Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/054bb6fd-f0cd-3694-892d-cce470f3e472.roa
File:                     054bb6fd-f0cd-3694-892d-cce470f3e472.roa (raw, json)
Hash identifier:          xmPt7f/5iEtOz9eBA7A3QwWu9v8ku9ffbl+GWVCmFho=
Subject key identifier:   D3:21:88:49:BD:B4:65:30:25:F4:1C:C9:29:57:AA:CE:64:52:18:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858481170229FDBA49AFE975B16C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/054bb6fd-f0cd-3694-892d-cce470f3e472.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        75.64.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:22:9f:db:a4:9a:fe:97:5b:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=f26257bc-3cce-473a-a312-a0e3ad384461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:7e:9d:b1:75:6e:a5:98:8b:91:e5:e8:56:
                    73:6d:8f:93:7d:0f:fc:d9:40:95:c0:71:37:6c:41:
                    98:dc:ca:42:5f:08:a9:f0:e9:b1:5a:47:7d:e6:54:
                    1a:1f:fa:72:29:1e:a4:48:a0:de:2a:27:77:e2:93:
                    ff:c3:63:70:0c:23:93:0d:a2:ae:33:17:be:14:59:
                    7d:79:79:bb:02:75:67:c4:36:1e:c9:e7:4b:ae:c4:
                    62:a1:53:60:04:65:54:8d:f0:f8:59:65:2a:5b:c6:
                    e1:9e:12:f2:5d:f4:9e:ae:2a:0a:d0:27:ad:0d:5b:
                    32:e1:0d:19:d1:50:b8:3f:50:26:2f:47:7c:29:13:
                    c0:4d:d2:a0:8a:a9:a8:4a:bc:06:1d:ab:58:f6:ed:
                    4f:58:8c:9e:8e:b5:67:de:42:4e:8a:7c:67:b6:bb:
                    94:65:c8:b9:b9:47:1c:9c:2a:17:25:13:c9:b5:ad:
                    ef:01:fb:06:65:10:a8:3e:13:4b:45:86:01:89:3a:
                    fe:67:c1:0f:31:4b:c7:ab:38:b8:3d:08:56:29:31:
                    66:b2:64:d5:0a:04:e8:cc:fa:d4:0c:8c:2a:5c:1a:
                    12:3a:2d:ae:9c:ea:a0:66:50:9f:40:55:73:19:ea:
                    22:32:c2:77:9d:f2:35:6c:9a:e0:2f:63:19:d8:ee:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:21:88:49:BD:B4:65:30:25:F4:1C:C9:29:57:AA:CE:64:52:18:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/054bb6fd-f0cd-3694-892d-cce470f3e472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:01:c4:10:fa:40:02:2f:a1:63:e6:c0:b5:c3:18:af:0a:01:
         3f:cb:a1:d6:8d:92:9a:9d:e0:ae:ba:08:bb:0a:ca:16:e9:52:
         3e:14:7e:69:71:48:7b:5e:df:6f:80:99:29:ec:63:ea:c6:50:
         4e:97:72:cf:f2:be:9b:a7:a2:4b:17:5f:aa:f4:ae:b5:05:6b:
         8b:3b:9d:e0:d3:24:97:20:45:23:26:78:fa:a0:a6:a8:a0:62:
         b7:0f:d0:ba:62:5d:2b:01:46:43:b1:6f:f7:3d:d2:b3:de:5f:
         ad:62:af:c1:81:1c:fe:17:8a:58:87:8d:17:5b:dc:1b:ee:f3:
         18:8b:da:f4:26:04:5c:d2:ba:d0:76:97:b2:e3:af:a1:b5:f6:
         8c:d1:b0:8f:03:01:89:d6:75:70:94:3b:c2:3a:04:a2:ed:92:
         80:4c:51:ad:bc:02:18:0a:af:c7:3f:74:57:70:77:42:79:a2:
         3e:d2:f9:39:9d:c8:eb:d9:56:30:3c:21:af:1d:5b:46:ad:e2:
         53:d1:26:3d:fe:5e:ca:d3:44:84:90:91:a6:64:e0:7a:dd:5c:
         02:d3:c5:ac:d3:c6:6b:9e:fd:e8:a5:a1:6e:96:39:a6:0a:bc:
         83:a5:70:dd:84:53:fa:c0:da:b6:bd:9b:cc:3d:85:92:e9:0d:
         9f:b5:ec:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRcCKf26Sa/pdbFsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
ZjI2MjU3YmMtM2NjZS00NzNhLWEzMTItYTBlM2FkMzg0NDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg59+nbF1bqWYi5Hl6FZzbY+TfQ/82UCVwHE3
bEGY3MpCXwip8OmxWkd95lQaH/pyKR6kSKDeKid34pP/w2NwDCOTDaKuMxe+FFl9
eXm7AnVnxDYeyedLrsRioVNgBGVUjfD4WWUqW8bhnhLyXfSerioK0CetDVsy4Q0Z
0VC4P1AmL0d8KRPATdKgiqmoSrwGHatY9u1PWIyejrVn3kJOinxntruUZci5uUcc
nCoXJRPJta3vAfsGZRCoPhNLRYYBiTr+Z8EPMUvHqzi4PQhWKTFmsmTVCgTozPrU
DIwqXBoSOi2unOqgZlCfQFVzGeoiMsJ3nfI1bJrgL2MZ2O4p2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMhiEm9tGUwJfQcySlXqs5kUhjLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU0YmI2ZmQtZjBjZC0z
Njk0LTg5MmQtY2NlNDcwZjNlNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS0CJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYBxBD6QAIvoWPmwLXDGK8KAT/LodaNkpqd4K66CLsKyhbpUj4Ufmlx
SHte32+AmSnsY+rGUE6Xcs/yvpunoksXX6r0rrUFa4s7neDTJJcgRSMmePqgpqig
YrcP0LpiXSsBRkOxb/c90rPeX61ir8GBHP4XiliHjRdb3Bvu8xiL2vQmBFzSutB2
l7Ljr6G19ozRsI8DAYnWdXCUO8I6BKLtkoBMUa28AhgKr8c/dFdwd0J5oj7S+Tmd
yOvZVjA8Ia8dW0at4lPRJj3+XsrTRISQkaZk4HrdXALTxazTxmue/eiloW6WOaYK
vIOlcN2EU/rA2ra9m8w9hZLpDZ+17G4=
-----END CERTIFICATE-----
Generated at Sun Dec 22 03:51:13 2024 by rpki-client on console-ams.rpki-client.org