Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/635d5dc4-e769-3643-b04b-d4355f9568be.roa
File:                     635d5dc4-e769-3643-b04b-d4355f9568be.roa (raw, json)
Hash identifier:          L2CNWVwfGl/pUrcFYPZ55kAtKOT5htPL60LgQLdpz64=
Subject key identifier:   D8:04:49:B7:31:CC:96:16:4C:F4:1A:61:24:B1:CD:4B:08:F5:AC:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C106B8FED2061C116BFC320
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/635d5dc4-e769-3643-b04b-d4355f9568be.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.150.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:6b:8f:ed:20:61:c1:16:bf:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=1e47f79a-5983-4588-b91b-d66736ef3f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:62:9c:4f:2e:6b:eb:fa:fc:ff:f8:aa:94:
                    af:52:4e:df:73:b2:85:46:d9:e6:a0:39:bf:9c:ea:
                    9c:d4:85:da:a0:a8:6c:b4:aa:9d:da:41:76:89:ef:
                    d2:67:bd:98:71:a9:25:eb:30:72:6c:0f:b9:4b:d3:
                    67:d5:5e:a1:5f:6b:cb:76:39:d6:54:2c:6d:42:22:
                    08:dc:80:b5:07:e7:05:29:36:b8:5d:bf:f4:1a:a3:
                    73:24:ce:8a:d1:75:52:52:2f:35:0f:15:d1:0d:c2:
                    da:73:0a:70:59:ea:32:6e:9b:59:0c:1b:b3:5b:a1:
                    9a:37:3e:a4:6e:eb:58:96:f0:72:14:30:70:09:f5:
                    39:a1:69:3f:c2:f0:3a:1f:cf:98:25:6a:26:80:c3:
                    f0:6f:1b:25:67:ed:c3:4d:80:84:cc:24:67:0a:fd:
                    86:0a:30:e7:3d:74:f5:1f:d6:56:4a:9f:5a:67:da:
                    62:a3:d2:08:de:3d:0b:2b:b9:d4:34:a4:b6:38:86:
                    3e:ac:56:21:9e:69:68:0f:49:3d:0b:b2:08:2e:7f:
                    de:9f:d8:98:48:c1:84:98:d4:42:85:25:d7:11:b0:
                    bb:4a:20:e1:e5:56:0f:e2:95:02:7a:a3:86:b5:5e:
                    49:3f:64:44:4f:a4:ab:9a:4d:44:e3:31:95:91:b4:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:04:49:B7:31:CC:96:16:4C:F4:1A:61:24:B1:CD:4B:08:F5:AC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/635d5dc4-e769-3643-b04b-d4355f9568be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.150.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:19:47:fa:ea:93:b8:3d:97:1d:a7:6e:36:ec:c0:b9:22:
         aa:2d:c9:e8:47:b9:77:7b:1d:0a:d8:a8:45:2a:38:4e:8a:24:
         b6:61:1f:25:ce:eb:6a:ec:6e:7c:7a:c6:5a:a6:c8:4b:34:65:
         3c:90:3a:71:87:20:26:8f:c8:7b:d4:08:d2:79:43:7d:67:dc:
         4b:ad:36:bc:1c:e6:18:62:b6:0c:d1:64:e7:2f:b4:14:eb:fe:
         74:a1:35:b4:49:1c:73:40:65:0e:59:b3:34:cc:99:e6:58:77:
         d7:05:b9:01:dd:53:d3:ec:96:86:42:b8:23:02:45:c1:1d:47:
         4e:64:de:85:13:c9:af:7d:92:6f:1d:6c:0d:5b:7a:51:d3:63:
         fa:46:d9:44:1c:ff:94:fe:08:f4:06:e6:ee:f0:b6:22:32:ca:
         4c:c5:09:42:45:65:82:7f:de:3b:78:e0:2b:65:a1:66:f5:3c:
         fe:d2:72:a4:80:1a:d4:c9:2d:fb:fe:f3:42:ee:63:f1:ed:6a:
         b9:e2:6b:d7:9f:d2:76:17:7a:ba:f8:62:66:71:a2:05:04:b0:
         6f:aa:ac:37:c3:62:88:4d:8b:30:4e:57:9b:2b:67:92:33:c5:
         36:3c:bd:06:65:7a:d0:fc:99:0a:e8:ab:c8:be:a6:4b:b3:be:
         47:e8:2c:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEGuP7SBhwRa/wyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MWU0N2Y3OWEtNTk4My00NTg4LWI5MWItZDY2NzM2ZWYzZjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApllinE8ua+v6/P/4qpSvUk7fc7KFRtnmoDm/
nOqc1IXaoKhstKqd2kF2ie/SZ72Ycakl6zBybA+5S9Nn1V6hX2vLdjnWVCxtQiII
3IC1B+cFKTa4Xb/0GqNzJM6K0XVSUi81DxXRDcLacwpwWeoybptZDBuzW6GaNz6k
butYlvByFDBwCfU5oWk/wvA6H8+YJWomgMPwbxslZ+3DTYCEzCRnCv2GCjDnPXT1
H9ZWSp9aZ9pio9II3j0LK7nUNKS2OIY+rFYhnmloD0k9C7IILn/en9iYSMGEmNRC
hSXXEbC7SiDh5VYP4pUCeqOGtV5JP2RET6Srmk1E4zGVkbQjDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNgESbcxzJYWTPQaYSSxzUsI9az3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjM1ZDVkYzQtZTc2OS0z
NjQzLWIwNGItZDQzNTVmOTU2OGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYcGUf66pO4PZcdp2427MC5IqotyehHuXd7HQrYqEUqOE6KJLZhHyXO
62rsbnx6xlqmyEs0ZTyQOnGHICaPyHvUCNJ5Q31n3EutNrwc5hhitgzRZOcvtBTr
/nShNbRJHHNAZQ5ZszTMmeZYd9cFuQHdU9PsloZCuCMCRcEdR05k3oUTya99km8d
bA1belHTY/pG2UQc/5T+CPQG5u7wtiIyykzFCUJFZYJ/3jt44CtloWb1PP7ScqSA
GtTJLfv+80LuY/Htarnia9ef0nYXerr4YmZxogUEsG+qrDfDYohNizBOV5srZ5Iz
xTY8vQZletD8mQroq8i+pkuzvkfoLLU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:03 2025 by rpki-client