Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c611eba3-9af6-39e4-8b40-155fe1513459.roa
File:                     c611eba3-9af6-39e4-8b40-155fe1513459.roa (raw, json)
Hash identifier:          4uBL4NyY7VqnotdPMfX+SEB4dfLGl5EdLUkFjbw01hM=
Subject key identifier:   35:9B:66:66:A0:6D:A4:E2:FD:C7:21:C4:C0:60:BD:FD:F4:82:BA:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5E96C2EC0CFA4257D8080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c611eba3-9af6-39e4-8b40-155fe1513459.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        73.184.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:e9:6c:2e:c0:cf:a4:25:7d:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=128aa007-d61d-42ba-9b29-bc6b42700ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:11:ba:b6:f5:89:d3:f9:e4:9c:12:ec:85:
                    02:19:ef:ae:6a:c5:35:c9:8c:33:08:a5:3c:64:f5:
                    9e:5a:21:d8:4f:72:ae:86:7a:18:83:50:7b:e3:f1:
                    e6:27:0d:32:43:06:7c:52:76:d8:cc:58:07:29:6c:
                    c7:e3:6b:4c:91:ca:bc:69:52:95:ea:aa:21:44:12:
                    0f:ac:af:c6:eb:ac:70:c7:cf:f5:80:86:30:ee:54:
                    aa:f8:96:01:0f:9d:0d:b0:d1:ca:3d:a5:80:06:0d:
                    24:a9:04:ab:56:4b:b3:7d:f5:d3:d7:b6:7b:4c:af:
                    6e:46:71:ea:0d:91:72:1d:08:f4:29:17:57:65:f9:
                    54:35:fd:40:85:f0:e6:7f:0f:c2:4b:da:35:a5:92:
                    18:f7:1f:84:bd:d3:64:06:6b:01:83:f3:fc:eb:ff:
                    ac:2c:1d:ed:4c:3f:23:3f:9c:7e:62:3e:96:f1:7c:
                    69:6a:4c:0a:f0:27:d6:4f:a8:10:97:15:51:0e:24:
                    4a:d7:2b:0b:70:f9:9e:bb:bc:cc:e4:9d:ef:d6:8f:
                    98:46:46:78:57:73:2c:11:12:a6:46:73:1f:ac:69:
                    6a:03:89:d3:32:5d:55:3e:38:41:e1:14:2c:1d:da:
                    ce:6d:da:95:c4:b7:7f:5a:e2:de:86:15:2e:84:08:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9B:66:66:A0:6D:A4:E2:FD:C7:21:C4:C0:60:BD:FD:F4:82:BA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c611eba3-9af6-39e4-8b40-155fe1513459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.184.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6d:bd:c5:c5:3d:93:7b:70:69:7d:d9:e3:13:66:52:a6:53:
         b0:41:5f:55:b5:dc:b7:84:bc:d9:84:fd:11:c5:4e:4b:de:e0:
         ed:d2:a1:74:b2:65:41:6c:54:ea:d7:5a:9d:59:b7:b9:2d:f0:
         94:5a:d7:53:e8:77:f1:34:1c:2c:aa:7e:a5:9d:15:b5:fc:27:
         bb:0d:12:d9:a5:c3:45:0a:8a:d2:31:3f:cc:2a:aa:e0:c2:26:
         d1:05:d2:cc:e4:63:c5:d8:27:a2:07:75:dc:10:fb:72:41:48:
         14:37:a2:16:f8:bb:4b:fc:52:0f:f8:97:51:a0:ea:7c:96:f9:
         b8:31:ba:5c:cd:42:f0:9e:1d:6e:57:e1:00:b1:81:d0:72:fa:
         6e:90:fb:be:07:da:c4:fa:ea:17:26:ed:1b:8e:97:7e:57:40:
         bd:4d:8a:49:19:72:72:95:97:1b:04:d1:ca:b3:f2:d5:88:3d:
         43:f8:d5:ac:6f:b5:16:c2:78:d3:be:8f:c1:a6:ba:14:da:12:
         70:d0:e5:45:db:fc:33:e7:85:24:08:53:77:6d:4a:e4:dd:08:
         22:1f:80:ae:07:60:a3:58:5b:5d:5c:21:74:fd:c5:01:18:c2:
         db:33:07:dd:da:0c:90:ba:bc:52:d5:6b:4c:b5:e5:cb:a0:a9:
         52:53:f2:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5elsLsDPpCV9gIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MTI4YWEwMDctZDYxZC00MmJhLTliMjktYmM2YjQyNzAwY2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIsRurb1idP55JwS7IUCGe+uasU1yYwzCKU8
ZPWeWiHYT3KuhnoYg1B74/HmJw0yQwZ8UnbYzFgHKWzH42tMkcq8aVKV6qohRBIP
rK/G66xwx8/1gIYw7lSq+JYBD50NsNHKPaWABg0kqQSrVkuzffXT17Z7TK9uRnHq
DZFyHQj0KRdXZflUNf1AhfDmfw/CS9o1pZIY9x+EvdNkBmsBg/P86/+sLB3tTD8j
P5x+Yj6W8XxpakwK8CfWT6gQlxVRDiRK1ysLcPmeu7zM5J3v1o+YRkZ4V3MsERKm
RnMfrGlqA4nTMl1VPjhB4RQsHdrObdqVxLd/WuLehhUuhAgj7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDWbZmagbaTi/cchxMBgvf30grrxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzYxMWViYTMtOWFmNi0z
OWU0LThiNDAtMTU1ZmUxNTEzNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbh8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChtvcXFPZN7cGl92eMTZlKmU7BBX1W13LeEvNmE/RHFTkve4O3SoXSy
ZUFsVOrXWp1Zt7kt8JRa11Pod/E0HCyqfqWdFbX8J7sNEtmlw0UKitIxP8wqquDC
JtEF0szkY8XYJ6IHddwQ+3JBSBQ3ohb4u0v8Ug/4l1Gg6nyW+bgxulzNQvCeHW5X
4QCxgdBy+m6Q+74H2sT66hcm7RuOl35XQL1NikkZcnKVlxsE0cqz8tWIPUP41axv
tRbCeNO+j8GmuhTaEnDQ5UXb/DPnhSQIU3dtSuTdCCIfgK4HYKNYW11cIXT9xQEY
wtszB93aDJC6vFLVa0y15cugqVJT8tg=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:18:04 2024 by rpki-client on console-ams.rpki-client.org