Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b35636-e8cf-33dc-86ca-d27f2f000272.roa
File:                     d7b35636-e8cf-33dc-86ca-d27f2f000272.roa (raw, json)
Hash identifier:          kD6ViM6EKiTZ7riq49ao0JUdj0pTtc0UNcTJsLju3go=
Subject key identifier:   3E:57:CB:80:1A:F9:12:C7:AA:DE:1F:08:6C:F2:71:9F:EF:6E:CE:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1203667830C12CFE529780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b35636-e8cf-33dc-86ca-d27f2f000272.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.178.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:03:66:78:30:c1:2c:fe:52:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=8f12b14b-af7f-423e-a332-f8b8805e3329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:68:c5:f8:20:f7:1a:ca:26:68:ac:bf:48:29:
                    d6:0f:96:56:81:36:59:74:42:25:4a:01:e3:9d:7c:
                    da:63:65:17:a3:d8:0d:92:e5:b6:eb:7f:9b:b0:16:
                    12:da:3c:31:dc:2d:48:11:6a:1a:20:15:c3:d1:42:
                    e0:a3:86:4c:b8:73:fa:f3:5d:a1:26:93:98:a8:73:
                    c8:22:af:32:65:82:e4:de:1b:e6:4b:30:61:bb:f3:
                    1d:06:79:79:7e:40:a5:ad:a5:49:38:fa:5a:35:6c:
                    9a:6a:e6:b1:bb:15:ba:ad:8a:96:36:38:40:76:d3:
                    dc:66:8a:c7:9c:f5:87:73:4a:5d:fc:bf:3f:03:3c:
                    8d:55:9f:88:5f:cf:9a:73:ea:98:39:25:10:a2:d8:
                    bc:0e:bc:45:68:99:cb:22:a0:e1:cc:71:47:5a:40:
                    e3:0f:3b:f7:32:5b:96:81:66:6e:10:1f:04:ef:5f:
                    54:9d:f8:b5:14:11:73:63:52:27:b5:e3:d9:da:15:
                    49:52:39:d6:ab:24:fe:9d:9c:32:d2:22:aa:0a:74:
                    da:b4:c7:54:ef:89:f7:d3:79:1a:60:d4:ed:19:01:
                    5e:fe:34:14:47:10:ff:04:90:38:ac:b8:b7:13:64:
                    dd:f9:4d:f2:ef:d6:34:81:77:b1:32:0e:ee:fe:0a:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:57:CB:80:1A:F9:12:C7:AA:DE:1F:08:6C:F2:71:9F:EF:6E:CE:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b35636-e8cf-33dc-86ca-d27f2f000272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.178.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7c:41:43:b4:3c:be:0d:6f:de:bc:76:f1:f2:40:56:fc:01:
         37:95:0b:47:97:89:e8:43:02:5e:ca:25:76:8c:cc:1e:b2:19:
         b2:53:a4:83:48:7c:1e:5c:a0:48:3e:b7:a8:9c:39:71:f6:e0:
         64:b4:ee:94:48:99:3b:5a:6c:db:46:4c:ef:31:e1:6f:22:35:
         18:a7:f7:56:0e:3b:72:d6:04:f9:4c:9f:5d:2e:d9:81:cc:11:
         c7:50:de:19:9d:97:86:af:cc:9c:97:ab:9a:af:d6:89:a3:13:
         93:fb:d5:d0:24:1b:a1:1c:ff:25:f6:47:b8:78:3f:d7:42:03:
         15:a9:d7:3a:7e:30:78:4d:60:4c:e6:25:f1:a1:29:be:5e:6f:
         81:d3:08:99:ba:84:71:b5:1e:4b:3a:e8:6c:c4:1d:3e:79:43:
         49:78:83:dc:93:67:a7:1c:95:11:20:35:fc:ff:03:4b:85:04:
         c7:24:71:88:fc:08:da:bd:b8:68:6a:83:ce:da:74:e4:70:b3:
         18:4e:87:d0:5c:15:92:b1:a9:eb:a5:64:38:b7:6e:f5:2b:f7:
         c4:86:8e:44:15:2c:c8:6f:9b:57:0d:f9:03:b4:a7:6d:24:33:
         7e:a7:9b:e7:26:64:b3:05:0b:3c:45:8c:db:28:2b:cd:62:99:
         5e:6f:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:11 2025 by rpki-client