Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed5e0159-177b-3225-8136-6c1308b2819e.roa
File:                     ed5e0159-177b-3225-8136-6c1308b2819e.roa (raw, json)
Hash identifier:          upiYywb12xFA3ecs8+9VUfCs734fSJDWhsEryTdI+zQ=
Subject key identifier:   E3:0F:16:F9:3A:4D:56:EB:C9:38:B5:FE:A9:8D:80:3F:C6:DD:01:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0AF75CA7FF79029E20BE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed5e0159-177b-3225-8136-6c1308b2819e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        76.124.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:af:75:ca:7f:f7:90:29:e2:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b69a1e0c-5aa9-4148-9861-b04ddbad57af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a5:6b:f7:c4:83:fb:6a:7d:88:aa:ea:99:6e:
                    ba:2a:c8:c4:ee:e1:e3:1a:21:09:3f:9a:69:77:82:
                    a8:23:fe:a1:b1:da:db:d5:99:e2:69:1c:31:73:51:
                    d4:70:62:16:be:9b:3d:e2:6a:90:dc:60:5e:35:6b:
                    fe:27:71:eb:46:8a:70:a9:0c:50:fa:4e:ff:26:e6:
                    ee:35:22:7b:66:da:6f:14:a7:8a:76:fc:d2:40:c3:
                    21:76:37:4d:19:48:fe:e7:c3:9d:c3:b7:5d:d9:ac:
                    0d:68:10:a8:99:c1:7b:18:b7:c5:65:18:55:1f:65:
                    db:aa:eb:e7:22:57:e7:16:8e:cd:7b:3a:af:eb:8c:
                    8a:81:85:d6:0a:1b:e9:09:d9:d5:ac:8b:04:ff:e5:
                    c1:c0:4c:fa:ad:9c:8f:d7:1a:76:4a:e7:b6:7d:df:
                    83:96:f3:92:78:68:c8:7d:0c:11:20:db:17:7b:3f:
                    40:71:dc:ad:0d:e5:03:48:da:87:ba:8c:c9:13:5e:
                    41:bb:0a:94:ce:4f:5a:6c:9f:9a:d7:d1:a1:4f:02:
                    5e:cc:c4:d2:1a:1f:4a:ff:2c:12:96:d6:a3:73:0a:
                    b5:12:59:ca:6f:5b:fb:49:d9:4b:b6:cd:d9:28:cf:
                    d9:00:69:d6:74:96:aa:3b:89:6b:aa:d4:df:91:4b:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0F:16:F9:3A:4D:56:EB:C9:38:B5:FE:A9:8D:80:3F:C6:DD:01:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed5e0159-177b-3225-8136-6c1308b2819e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.124.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:91:3f:52:30:f1:db:39:27:87:d2:64:1c:c9:80:f4:bb:0e:
         6b:3b:e2:75:24:6f:c4:e8:07:d8:1b:12:46:07:d5:df:0a:85:
         81:fa:bc:d0:6b:7f:44:b0:90:06:98:56:82:1a:c6:8c:68:4e:
         64:2b:b1:f0:76:38:7a:10:7b:40:80:67:f1:71:ed:64:6b:77:
         98:01:a6:e2:0a:e7:d6:d3:7d:59:99:18:2c:cc:0f:23:3b:de:
         f5:4a:20:90:8e:26:d1:46:68:41:e5:a7:19:92:71:74:be:19:
         7f:74:64:dc:ce:a2:eb:c2:47:87:84:f2:07:1e:4b:af:b2:32:
         ff:5d:32:97:2c:73:73:f9:57:91:eb:36:20:6f:2a:bf:b1:29:
         2e:86:ef:b1:b1:47:01:da:7c:6c:19:45:90:94:6c:b6:2e:19:
         c1:57:0d:e6:c3:d4:46:b1:f4:ae:69:99:67:02:08:41:85:58:
         4c:da:3a:56:fa:87:ce:78:6b:01:34:9f:b0:a5:04:e7:18:7f:
         9c:2f:bb:f5:81:f7:f0:a0:46:ed:1d:19:db:23:bc:d7:23:44:
         6e:d9:6a:6f:02:07:88:c8:ab:b4:a8:1d:a9:5f:58:80:27:e7:
         79:8b:29:d3:8b:fe:d6:ea:c4:3b:9d:1e:6c:aa:b7:9f:14:99:
         35:bb:99:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssK91yn/3kCniC+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YjY5YTFlMGMtNWFhOS00MTQ4LTk4NjEtYjA0ZGRiYWQ1N2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqVr98SD+2p9iKrqmW66KsjE7uHjGiEJP5pp
d4KoI/6hsdrb1ZniaRwxc1HUcGIWvps94mqQ3GBeNWv+J3HrRopwqQxQ+k7/Jubu
NSJ7ZtpvFKeKdvzSQMMhdjdNGUj+58Odw7dd2awNaBComcF7GLfFZRhVH2Xbquvn
IlfnFo7Nezqv64yKgYXWChvpCdnVrIsE/+XBwEz6rZyP1xp2Sue2fd+DlvOSeGjI
fQwRINsXez9AcdytDeUDSNqHuozJE15BuwqUzk9abJ+a19GhTwJezMTSGh9K/ywS
ltajcwq1ElnKb1v7SdlLts3ZKM/ZAGnWdJaqO4lrqtTfkUsURQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMPFvk6TVbryTi1/qmNgD/G3QFLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWQ1ZTAxNTktMTc3Yi0z
MjI1LTgxMzYtNmMxMzA4YjI4MTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHxIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaRP1Iw8ds5J4fSZBzJgPS7Dms74nUkb8ToB9gbEkYH1d8KhYH6vNBr
f0SwkAaYVoIaxoxoTmQrsfB2OHoQe0CAZ/Fx7WRrd5gBpuIK59bTfVmZGCzMDyM7
3vVKIJCOJtFGaEHlpxmScXS+GX90ZNzOouvCR4eE8gceS6+yMv9dMpcsc3P5V5Hr
NiBvKr+xKS6G77GxRwHafGwZRZCUbLYuGcFXDebD1Eax9K5pmWcCCEGFWEzaOlb6
h854awE0n7ClBOcYf5wvu/WB9/CgRu0dGdsjvNcjRG7Zam8CB4jIq7SoHalfWIAn
53mLKdOL/tbqxDudHmyqt58UmTW7mTk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:47 2025 by rpki-client