEtu0Kx8gXLgqnAZ8x4/sWzrx16LVOo8otKhc6Kv7nLWayzbTaVg99lpLBv
s+/XcLo/fJlJAlILnwBthYh/T1lEjRQA3rbDFxbkhLLLo9TdcM/i8bcZ+cTBp2S5
EXAzznQzwitNEw3iDZWgaJFnT1P6nxvyncZxCURivlrtQnjabnXR0VSi8ADAvwet
zASGyWNLMtRtl6hP+yBWyFSlRkRMfz8=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:38:01 2024 by rpki-client on console-fra.rpki-client.org