Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea80255-02c0-3662-befc-d53e1b30cc0e.roa
File:                     0ea80255-02c0-3662-befc-d53e1b30cc0e.roa (raw, json)
Hash identifier:          SbobNwP2wHdMn1cAfym27L6vBvD7qcp01syzC0CtFDE=
Subject key identifier:   46:FE:EA:F8:17:12:DF:6F:5F:EE:ED:86:83:A7:EF:51:C2:93:79:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6B90DA184C4ED728BB5A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea80255-02c0-3662-befc-d53e1b30cc0e.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        73.113.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:90:da:18:4c:4e:d7:28:bb:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=0a373bd9-15b8-44f6-97b7-74f3d7f3f1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:ed:64:80:ed:85:68:b8:d0:e0:bd:5b:b8:
                    83:1a:c6:1e:85:93:ff:1b:f9:62:cf:e3:c4:e1:7f:
                    e7:56:2d:39:52:06:9d:97:d3:f1:be:c3:f8:69:0b:
                    98:a0:74:f1:87:c7:6f:1b:2b:09:7b:9e:d8:ab:da:
                    b5:d3:14:80:14:68:2d:69:8a:9e:1d:58:79:6c:c6:
                    02:3f:bc:b8:28:6d:f4:96:cb:ea:39:83:5c:ff:e7:
                    ad:68:63:32:ab:01:d0:7d:00:b7:2a:21:94:c5:27:
                    cf:6e:da:9d:28:b7:42:d1:52:a5:eb:77:51:3d:52:
                    d0:0d:5e:02:62:68:28:ae:68:41:dd:74:2f:37:41:
                    a8:a6:37:8d:ef:20:e4:9e:8a:c5:b3:b7:ef:cd:6b:
                    03:df:2e:21:3c:68:58:ca:ea:e1:91:46:57:00:77:
                    1a:12:6e:04:83:0b:ce:59:d7:86:f2:88:f0:a0:15:
                    d8:78:e9:c9:18:c2:54:2a:31:f1:e7:9e:d8:97:4b:
                    89:8e:50:32:77:14:b4:6c:2d:53:68:b0:92:ad:58:
                    0c:db:d8:61:b4:4d:9b:bd:27:06:55:1e:2a:33:95:
                    47:2b:df:db:6f:61:8f:8e:f8:2a:0b:b6:71:2d:13:
                    92:f2:9a:48:0c:70:eb:8c:9c:0f:59:11:0d:14:4e:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FE:EA:F8:17:12:DF:6F:5F:EE:ED:86:83:A7:EF:51:C2:93:79:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ea80255-02c0-3662-befc-d53e1b30cc0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.113.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:bd:9a:80:8c:b3:7d:09:14:8c:69:66:fc:8c:f9:2c:0a:
         a4:6f:20:9a:66:fb:04:a2:f8:34:1e:21:40:1d:b7:fe:fe:d8:
         e5:c9:7e:fb:b6:bc:1d:60:70:05:2a:5d:b6:62:53:a6:5b:0f:
         7e:d0:62:ad:5e:a6:17:82:cf:25:ff:7b:36:2a:06:7a:b4:87:
         45:60:7b:20:40:7e:eb:47:c5:ec:ae:a2:f2:1f:de:2c:2b:ab:
         7a:1f:34:6f:f9:2b:c0:5d:8d:a4:45:dd:fa:58:05:5d:6f:81:
         8f:50:76:ec:3a:9d:91:4b:4f:74:29:84:5c:f0:dd:7b:a7:9a:
         f9:11:8e:dd:ce:df:bd:3d:5c:f1:ce:d0:ed:93:76:fd:e2:cf:
         bb:d7:fa:76:bf:34:39:dd:61:2a:36:d7:10:a1:ae:57:c6:a5:
         7a:7c:e9:c8:ac:61:af:14:73:a7:56:10:1d:7f:0a:1f:f2:d4:
         33:8c:6d:52:cc:0c:5c:f3:6a:84:5d:3a:14:16:11:ff:e4:a8:
         10:7f:47:6c:bb:4d:dc:39:6b:98:ed:c4:25:6b:15:39:7f:ae:
         88:59:c3:35:57:e5:b6:c7:1d:2f:1b:93:55:bb:d9:fa:c1:8c:
         7f:a3:fe:5e:18:cc:a0:21:08:71:22:7d:65:88:f9:2c:6d:39:
         85:35:c1:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea5DaGExO1yi7WgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MGEzNzNiZDktMTViOC00NGY2LTk3YjctNzRmM2Q3ZjNmMWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoTtZIDthWi40OC9W7iDGsYehZP/G/liz+PE
4X/nVi05Ugadl9PxvsP4aQuYoHTxh8dvGysJe57Yq9q10xSAFGgtaYqeHVh5bMYC
P7y4KG30lsvqOYNc/+etaGMyqwHQfQC3KiGUxSfPbtqdKLdC0VKl63dRPVLQDV4C
YmgormhB3XQvN0GopjeN7yDknorFs7fvzWsD3y4hPGhYyurhkUZXAHcaEm4EgwvO
WdeG8ojwoBXYeOnJGMJUKjHx557Yl0uJjlAydxS0bC1TaLCSrVgM29hhtE2bvScG
VR4qM5VHK9/bb2GPjvgqC7ZxLROS8ppIDHDrjJwPWRENFE5yWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEb+6vgXEt9vX+7thoOn71HCk3ntMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGVhODAyNTUtMDJjMC0z
NjYyLWJlZmMtZDUzZTFiMzBjYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASXFrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmwvZqAjLN9CRSMaWb8jPksCqRvIJpm+wSi+DQeIUAdt/7+2OXJfvu2
vB1gcAUqXbZiU6ZbD37QYq1epheCzyX/ezYqBnq0h0VgeyBAfutHxeyuovIf3iwr
q3ofNG/5K8BdjaRF3fpYBV1vgY9Qduw6nZFLT3QphFzw3XunmvkRjt3O3709XPHO
0O2Tdv3iz7vX+na/NDndYSo21xChrlfGpXp86cisYa8Uc6dWEB1/Ch/y1DOMbVLM
DFzzaoRdOhQWEf/kqBB/R2y7Tdw5a5jtxCVrFTl/rohZwzVX5bbHHS8bk1W72frB
jH+j/l4YzKAhCHEifWWI+SxtOYU1wTI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:51 2025 by rpki-client