Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44d0325a-0549-3329-b7f8-cdf95fb1e866.roa
File:                     44d0325a-0549-3329-b7f8-cdf95fb1e866.roa (raw, json)
Hash identifier:          R+tH/+f0lTYJ2vCQs92ggu2CChntPZU45Hqouw2n6TQ=
Subject key identifier:   9B:4D:2E:40:B5:66:AF:57:1A:E4:6D:AC:62:36:28:D8:5D:52:E5:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C547649900EA92476DA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44d0325a-0549-3329-b7f8-cdf95fb1e866.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.54.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:54:76:49:90:0e:a9:24:76:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=e01df56b-2df7-40e9-bb86-112de62eef4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:7e:1b:95:ce:8b:cb:51:0a:63:8a:ee:c5:
                    42:9e:19:81:af:f0:5b:21:60:ce:90:17:42:c8:9f:
                    77:de:39:2b:1c:33:60:7a:30:46:5c:f1:5a:00:63:
                    1a:28:b2:65:9a:92:d4:6a:5e:b9:81:fb:a6:74:3b:
                    84:08:5f:fb:ab:e3:46:9b:fb:49:0d:5f:f9:c2:38:
                    2d:bf:b1:b5:80:81:e7:f3:e9:e0:23:df:69:10:f7:
                    54:d5:b1:56:91:0d:33:3b:4d:b1:b4:76:2d:26:78:
                    c2:ce:ca:ac:58:28:34:9f:22:7a:63:36:1c:c7:3f:
                    07:ef:9c:c9:53:77:27:51:c8:a2:86:bd:bd:a5:4f:
                    73:49:94:0e:e6:6e:be:0f:4d:d8:2d:a7:2d:18:8d:
                    8f:69:9f:db:27:45:ce:a2:c7:b8:cf:21:cb:04:d9:
                    b2:36:c6:36:c8:fc:a3:ef:b3:31:2c:7b:59:20:a1:
                    e9:82:1a:dd:a4:09:a9:a3:64:06:9a:1c:9c:86:b1:
                    8a:74:60:34:65:5c:e3:d5:e2:a4:75:68:fa:46:db:
                    70:a8:ce:f8:24:ad:ef:c1:8a:50:ad:d1:ee:0e:94:
                    f9:eb:b0:94:7d:ee:f5:e9:18:7c:e3:35:97:d6:2e:
                    38:e8:78:43:31:98:b7:1d:7a:a3:9c:78:b8:8f:f7:
                    4f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4D:2E:40:B5:66:AF:57:1A:E4:6D:AC:62:36:28:D8:5D:52:E5:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44d0325a-0549-3329-b7f8-cdf95fb1e866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.54.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8e:d9:c3:88:14:56:3b:2a:2a:80:99:03:62:45:5f:af:b2:
         af:2c:1e:75:9e:df:24:6e:6a:a7:9a:23:37:e7:3f:5e:94:f7:
         0c:5f:c0:a3:95:3a:8b:16:b7:7a:e2:32:37:71:17:8f:b8:ac:
         7f:66:8b:8b:33:50:90:eb:30:a4:a5:88:40:56:5f:6e:8b:c3:
         4a:ee:07:2b:29:b3:ca:ad:f8:ec:1d:19:19:e5:20:06:6d:77:
         7c:ca:b3:df:4e:80:f8:9b:e5:01:e8:15:06:f6:4c:51:ef:65:
         40:7c:ff:7c:a1:40:e0:c4:d3:19:98:ef:0a:3a:83:e1:7a:27:
         dd:e6:a3:de:20:85:66:c8:81:ec:b0:a3:e2:e0:8a:3d:6c:ef:
         9a:61:8a:4f:dc:6e:ed:f8:7d:05:7a:13:93:3e:1a:95:7b:01:
         92:87:0c:b7:5f:b8:51:03:e8:57:8d:27:68:ec:d2:36:ef:fd:
         a7:72:0d:cd:39:69:2b:95:af:36:f7:7f:60:e3:66:47:56:34:
         a4:16:13:43:cb:e3:08:17:1a:e6:a0:45:fc:52:da:0b:d9:a7:
         fb:8d:a0:c9:1d:0e:d6:24:e9:d4:f6:a3:6d:44:11:d4:dd:1f:
         51:79:85:98:dd:d5:1c:97:ac:a7:2c:ba:c4:f5:1e:58:76:fe:
         3e:4a:ee:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPFR2SZAOqSR22oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZTAxZGY1NmItMmRmNy00MGU5LWJiODYtMTEyZGU2MmVlZjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZF+G5XOi8tRCmOK7sVCnhmBr/BbIWDOkBdC
yJ933jkrHDNgejBGXPFaAGMaKLJlmpLUal65gfumdDuECF/7q+NGm/tJDV/5wjgt
v7G1gIHn8+ngI99pEPdU1bFWkQ0zO02xtHYtJnjCzsqsWCg0nyJ6YzYcxz8H75zJ
U3cnUciihr29pU9zSZQO5m6+D03YLactGI2PaZ/bJ0XOose4zyHLBNmyNsY2yPyj
77MxLHtZIKHpghrdpAmpo2QGmhychrGKdGA0ZVzj1eKkdWj6RttwqM74JK3vwYpQ
rdHuDpT567CUfe716Rh84zWX1i446HhDMZi3HXqjnHi4j/dPbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtNLkC1Zq9XGuRtrGI2KNhdUuV7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDRkMDMyNWEtMDU0OS0z
MzI5LWI3ZjgtY2RmOTVmYjFlODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSTbiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSO2cOIFFY7KiqAmQNiRV+vsq8sHnWe3yRuaqeaIzfnP16U9wxfwKOV
OosWt3riMjdxF4+4rH9mi4szUJDrMKSliEBWX26Lw0ruBysps8qt+OwdGRnlIAZt
d3zKs99OgPib5QHoFQb2TFHvZUB8/3yhQODE0xmY7wo6g+F6J93mo94ghWbIgeyw
o+Lgij1s75phik/cbu34fQV6E5M+GpV7AZKHDLdfuFED6FeNJ2js0jbv/adyDc05
aSuVrzb3f2DjZkdWNKQWE0PL4wgXGuagRfxS2gvZp/uNoMkdDtYk6dT2o21EEdTd
H1F5hZjd1RyXrKcsusT1Hlh2/j5K7jM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:18 2025 by rpki-client