Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b86468d-14ef-3693-9dca-d7bfb17b9e60.roa
File:                     5b86468d-14ef-3693-9dca-d7bfb17b9e60.roa (raw, json)
Hash identifier:          5orNMKXH8WEIP7GXmIrpDO2ge8dLqtNRUfdzAxk3FU4=
Subject key identifier:   B6:3B:14:49:97:67:15:BA:D0:9B:F1:63:88:3B:60:4B:88:B2:DA:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FDE5FED74854F3D04F420
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b86468d-14ef-3693-9dca-d7bfb17b9e60.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     22258
IP address blocks:        73.252.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:de:5f:ed:74:85:4f:3d:04:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=dd5025b7-81bb-45cc-b424-f83a5a6d0ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:f6:78:e1:13:35:b7:f8:fe:e3:de:14:41:
                    a2:87:dd:7e:dc:bd:1b:27:0f:44:05:d3:b5:42:81:
                    78:e8:48:fe:04:b3:e9:f8:c8:58:f5:0a:39:3b:45:
                    b6:49:ae:42:45:cf:c4:a7:d9:3f:7a:da:ad:33:dc:
                    f7:64:85:ca:39:11:c7:15:b9:db:6a:f2:c0:1b:b2:
                    62:e0:36:5b:98:66:88:94:61:58:b0:7f:2b:47:61:
                    1d:39:03:17:61:42:33:d8:ad:ed:1e:09:93:14:56:
                    23:02:47:79:f1:ce:04:3f:f2:09:ea:7f:31:00:ca:
                    6c:82:43:80:a4:ca:9c:21:a3:c7:23:5f:db:ee:5b:
                    21:e4:30:c0:8c:45:a0:c9:ba:e2:8a:10:4d:d7:9e:
                    67:fd:f9:c0:04:55:1e:ba:cc:cf:00:67:35:0a:43:
                    59:89:c6:66:cd:ff:c1:0d:6d:dc:5c:6b:6b:b3:8b:
                    d4:15:25:cd:4d:35:f5:9e:b1:79:62:94:52:df:54:
                    4c:d8:30:ab:a1:64:af:94:78:1d:f0:cb:97:15:a9:
                    e3:2c:05:6d:85:28:31:b5:3f:0d:e9:93:ad:1a:e2:
                    e0:7b:ee:ba:c7:4a:8e:6a:1b:0d:25:15:47:d1:48:
                    6a:b4:cf:6a:04:88:d3:ab:bc:3c:78:d9:ce:b9:f6:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:14:49:97:67:15:BA:D0:9B:F1:63:88:3B:60:4B:88:B2:DA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b86468d-14ef-3693-9dca-d7bfb17b9e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.252.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:48:4d:27:59:e0:cf:fe:0e:3f:02:fe:79:c8:aa:b9:6b:7c:
         8f:0a:71:ec:23:39:9b:b8:25:8f:aa:56:14:ed:54:a2:0a:f5:
         28:11:d0:35:db:9a:c0:18:e6:53:f4:2d:bf:37:ce:95:ee:de:
         f2:28:aa:49:83:84:4a:33:59:d8:f1:3a:9e:85:db:31:51:45:
         60:12:91:21:8b:cc:91:a8:03:24:2a:9a:7e:80:68:c3:5e:e1:
         f4:a2:d1:2f:92:ef:b0:a4:ad:58:b8:32:50:38:15:4a:ca:d5:
         4e:fc:31:98:50:dc:69:41:01:78:24:e0:c1:42:d3:2a:ec:69:
         98:53:d0:9d:4f:54:58:b4:ea:d3:31:9b:9c:5f:19:00:5c:49:
         8e:f3:9b:4c:f5:40:8a:8b:35:cd:ae:00:5b:2e:30:f3:b3:52:
         ea:ae:b5:2b:d3:f8:e9:4d:35:5c:3e:fc:db:23:22:63:69:55:
         16:86:db:a2:c1:e4:83:35:90:78:65:91:65:7e:f2:02:8a:0a:
         be:31:58:b1:67:8c:78:8a:91:6e:5e:82:a9:84:18:df:4e:b4:
         47:ef:9f:0d:79:3e:86:0f:c9:e2:e5:51:e6:26:84:9e:51:93:
         07:dd:e2:5d:86:17:61:cf:89:c3:63:a4:67:c1:ba:16:0f:00:
         ee:67:c2:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb95f7XSFTz0E9CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
ZGQ1MDI1YjctODFiYi00NWNjLWI0MjQtZjgzYTVhNmQwZWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFj2eOETNbf4/uPeFEGih91+3L0bJw9EBdO1
QoF46Ej+BLPp+MhY9Qo5O0W2Sa5CRc/Ep9k/etqtM9z3ZIXKORHHFbnbavLAG7Ji
4DZbmGaIlGFYsH8rR2EdOQMXYUIz2K3tHgmTFFYjAkd58c4EP/IJ6n8xAMpsgkOA
pMqcIaPHI1/b7lsh5DDAjEWgybriihBN155n/fnABFUeuszPAGc1CkNZicZmzf/B
DW3cXGtrs4vUFSXNTTX1nrF5YpRS31RM2DCroWSvlHgd8MuXFanjLAVthSgxtT8N
6ZOtGuLge+66x0qOahsNJRVH0UhqtM9qBIjTq7w8eNnOufZvXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLY7FEmXZxW60JvxY4g7YEuIstq2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWI4NjQ2OGQtMTRlZi0z
NjkzLTlkY2EtZDdiZmIxN2I5ZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfxFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9ITSdZ4M/+Dj8C/nnIqrlrfI8KcewjOZu4JY+qVhTtVKIK9SgR0DXb
msAY5lP0Lb83zpXu3vIoqkmDhEozWdjxOp6F2zFRRWASkSGLzJGoAyQqmn6AaMNe
4fSi0S+S77CkrVi4MlA4FUrK1U78MZhQ3GlBAXgk4MFC0yrsaZhT0J1PVFi06tMx
m5xfGQBcSY7zm0z1QIqLNc2uAFsuMPOzUuqutSvT+OlNNVw+/NsjImNpVRaG26LB
5IM1kHhlkWV+8gKKCr4xWLFnjHiKkW5egqmEGN9OtEfvnw15PoYPyeLlUeYmhJ5R
kwfd4l2GF2HPicNjpGfBuhYPAO5nwkk=
-----END CERTIFICATE-----
Generated at Sun Dec 22 16:23:44 2024 by rpki-client on console-ams.rpki-client.org