Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef851130-7ff2-3f93-bd3e-fedec9d6b6ee.roa
File:                     ef851130-7ff2-3f93-bd3e-fedec9d6b6ee.roa (raw, json)
Hash identifier:          sbDXvc90H+ebrrR2KQKPvtcAEwlGtfBfXGQQ08lJHe8=
Subject key identifier:   11:80:E2:20:35:88:21:7A:AE:F5:83:2C:63:17:D2:F3:C3:61:B0:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F83D7A37C2EB80EF66C000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef851130-7ff2-3f93-bd3e-fedec9d6b6ee.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        73.37.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:3d:7a:37:c2:eb:80:ef:66:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=cd3a38eb-24c7-4b67-85b8-c78e457a5c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2a:b6:fe:57:02:bb:13:fa:1b:49:4e:35:d6:
                    0d:4d:94:4e:02:5b:a1:a0:dd:8c:e8:b1:e0:0e:14:
                    a7:3f:a3:0b:f0:24:fa:86:11:2c:18:3e:dc:82:e9:
                    67:ff:0a:17:86:f8:3c:96:0e:ad:b8:6c:f8:54:4c:
                    ed:e7:ab:16:8b:08:a8:f6:08:b0:63:f0:92:20:91:
                    dd:cd:d1:e6:a8:68:bf:15:f2:c8:aa:76:64:da:3c:
                    f1:c6:10:72:c0:01:09:76:ad:2e:36:7f:3c:70:3d:
                    aa:f5:48:b0:27:33:8a:bd:f6:25:50:95:63:3d:37:
                    3f:a5:4a:e1:b2:fe:c0:47:3a:f9:e3:d1:2c:49:df:
                    a5:22:c7:12:50:13:1f:20:bc:c5:c8:97:aa:54:1d:
                    f2:c2:61:54:7a:b5:3e:c0:21:8b:45:e0:50:c9:75:
                    61:9c:93:a1:3f:9b:bc:a8:f9:47:40:de:0e:a0:c4:
                    b2:72:78:55:d9:73:8f:4b:4a:8b:d5:82:ad:5e:a8:
                    a8:33:77:92:a4:e7:ab:77:53:fb:eb:30:d2:f5:b7:
                    80:bc:e1:83:39:9f:fa:44:78:6c:3d:cf:fe:35:62:
                    de:77:34:29:43:75:1a:fc:8e:7f:93:d1:b7:6e:70:
                    17:97:87:02:fb:cb:9f:21:e5:f0:42:dd:3a:58:07:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:80:E2:20:35:88:21:7A:AE:F5:83:2C:63:17:D2:F3:C3:61:B0:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef851130-7ff2-3f93-bd3e-fedec9d6b6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.37.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:36:26:58:ed:5a:7f:84:34:43:a7:3e:ac:36:e1:d3:42:bd:
         8e:31:4f:c3:94:7b:43:e5:8a:c2:84:be:ff:8d:d4:dc:e3:df:
         7d:20:20:da:9a:9a:cc:66:41:6a:dd:ce:1f:ec:62:a8:18:c2:
         dc:df:e5:8d:25:63:38:57:3e:54:54:ad:76:34:df:4e:a5:05:
         59:38:ed:6b:c5:8a:67:7c:23:0e:fe:74:11:32:b6:9c:49:21:
         fa:4a:7b:4b:88:ae:f9:f2:43:14:e3:17:9c:ed:ab:68:76:71:
         45:a5:b0:91:7d:22:50:8a:58:72:7e:2d:db:56:ca:19:c2:bd:
         e1:13:54:82:df:69:82:cc:58:e3:f0:ea:ca:fb:8e:01:70:e0:
         10:33:27:e7:0d:07:43:f8:5c:16:20:fa:7f:79:0e:64:aa:2c:
         da:b5:2a:8e:bc:af:b8:fa:d6:44:d5:a2:4d:58:0d:32:20:5d:
         a8:6e:58:35:f4:1a:03:69:36:be:61:51:62:fc:14:d3:e0:0c:
         1f:6d:a3:8f:cb:7a:ab:97:f3:df:ee:46:38:a7:b7:96:bc:bd:
         02:75:ae:51:b5:e9:77:06:b2:c6:a3:28:61:83:a3:01:ef:f5:
         ec:d0:44:e2:1c:a7:3f:4c:99:90:23:6c:26:d3:87:5b:3a:ee:
         39:49:80:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+D16N8LrgO9mwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
Y2QzYTM4ZWItMjRjNy00YjY3LTg1YjgtYzc4ZTQ1N2E1YzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyq2/lcCuxP6G0lONdYNTZROAluhoN2M6LHg
DhSnP6ML8CT6hhEsGD7cguln/woXhvg8lg6tuGz4VEzt56sWiwio9giwY/CSIJHd
zdHmqGi/FfLIqnZk2jzxxhBywAEJdq0uNn88cD2q9UiwJzOKvfYlUJVjPTc/pUrh
sv7ARzr549EsSd+lIscSUBMfILzFyJeqVB3ywmFUerU+wCGLReBQyXVhnJOhP5u8
qPlHQN4OoMSycnhV2XOPS0qL1YKtXqioM3eSpOerd1P76zDS9beAvOGDOZ/6RHhs
Pc/+NWLedzQpQ3Ua/I5/k9G3bnAXl4cC+8ufIeXwQt06WAdCqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGA4iA1iCF6rvWDLGMX0vPDYbDnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWY4NTExMzAtN2ZmMi0z
ZjkzLWJkM2UtZmVkZWM5ZDZiNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSVkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIg2JljtWn+ENEOnPqw24dNCvY4xT8OUe0PlisKEvv+N1Nzj330gINqa
msxmQWrdzh/sYqgYwtzf5Y0lYzhXPlRUrXY0306lBVk47WvFimd8Iw7+dBEytpxJ
IfpKe0uIrvnyQxTjF5ztq2h2cUWlsJF9IlCKWHJ+LdtWyhnCveETVILfaYLMWOPw
6sr7jgFw4BAzJ+cNB0P4XBYg+n95DmSqLNq1Ko68r7j61kTVok1YDTIgXahuWDX0
GgNpNr5hUWL8FNPgDB9to4/LequX89/uRjint5a8vQJ1rlG16XcGssajKGGDowHv
9ezQROIcpz9MmZAjbCbTh1s67jlJgMk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:56:14 2025 by rpki-client