Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8e25b78d-4462-30fb-8c9e-5f648a4a770f.roa
File:                     8e25b78d-4462-30fb-8c9e-5f648a4a770f.roa (raw, json)
Hash identifier:          1gI9aqUN/+AwDwSlb05LxJ6uoTHuT/TPZFB1IGKgmKk=
Subject key identifier:   56:2F:9C:17:4C:1E:0A:DB:BC:68:4D:8F:D9:B7:73:8F:A5:72:8D:C1
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858456C5317F98286CD3776598BC0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8e25b78d-4462-30fb-8c9e-5f648a4a770f.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     13575
IP address blocks:        208.73.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:17:f9:82:86:cd:37:76:59:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=a5fa544d-b070-48c0-9c30-0f57b9e7ff08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:97:99:19:7e:8f:fc:50:dc:4f:aa:d5:7d:44:
                    d5:ad:5d:2b:14:73:38:b0:80:4e:a3:99:fd:c3:65:
                    f2:ff:91:3e:ae:ca:56:40:93:e1:36:bd:e8:16:25:
                    37:44:2d:68:d0:a1:64:74:70:f6:8f:4e:4a:d3:26:
                    19:f0:ed:92:05:14:b7:83:a8:3f:86:98:ca:15:06:
                    f8:b0:96:bf:7a:0e:3e:93:9d:0b:de:97:a7:02:2c:
                    d3:6a:b4:42:bf:ac:01:00:11:01:11:d5:3f:7f:26:
                    fe:f7:55:25:63:96:47:c0:d5:95:c8:cb:1c:28:89:
                    ed:aa:af:23:46:49:7b:a1:b2:e0:4d:56:c6:61:96:
                    a0:07:88:26:e6:5c:c1:fd:f7:f1:08:16:86:9e:c3:
                    cb:6c:dc:00:d7:9b:5e:e7:70:79:3a:7b:20:68:ee:
                    b4:00:bf:b8:38:18:19:25:9d:67:c7:57:59:d8:7a:
                    24:1f:41:95:2b:cf:60:8f:b6:b5:5c:48:77:7d:ed:
                    21:16:8a:28:a8:7d:f6:ec:8d:6e:48:cc:b4:bd:1b:
                    69:33:da:d8:07:1c:d8:6d:11:4b:fc:39:1f:37:5b:
                    31:50:b8:b0:3b:63:ba:7b:7c:a2:f3:8e:83:5a:85:
                    ba:4f:83:a6:0d:57:5d:e2:8f:1e:5a:05:6c:2e:b6:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2F:9C:17:4C:1E:0A:DB:BC:68:4D:8F:D9:B7:73:8F:A5:72:8D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8e25b78d-4462-30fb-8c9e-5f648a4a770f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:99:03:bf:18:c2:ad:18:63:2e:48:f4:fa:87:06:0d:03:c9:
         ed:c6:ad:68:32:b1:5c:ce:9f:49:49:39:4d:1f:50:a0:d4:10:
         63:30:71:1f:7d:1a:c4:14:f1:f8:f4:74:c8:29:80:c2:7f:2a:
         6a:64:9b:b6:47:9a:3d:ab:85:4a:37:ca:3a:05:a1:6b:3a:af:
         96:c7:31:06:32:e5:e5:ba:0e:e5:c7:70:fe:2a:bd:db:92:f5:
         29:bf:85:c5:24:24:20:24:32:35:2f:a5:a7:ea:0b:48:9f:9e:
         18:40:6f:50:d7:28:24:c1:57:c4:a8:ba:00:85:d6:23:26:9f:
         0f:02:b2:16:bd:42:f8:01:47:29:d0:00:2f:8d:05:2d:2c:ae:
         80:cb:37:11:d4:e7:61:bc:6d:ee:96:d2:ff:ed:86:6b:af:c0:
         25:f6:b6:c7:d5:31:db:aa:03:8a:f6:26:53:73:09:0f:cc:7d:
         43:1e:e4:96:69:21:b1:9f:8e:8a:c6:39:49:1f:f4:bb:7f:86:
         32:95:fb:59:e8:10:54:53:69:8a:0c:03:d2:23:b4:35:6b:3d:
         0e:9d:c7:b7:81:37:ab:3c:8e:3b:b3:f1:e6:54:9d:93:f6:b5:
         94:cb:75:ab:66:61:1a:75:83:d1:80:53:0c:6b:cb:4e:39:de:
         48:43:2e:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUxf5gobNN3ZZi8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk
YTVmYTU0NGQtYjA3MC00OGMwLTljMzAtMGY1N2I5ZTdmZjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5eZGX6P/FDcT6rVfUTVrV0rFHM4sIBOo5n9
w2Xy/5E+rspWQJPhNr3oFiU3RC1o0KFkdHD2j05K0yYZ8O2SBRS3g6g/hpjKFQb4
sJa/eg4+k50L3penAizTarRCv6wBABEBEdU/fyb+91UlY5ZHwNWVyMscKIntqq8j
Rkl7obLgTVbGYZagB4gm5lzB/ffxCBaGnsPLbNwA15te53B5OnsgaO60AL+4OBgZ
JZ1nx1dZ2HokH0GVK89gj7a1XEh3fe0hFoooqH327I1uSMy0vRtpM9rYBxzYbRFL
/DkfN1sxULiwO2O6e3yi846DWoW6T4OmDVdd4o8eWgVsLrb7MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYvnBdMHgrbvGhNj9m3c4+lco3BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvOGUyNWI3OGQtNDQ2Mi0z
MGZiLThjOWUtNWY2NDhhNGE3NzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ElfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWZA78Ywq0YYy5I9PqHBg0Dye3GrWgysVzOn0lJOU0fUKDUEGMwcR99
GsQU8fj0dMgpgMJ/Kmpkm7ZHmj2rhUo3yjoFoWs6r5bHMQYy5eW6DuXHcP4qvduS
9Sm/hcUkJCAkMjUvpafqC0ifnhhAb1DXKCTBV8SougCF1iMmnw8Csha9QvgBRynQ
AC+NBS0sroDLNxHU52G8be6W0v/thmuvwCX2tsfVMduqA4r2JlNzCQ/MfUMe5JZp
IbGfjorGOUkf9Lt/hjKV+1noEFRTaYoMA9IjtDVrPQ6dx7eBN6s8jjuz8eZUnZP2
tZTLdatmYRp1g9GAUwxry0453khDLnw=
-----END CERTIFICATE-----
Generated at Sat May 11 02:50:38 2024 by rpki-client on console-ams.rpki-client.org