Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8e25b78d-4462-30fb-8c9e-5f648a4a770f.roa
File:                     8e25b78d-4462-30fb-8c9e-5f648a4a770f.roa (raw, json)
Hash identifier:          g0MzqDlNyihpwegfB4Vj+gsBG1aXqOAJduk3wTjuKf4=
Subject key identifier:   EE:79:24:55:25:75:A4:F2:70:25:AE:0F:9F:BF:40:6F:0D:96:EF:1D
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858472C65D4B1D39CD0E1315054D0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8e25b78d-4462-30fb-8c9e-5f648a4a770f.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     13575
IP address blocks:        208.73.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d4:b1:d3:9c:d0:e1:31:50:54:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=bbb6e44f-0e5c-45eb-97e8-bb9a7bfeb01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:3c:0e:c1:e0:83:8f:9e:3f:30:c6:77:d8:
                    c9:d3:7f:68:ab:20:85:0c:c1:61:01:ce:c4:72:7a:
                    ae:3a:55:e4:02:32:ee:d7:93:44:9b:af:e8:d4:a7:
                    f3:2a:66:bf:05:f2:c2:fa:94:15:91:99:7f:6e:c9:
                    f2:66:0f:1e:bd:15:7d:a0:77:3d:3a:90:20:3b:43:
                    8e:ff:4d:1e:1e:f5:e9:91:f9:a6:ed:5d:39:14:7d:
                    b8:2f:9f:c7:a0:56:81:90:52:d3:ca:68:98:3b:1e:
                    22:7e:5e:32:8e:d5:4f:70:fc:5f:e4:87:3b:6b:77:
                    ec:eb:fa:66:40:b8:cc:d7:34:c6:d0:b2:87:67:83:
                    a3:4d:03:a4:65:1c:b3:69:41:1c:da:d6:bf:9d:ab:
                    b7:8d:1c:1d:08:f6:8d:81:c1:21:60:87:02:ce:b2:
                    a6:fd:6d:98:c9:2e:8b:63:15:83:aa:aa:0e:cc:46:
                    10:4c:bb:ec:b1:73:2a:c9:7a:d6:52:e8:65:71:36:
                    1b:d0:c6:cf:eb:3e:d4:23:5c:72:0a:15:f4:02:ce:
                    27:38:51:98:15:23:1e:e6:fe:db:e3:34:30:96:dd:
                    13:2e:f1:59:ea:3d:2f:8e:5b:5b:b3:34:71:c6:ea:
                    cc:6f:e5:4b:6b:bc:31:6a:59:d0:ce:1a:b3:55:31:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:79:24:55:25:75:A4:F2:70:25:AE:0F:9F:BF:40:6F:0D:96:EF:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8e25b78d-4462-30fb-8c9e-5f648a4a770f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:af:47:8d:2a:3e:4e:bf:70:fc:fc:4a:78:4b:a7:cf:27:65:
         5a:9f:e3:0c:3d:d2:8c:e6:20:74:0b:13:51:67:31:de:1b:b5:
         6a:d2:52:b2:b7:69:07:d7:8a:8c:cd:86:2f:f4:29:79:59:f3:
         3f:8a:ba:74:14:4d:6c:93:30:f3:fb:ba:e3:36:5e:3d:0f:26:
         0b:24:2e:05:c1:57:c1:33:ae:06:c5:27:67:2d:46:ab:b8:4e:
         d4:61:fa:75:ff:49:78:a9:3a:f8:3e:f3:19:32:e8:09:a3:67:
         d1:b7:35:2a:b1:34:d4:d1:46:e7:af:3c:af:a9:2e:2d:36:47:
         a4:40:82:ed:f4:10:73:0e:8e:b6:41:81:e2:24:bd:b2:da:ca:
         0e:4e:f4:90:87:5b:e0:31:9b:3a:1a:c7:cd:3b:5b:72:26:bc:
         39:02:83:7c:67:21:23:e4:e1:49:27:3c:c6:dd:5a:85:ac:9d:
         ae:e7:47:57:0d:97:89:0f:af:87:50:b6:18:69:45:b7:be:24:
         30:b8:a0:4f:02:ac:3c:08:b7:88:95:b1:15:91:13:dd:23:7f:
         2b:e0:a3:a3:c1:3a:cc:87:7e:c7:ec:0e:7d:16:ed:e0:c9:ce:
         7a:cf:70:4a:d1:4e:16:8c:d4:6e:b8:89:eb:65:bf:dd:f0:5d:
         ce:60:7d:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZdSx05zQ4TFQVNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk
YmJiNmU0NGYtMGU1Yy00NWViLTk3ZTgtYmI5YTdiZmViMDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1o8DsHgg4+ePzDGd9jJ039oqyCFDMFhAc7E
cnquOlXkAjLu15NEm6/o1KfzKma/BfLC+pQVkZl/bsnyZg8evRV9oHc9OpAgO0OO
/00eHvXpkfmm7V05FH24L5/HoFaBkFLTymiYOx4ifl4yjtVPcPxf5Ic7a3fs6/pm
QLjM1zTG0LKHZ4OjTQOkZRyzaUEc2ta/nau3jRwdCPaNgcEhYIcCzrKm/W2YyS6L
YxWDqqoOzEYQTLvssXMqyXrWUuhlcTYb0MbP6z7UI1xyChX0As4nOFGYFSMe5v7b
4zQwlt0TLvFZ6j0vjltbszRxxurMb+VLa7wxalnQzhqzVTEL9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO55JFUldaTycCWuD5+/QG8Nlu8dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvOGUyNWI3OGQtNDQ2Mi0z
MGZiLThjOWUtNWY2NDhhNGE3NzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ElfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABevR40qPk6/cPz8SnhLp88nZVqf4ww90ozmIHQLE1FnMd4btWrSUrK3
aQfXiozNhi/0KXlZ8z+KunQUTWyTMPP7uuM2Xj0PJgskLgXBV8EzrgbFJ2ctRqu4
TtRh+nX/SXipOvg+8xky6AmjZ9G3NSqxNNTRRuevPK+pLi02R6RAgu30EHMOjrZB
geIkvbLayg5O9JCHW+Axmzoax807W3ImvDkCg3xnISPk4UknPMbdWoWsna7nR1cN
l4kPr4dQthhpRbe+JDC4oE8CrDwIt4iVsRWRE90jfyvgo6PBOsyHfsfsDn0W7eDJ
znrPcErRThaM1G64ietlv93wXc5gfcs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:09:37 2024 by rpki-client on console-ams.rpki-client.org