Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/530d0736-af5d-3319-a89b-f18df081b641.roa
File:                     530d0736-af5d-3319-a89b-f18df081b641.roa (raw, json)
Hash identifier:          9g1owXDM6I0851KLyBQPltCpDvafpb/I+KT+sVts7kk=
Subject key identifier:   40:E9:E5:70:07:C6:24:DE:AE:1E:23:A9:BB:E5:57:9F:53:BD:4D:52
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5819DB1DA80702FA754E040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/530d0736-af5d-3319-a89b-f18df081b641.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        72.173.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:9d:b1:da:80:70:2f:a7:54:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=835dae82-3f10-4008-86e4-20f73b48bb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:e6:c4:12:2d:b6:2d:d0:ff:3c:f1:77:0f:
                    4a:1c:a7:9b:c6:19:46:87:4f:28:8f:f1:e2:9f:cd:
                    ee:34:86:e7:99:e9:59:ab:0a:90:ff:d6:09:0e:03:
                    97:df:fc:d8:5e:91:0c:d5:5e:80:4d:a8:54:2c:08:
                    b7:02:e3:b1:24:78:8e:88:ff:ed:c8:b3:20:6a:04:
                    c4:fa:b1:c1:3e:36:c7:7b:7b:3e:de:7b:75:2f:bf:
                    88:69:f3:ac:72:f7:9f:69:15:24:fb:90:64:84:34:
                    8d:96:55:60:bd:e9:75:b7:0e:57:31:e8:39:5d:69:
                    04:1e:b7:79:26:6e:c4:16:6f:e4:2e:a0:58:ee:45:
                    56:2b:ca:97:54:49:32:8e:17:2f:46:c0:44:cb:12:
                    dd:01:6c:f0:3e:ab:5e:16:8c:f2:6f:8d:af:23:4f:
                    1e:fc:cd:08:7e:12:d1:ef:6f:70:44:9f:39:80:72:
                    db:a5:27:55:00:5f:dc:ff:aa:14:42:0c:2f:55:6e:
                    5c:05:b8:9b:48:a3:68:1a:cc:3b:61:17:0f:45:99:
                    0a:64:f6:4b:2e:1a:af:ab:cd:57:da:58:27:80:5e:
                    82:b4:f2:de:9f:55:bc:d6:a3:98:31:c6:c7:68:0e:
                    16:37:58:14:ec:ab:b0:e4:87:b1:20:54:f3:15:be:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E9:E5:70:07:C6:24:DE:AE:1E:23:A9:BB:E5:57:9F:53:BD:4D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/530d0736-af5d-3319-a89b-f18df081b641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:36:25:eb:25:44:8a:b1:fa:29:55:66:7f:ac:40:6c:75:7e:
         50:0c:b7:f7:5a:73:ab:6e:38:34:39:b4:01:5e:d8:2d:e2:43:
         3c:0c:d7:88:f1:b0:33:ce:af:6a:71:8a:88:d0:f9:73:d9:37:
         02:05:d3:fb:4b:59:42:d5:b3:6e:8a:82:82:be:cf:5a:44:bc:
         f4:2f:e1:6d:fd:10:0e:87:2e:15:ec:5a:06:be:c0:9d:13:46:
         ef:f4:dc:2c:be:46:f4:fe:9d:37:17:8b:53:6b:7f:e9:8b:f5:
         b4:8f:4e:68:aa:a0:0e:98:b1:8c:fb:ee:8c:ba:4a:91:27:c5:
         98:63:8d:ea:85:86:da:49:b7:90:db:5c:1e:d7:bd:b5:68:ba:
         1e:16:fc:d1:40:e1:31:59:db:76:af:d7:89:20:ff:ff:db:0f:
         32:f5:04:25:60:22:36:77:a3:27:9d:a0:18:0f:40:87:9d:60:
         01:fc:01:1b:1d:45:a8:80:e6:6e:42:b3:60:ce:d7:21:1c:eb:
         8a:ec:6f:b9:57:f0:ba:67:68:60:c1:f8:bc:c1:ef:0d:10:fd:
         f1:9e:dd:88:74:4c:e7:62:bb:d8:07:3e:97:4a:fc:8e:60:06:
         35:a5:6c:a4:cf:a1:88:83:79:ad:05:0e:3d:e2:1b:ea:b1:0a:
         70:44:e3:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ2x2oBwL6dU4EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODM1ZGFlODItM2YxMC00MDA4LTg2ZTQtMjBmNzNiNDhiYjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU3mxBItti3Q/zzxdw9KHKebxhlGh08oj/Hi
n83uNIbnmelZqwqQ/9YJDgOX3/zYXpEM1V6ATahULAi3AuOxJHiOiP/tyLMgagTE
+rHBPjbHe3s+3nt1L7+IafOscvefaRUk+5BkhDSNllVgvel1tw5XMeg5XWkEHrd5
Jm7EFm/kLqBY7kVWK8qXVEkyjhcvRsBEyxLdAWzwPqteFozyb42vI08e/M0IfhLR
729wRJ85gHLbpSdVAF/c/6oUQgwvVW5cBbibSKNoGsw7YRcPRZkKZPZLLhqvq81X
2lgngF6CtPLen1W81qOYMcbHaA4WN1gU7Kuw5IexIFTzFb6KhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDp5XAHxiTerh4jqbvlV59TvU1SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTMwZDA3MzYtYWY1ZC0z
MzE5LWE4OWItZjE4ZGYwODFiNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGI2JeslRIqx+ilVZn+sQGx1flAMt/dac6tuODQ5tAFe2C3iQzwM14jx
sDPOr2pxiojQ+XPZNwIF0/tLWULVs26KgoK+z1pEvPQv4W39EA6HLhXsWga+wJ0T
Ru/03Cy+RvT+nTcXi1Nrf+mL9bSPTmiqoA6YsYz77oy6SpEnxZhjjeqFhtpJt5Db
XB7XvbVouh4W/NFA4TFZ23av14kg///bDzL1BCVgIjZ3oyedoBgPQIedYAH8ARsd
RaiA5m5Cs2DO1yEc64rsb7lX8LpnaGDB+LzB7w0Q/fGe3Yh0TOdiu9gHPpdK/I5g
BjWlbKTPoYiDea0FDj3iG+qxCnBE4ws=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:15 2025 by rpki-client