Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b179ab-d76b-32ca-8baa-9a2843711939.roa
File:                     32b179ab-d76b-32ca-8baa-9a2843711939.roa (raw, json)
Hash identifier:          tzpcT3M+JfVLCUX65pKjFcfNzMb/IMdBTozXCoEDHXU=
Subject key identifier:   E9:78:84:62:60:93:18:1C:B1:19:D4:E4:75:7B:F8:C3:CF:29:49:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C0A6E23E7AFA061142780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b179ab-d76b-32ca-8baa-9a2843711939.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     22258
IP address blocks:        73.5.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:0a:6e:23:e7:af:a0:61:14:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=da5f2e88-aa5e-4d51-a0bc-b4388fb132cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:a6:3e:20:d0:c4:90:10:78:01:20:ed:55:
                    ed:3f:4b:13:bb:28:b2:06:5e:1f:f6:86:f8:65:ac:
                    fa:68:63:36:a9:ef:95:e8:7d:9a:76:74:c0:0c:ad:
                    ff:2f:0a:b9:64:3b:82:11:08:3f:7a:4d:73:79:f9:
                    31:dd:aa:ec:7e:d6:7c:44:5b:3d:59:5b:a7:6f:69:
                    5d:20:61:86:a4:91:f5:14:50:30:a4:76:13:e4:85:
                    64:91:72:3a:b3:2b:63:74:54:cf:fb:37:93:61:ce:
                    3d:9c:b1:ae:f4:94:e5:d6:40:77:8e:7d:fe:06:cf:
                    ab:13:fe:36:83:02:35:f8:26:3d:76:7d:8b:17:10:
                    4e:5c:c4:d8:36:b1:52:07:9e:44:85:01:69:ac:be:
                    54:dc:45:8d:2f:9a:e9:f0:87:86:c6:44:24:3b:f7:
                    eb:ca:08:da:ab:51:fd:c6:8a:3e:b6:08:bb:c9:a4:
                    7f:f0:fd:83:6a:1c:12:85:eb:19:90:8c:6c:fe:19:
                    3c:a0:7e:5a:7b:bd:b0:35:ab:19:47:4d:e6:a3:3b:
                    87:d2:77:8f:76:7a:54:f3:1b:52:5d:c2:76:b5:c0:
                    32:2b:94:ac:97:2f:1c:37:34:b4:b9:0d:94:be:48:
                    97:3c:0f:1a:dc:a5:8e:2c:43:6c:6f:00:83:e3:1a:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:78:84:62:60:93:18:1C:B1:19:D4:E4:75:7B:F8:C3:CF:29:49:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b179ab-d76b-32ca-8baa-9a2843711939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.5.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:8c:ce:67:5c:bd:92:90:79:30:a3:d2:be:48:31:44:b7:28:
         e5:9e:0d:2f:f5:16:f8:78:0e:51:5d:7b:5f:63:c3:c9:00:73:
         5a:48:45:5f:96:8f:ce:06:1b:4d:94:ad:a3:1a:c6:e9:fe:43:
         5d:81:fa:90:f7:8e:4d:d4:ec:fa:1a:a6:66:db:b1:d9:1c:46:
         9c:4d:1b:a8:58:ed:b0:f3:18:7b:6f:67:90:80:7a:19:7b:38:
         0e:b3:9e:5e:36:74:71:2a:bc:64:b5:f6:e2:c8:b7:9e:93:70:
         1d:cd:e0:df:32:de:8c:fe:d6:0f:a2:c7:ca:61:32:2d:5c:f0:
         ec:9f:b7:7b:20:37:82:92:84:cc:d6:a2:07:10:39:88:8a:11:
         fe:dd:2a:39:fe:0f:58:23:7f:52:de:e6:3b:eb:d3:ce:08:3a:
         dc:e1:0c:3c:00:34:2b:19:40:d8:b3:51:0c:9a:28:06:57:5f:
         3d:19:78:f7:dc:2a:16:5d:d5:30:24:12:73:e6:ec:a5:e7:e7:
         da:d8:4a:d9:f2:cd:98:6c:ad:71:46:18:86:98:23:03:c9:ae:
         d8:76:76:64:e5:44:be:38:0f:78:4e:92:a5:9c:29:e7:b4:1d:
         fe:8f:6c:e7:a3:99:02:69:1d:f3:c2:17:c3:bc:aa:cb:ac:76:
         8e:c3:69:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLApuI+evoGEUJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGE1ZjJlODgtYWE1ZS00ZDUxLWEwYmMtYjQzODhmYjEzMmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXCmPiDQxJAQeAEg7VXtP0sTuyiyBl4f9ob4
Zaz6aGM2qe+V6H2adnTADK3/Lwq5ZDuCEQg/ek1zefkx3arsftZ8RFs9WVunb2ld
IGGGpJH1FFAwpHYT5IVkkXI6sytjdFTP+zeTYc49nLGu9JTl1kB3jn3+Bs+rE/42
gwI1+CY9dn2LFxBOXMTYNrFSB55EhQFprL5U3EWNL5rp8IeGxkQkO/frygjaq1H9
xoo+tgi7yaR/8P2DahwShesZkIxs/hk8oH5ae72wNasZR03mozuH0nePdnpU8xtS
XcJ2tcAyK5Ssly8cNzS0uQ2UvkiXPA8a3KWOLENsbwCD4xrtzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOl4hGJgkxgcsRnU5HV7+MPPKUlpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJiMTc5YWItZDc2Yi0z
MmNhLThiYWEtOWEyODQzNzExOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQUMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMmMzmdcvZKQeTCj0r5IMUS3KOWeDS/1Fvh4DlFde19jw8kAc1pIRV+W
j84GG02UraMaxun+Q12B+pD3jk3U7PoapmbbsdkcRpxNG6hY7bDzGHtvZ5CAehl7
OA6znl42dHEqvGS19uLIt56TcB3N4N8y3oz+1g+ix8phMi1c8Oyft3sgN4KShMzW
ogcQOYiKEf7dKjn+D1gjf1Le5jvr084IOtzhDDwANCsZQNizUQyaKAZXXz0ZePfc
KhZd1TAkEnPm7KXn59rYStnyzZhsrXFGGIaYIwPJrth2dmTlRL44D3hOkqWcKee0
Hf6PbOejmQJpHfPCF8O8qsusdo7DaQU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:52:10 2025 by rpki-client