Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d11c20f-5d49-3f71-89ca-60f2e467e71c.roa
File:                     5d11c20f-5d49-3f71-89ca-60f2e467e71c.roa (raw, json)
Hash identifier:          hPOSA91aXDmMoXwNw0eFCjLgMhbeSgNyWnVo+HlC/Oc=
Subject key identifier:   6B:B9:EB:A3:EE:8E:D4:24:87:74:DA:33:23:9E:F0:95:B2:BA:51:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E58FFF41E302496F3F4C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d11c20f-5d49-3f71-89ca-60f2e467e71c.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.237.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:8f:ff:41:e3:02:49:6f:3f:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=686376a2-24de-40ae-b1f5-7477e72b41cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:e6:cf:32:1b:1a:18:d9:40:57:2b:41:88:
                    82:ce:80:73:ec:15:ca:26:78:7f:d8:2f:31:47:18:
                    d6:ef:df:5a:cb:64:15:94:9d:87:98:53:3b:b0:49:
                    44:12:de:9d:83:d9:b2:87:3e:e8:a1:cd:e6:8c:ca:
                    84:e8:97:bb:bf:5f:e9:0c:69:c4:44:2d:0c:9c:5e:
                    7e:53:9d:03:4c:5e:8e:92:b1:15:00:28:34:13:7c:
                    82:0e:80:b1:90:ef:76:ea:4a:a6:3c:c8:65:c8:97:
                    19:e5:55:02:83:03:b0:5c:05:44:56:d5:92:70:07:
                    45:ba:15:0d:0a:fb:db:27:e6:54:e8:50:fc:f6:26:
                    37:de:1f:5f:f0:be:94:6a:37:85:5b:08:52:a8:fa:
                    6c:7b:36:90:8c:bc:3f:54:b0:2d:7d:d1:4c:99:f5:
                    57:68:37:ec:41:db:28:69:53:82:72:d8:4b:ad:97:
                    9f:d5:45:33:5c:61:a4:7f:31:32:ac:f6:0c:0f:3b:
                    68:b7:d3:0d:e7:f8:52:f7:85:25:64:a7:46:87:95:
                    18:ab:ce:44:83:f6:17:45:89:dc:88:e0:2f:56:a7:
                    3e:e3:17:de:73:e4:ea:41:44:f1:88:a8:eb:96:6c:
                    18:d8:2d:c2:e1:5f:aa:01:b0:10:98:68:68:d0:59:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B9:EB:A3:EE:8E:D4:24:87:74:DA:33:23:9E:F0:95:B2:BA:51:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d11c20f-5d49-3f71-89ca-60f2e467e71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.237.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d9:12:d7:50:66:2a:d7:ba:79:7f:7c:22:ab:eb:96:b7:a0:
         62:11:85:a7:aa:84:74:eb:c2:ee:a6:bf:2e:41:46:5d:76:94:
         ea:28:b9:20:ae:c1:49:78:2e:9d:08:00:07:b8:90:ac:e2:b0:
         55:47:42:ab:80:31:9e:8b:e2:b5:bb:a3:bc:94:49:32:80:a8:
         97:47:92:12:da:a1:df:f8:d3:61:11:55:13:4a:19:c2:27:74:
         2b:90:62:fb:e6:e3:5c:7b:df:8e:cb:fc:1a:c0:55:be:f6:5e:
         72:5f:12:36:d8:53:48:79:ca:fc:8b:41:a5:33:bd:38:34:4d:
         09:14:4a:ad:eb:c7:05:e7:f8:4d:16:64:6d:14:37:42:ac:c0:
         a6:9f:6a:58:b4:f4:62:e9:b4:1f:de:cc:8c:2b:80:3c:40:6c:
         33:96:02:3b:15:be:89:08:8e:bb:03:c0:3d:59:d5:41:90:02:
         ae:ad:e9:d7:52:09:20:47:6c:02:1a:3c:05:29:bd:17:38:a5:
         bf:e4:fe:58:1b:a0:6d:43:0f:f5:8f:af:e2:61:b4:04:ee:f4:
         54:a0:df:72:a8:19:7a:58:99:86:77:eb:e0:7a:78:b6:55:7b:
         68:88:71:6b:65:60:b8:41:3a:b1:30:ee:fd:ac:38:d1:da:7c:
         91:f1:af:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5Y//QeMCSW8/TIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
Njg2Mzc2YTItMjRkZS00MGFlLWIxZjUtNzQ3N2U3MmI0MWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2vmzzIbGhjZQFcrQYiCzoBz7BXKJnh/2C8x
RxjW799ay2QVlJ2HmFM7sElEEt6dg9myhz7ooc3mjMqE6Je7v1/pDGnERC0MnF5+
U50DTF6OkrEVACg0E3yCDoCxkO926kqmPMhlyJcZ5VUCgwOwXAVEVtWScAdFuhUN
CvvbJ+ZU6FD89iY33h9f8L6UajeFWwhSqPpsezaQjLw/VLAtfdFMmfVXaDfsQdso
aVOCcthLrZef1UUzXGGkfzEyrPYMDztot9MN5/hS94UlZKdGh5UYq85Eg/YXRYnc
iOAvVqc+4xfec+TqQUTxiKjrlmwY2C3C4V+qAbAQmGho0FmQ3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGu566PujtQkh3TaMyOe8JWyulGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQxMWMyMGYtNWQ0OS0z
ZjcxLTg5Y2EtNjBmMmU0NjdlNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSe2cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbZEtdQZirXunl/fCKr65a3oGIRhaeqhHTrwu6mvy5BRl12lOoouSCu
wUl4Lp0IAAe4kKzisFVHQquAMZ6L4rW7o7yUSTKAqJdHkhLaod/402ERVRNKGcIn
dCuQYvvm41x7347L/BrAVb72XnJfEjbYU0h5yvyLQaUzvTg0TQkUSq3rxwXn+E0W
ZG0UN0KswKafali09GLptB/ezIwrgDxAbDOWAjsVvokIjrsDwD1Z1UGQAq6t6ddS
CSBHbAIaPAUpvRc4pb/k/lgboG1DD/WPr+JhtATu9FSg33KoGXpYmYZ36+B6eLZV
e2iIcWtlYLhBOrEw7v2sONHafJHxr9U=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:12:39 2024 by rpki-client on console-fra.rpki-client.org