Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba683bc0-624b-3a45-b467-13f4c4d3594d.roa
File:                     ba683bc0-624b-3a45-b467-13f4c4d3594d.roa (raw, json)
Hash identifier:          9qXMNuPKGY+OZy3dGbdNArBPjvYwEcSE9Z0xkkZ2OOA=
Subject key identifier:   94:BD:9D:1E:7A:AD:9B:7D:30:B4:9D:84:82:BC:B4:F9:1C:8E:E3:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CE21067E005D52AA4A9A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba683bc0-624b-3a45-b467-13f4c4d3594d.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        68.53.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:e2:10:67:e0:05:d5:2a:a4:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=36817927-2e35-4aad-a1ca-53f669cf234f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:cf:d6:58:f2:c0:08:8d:7c:17:7b:14:02:
                    f5:49:13:f1:92:94:58:99:a2:4c:77:98:9b:87:93:
                    7c:f6:75:7d:91:ae:e7:93:e9:dc:f1:96:b1:8b:65:
                    a6:3e:30:00:7f:02:05:ad:62:16:b9:a6:70:b2:0d:
                    b3:d2:a3:9a:a8:e7:c0:a5:ba:fe:35:1a:60:69:08:
                    49:97:74:5d:a6:30:81:25:4b:f0:10:d7:b2:e1:2b:
                    97:f3:2b:a4:77:1a:88:fe:da:23:81:27:39:b2:be:
                    1f:c7:7e:06:b8:47:7f:1f:f2:db:3d:ba:b0:ca:6b:
                    56:fa:d7:d3:78:9d:40:c8:74:ae:79:47:e4:6c:16:
                    2f:92:39:96:1e:53:76:c3:03:f8:13:30:ed:42:6e:
                    88:b6:b3:fe:bf:b8:bc:9f:2c:98:e5:c9:97:e2:57:
                    b3:49:3f:6c:38:48:cd:95:7f:63:f6:7f:2e:74:5f:
                    11:e7:dc:80:24:96:b3:78:73:2e:83:a2:04:a3:ec:
                    d6:6e:ca:d9:a3:64:ed:7b:90:c3:ee:b3:f3:e8:b9:
                    0f:a8:8e:8c:60:fc:9f:2b:95:b8:ae:99:17:2f:f0:
                    f6:24:9c:a5:73:e4:8e:ae:75:a3:ce:78:73:0c:de:
                    d8:16:b9:7b:bd:88:1e:69:dc:d3:2f:7a:3f:83:a9:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BD:9D:1E:7A:AD:9B:7D:30:B4:9D:84:82:BC:B4:F9:1C:8E:E3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba683bc0-624b-3a45-b467-13f4c4d3594d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:e3:10:84:07:83:ee:b7:c3:ea:ab:fc:bb:a8:c9:36:62:
         af:e1:35:15:c2:62:bc:fb:86:95:8a:00:0a:85:56:ec:8a:9f:
         d9:14:a6:37:a8:38:c7:e5:92:4e:4b:e6:cd:e6:c7:f4:cf:38:
         36:22:5a:61:2e:82:11:6d:85:5d:46:fd:fa:87:11:b9:cf:44:
         8d:2b:46:b0:41:04:ae:95:5a:e5:8a:b3:d0:26:a4:32:16:7c:
         8f:16:7a:ae:0c:08:d9:55:e6:61:79:44:da:7b:bd:8a:58:16:
         4f:8d:2b:06:f1:b2:72:37:df:9b:6e:ce:23:d7:04:ff:c5:fe:
         22:12:63:c7:ec:c1:7d:f9:44:6a:73:f7:f9:d3:9e:ba:d3:a9:
         ec:5b:a7:51:e2:9a:80:4e:11:df:9e:a3:e3:99:fe:92:93:c0:
         4d:58:ee:ce:a4:21:fc:2f:3d:c3:d0:f0:8a:38:97:79:e4:0d:
         88:13:db:64:ba:c2:f4:26:de:af:c0:25:24:8c:9b:14:aa:9a:
         cd:a1:50:a7:b9:74:c1:ec:25:1e:6c:94:49:07:8b:1c:79:fb:
         f3:2b:b1:3f:5b:7c:e9:60:a5:77:6e:21:7d:8f:e8:69:92:90:
         c9:47:43:83:88:bc:0b:e2:73:0d:25:37:15:92:0f:e9:9e:6e:
         0a:13:33:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOIQZ+AF1SqkqaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MzY4MTc5MjctMmUzNS00YWFkLWExY2EtNTNmNjY5Y2YyMzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkLP1ljywAiNfBd7FAL1SRPxkpRYmaJMd5ib
h5N89nV9ka7nk+nc8Zaxi2WmPjAAfwIFrWIWuaZwsg2z0qOaqOfApbr+NRpgaQhJ
l3RdpjCBJUvwENey4SuX8yukdxqI/tojgSc5sr4fx34GuEd/H/LbPbqwymtW+tfT
eJ1AyHSueUfkbBYvkjmWHlN2wwP4EzDtQm6ItrP+v7i8nyyY5cmX4lezST9sOEjN
lX9j9n8udF8R59yAJJazeHMug6IEo+zWbsrZo2Tte5DD7rPz6LkPqI6MYPyfK5W4
rpkXL/D2JJylc+SOrnWjznhzDN7YFrl7vYgeadzTL3o/g6lYcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJS9nR56rZt9MLSdhIK8tPkcjuNbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE2ODNiYzAtNjI0Yi0z
YTQ1LWI0NjctMTNmNGM0ZDM1OTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDUSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyD4xCEB4Put8Pqq/y7qMk2Yq/hNRXCYrz7hpWKAAqFVuyKn9kUpjeo
OMflkk5L5s3mx/TPODYiWmEughFthV1G/fqHEbnPRI0rRrBBBK6VWuWKs9AmpDIW
fI8Weq4MCNlV5mF5RNp7vYpYFk+NKwbxsnI335tuziPXBP/F/iISY8fswX35RGpz
9/nTnrrTqexbp1HimoBOEd+eo+OZ/pKTwE1Y7s6kIfwvPcPQ8Io4l3nkDYgT22S6
wvQm3q/AJSSMmxSqms2hUKe5dMHsJR5slEkHixx5+/MrsT9bfOlgpXduIX2P6GmS
kMlHQ4OIvAvicw0lNxWSD+mebgoTM5I=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:48 2025 by rpki-client