Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/18102134-c4a6-3cbd-9c17-5548fc6c6dd4.roa
File:                     18102134-c4a6-3cbd-9c17-5548fc6c6dd4.roa (raw, json)
Hash identifier:          r7Sp2TQO8D0WZ6zMS1ITl9/eP4GVkKZ6Af6XBx+G7Y4=
Subject key identifier:   DA:DA:90:EF:C9:1F:EE:F3:A0:EB:A7:55:59:C7:BF:E2:1B:22:CC:82
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A049124C69D071E83824B300
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/18102134-c4a6-3cbd-9c17-5548fc6c6dd4.roa
Signing time:             Wed 22 Jan 2025 06:03:27 +0000
ROA not before:           Wed 22 Jan 2025 06:03:27 +0000
ROA not after:            Tue 22 Apr 2025 05:03:27 +0000
asID:                     19165
IP address blocks:        136.31.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a0:49:12:4c:69:d0:71:e8:38:24:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 22 06:03:27 2025 GMT
            Not After : Apr 22 05:03:27 2025 GMT
        Subject: CN=624c9705-93d0-4f9b-ad4e-ab0e34cf28de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:64:5e:dc:2b:de:b2:08:4b:f6:9c:26:83:
                    0e:28:00:eb:88:0a:ab:8a:98:1c:f2:8f:ed:71:90:
                    64:b8:e7:0a:b6:ee:63:80:51:2a:6c:13:28:db:18:
                    ad:78:95:61:25:fe:29:bc:d7:f0:0a:be:a5:e3:27:
                    29:0e:43:f9:c2:4d:4f:36:f9:4d:4b:b3:14:86:93:
                    b0:85:a3:cd:ac:c4:b2:a0:c6:b3:a8:1e:8f:c0:47:
                    68:0c:de:be:27:a9:b6:e2:52:d8:a6:a9:e5:ef:aa:
                    83:8a:9a:a8:bb:9f:a8:0d:c5:27:c0:4a:f4:c5:2b:
                    97:cb:6e:50:38:2c:87:0b:ad:02:f6:d8:67:c1:75:
                    68:05:2a:9e:94:bb:d7:e2:df:56:74:ba:ac:af:2a:
                    58:20:22:a0:70:8e:91:20:c9:fd:de:39:a7:8d:55:
                    7f:70:ee:46:60:ac:23:0e:91:09:a3:91:3e:19:8c:
                    3c:4f:a7:e9:b3:5f:4a:4d:08:cb:51:fa:eb:20:88:
                    24:30:d6:2a:cc:eb:23:57:c7:f3:02:64:53:5b:5f:
                    9d:94:3f:83:4f:ac:2b:9a:92:fe:9c:87:ab:d0:d8:
                    a5:8c:84:b5:0a:ff:25:ea:4a:b2:10:4c:f7:d0:88:
                    93:20:8f:f1:4c:6b:34:8b:2e:52:bc:b9:6d:eb:86:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DA:90:EF:C9:1F:EE:F3:A0:EB:A7:55:59:C7:BF:E2:1B:22:CC:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/18102134-c4a6-3cbd-9c17-5548fc6c6dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.31.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:69:48:b0:1b:f1:2a:b1:ca:1f:c0:c0:3a:4f:18:62:bd:
         fb:3b:09:50:c4:ad:09:17:d7:ba:aa:3c:0c:e6:0d:63:d7:65:
         cf:cb:8b:f3:66:d9:ea:db:63:20:93:d5:60:ad:b9:15:1b:20:
         fa:9c:40:9c:54:59:07:4c:6e:c0:ac:cf:92:75:bf:df:23:36:
         89:05:36:91:5d:6c:cd:44:ac:a1:45:61:c3:e3:55:1a:b0:07:
         33:45:38:4f:86:13:31:d8:a4:0b:52:40:75:e2:20:2a:23:3c:
         72:61:a0:b8:d0:46:f0:cb:e8:d6:d1:e5:79:7c:7e:8f:d6:f4:
         2e:54:eb:25:59:f9:b1:cb:e2:66:d1:9d:f9:43:df:7d:b6:e7:
         51:1d:0c:98:b3:60:9f:d1:d0:d3:9d:05:94:ee:44:67:51:17:
         fd:b6:3c:2a:75:cd:9b:6e:8a:f9:da:1a:de:b4:05:3b:96:21:
         fd:53:24:15:05:07:20:2b:55:93:98:23:ee:7e:20:a3:20:a2:
         55:26:5c:5d:cd:6d:0a:f8:88:a8:2b:d2:a0:60:9e:27:8d:8b:
         3a:b0:22:81:0b:b0:33:41:80:b7:00:9d:96:87:2e:bf:61:b0:
         40:45:a0:d8:44:dc:62:23:cb:ad:19:55:c6:f1:1c:d3:14:e2:
         05:83:1a:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSRJMadBx6DgkswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2
NDA0MB4XDTI1MDEyMjA2MDMyN1oXDTI1MDQyMjA1MDMyN1owLzEtMCsGA1UEAxMk
NjI0Yzk3MDUtOTNkMC00ZjliLWFkNGUtYWIwZTM0Y2YyOGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq1kXtwr3rIIS/acJoMOKADriAqripgc8o/t
cZBkuOcKtu5jgFEqbBMo2xiteJVhJf4pvNfwCr6l4ycpDkP5wk1PNvlNS7MUhpOw
haPNrMSyoMazqB6PwEdoDN6+J6m24lLYpqnl76qDipqou5+oDcUnwEr0xSuXy25Q
OCyHC60C9thnwXVoBSqelLvX4t9WdLqsrypYICKgcI6RIMn93jmnjVV/cO5GYKwj
DpEJo5E+GYw8T6fps19KTQjLUfrrIIgkMNYqzOsjV8fzAmRTW1+dlD+DT6wrmpL+
nIer0NiljIS1Cv8l6kqyEEz30IiTII/xTGs0iy5SvLlt64a42QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrakO/JH+7zoOunVVnHv+IbIsyCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz
YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvMTgxMDIxMzQtYzRhNi0z
Y2JkLTljMTctNTU0OGZjNmM2ZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm
NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl
NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz
ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiB9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwFaUiwG/EqscofwMA6Txhivfs7CVDErQkX17qqPAzmDWPXZc/Li/Nm
2erbYyCT1WCtuRUbIPqcQJxUWQdMbsCsz5J1v98jNokFNpFdbM1ErKFFYcPjVRqw
BzNFOE+GEzHYpAtSQHXiICojPHJhoLjQRvDL6NbR5Xl8fo/W9C5U6yVZ+bHL4mbR
nflD332251EdDJizYJ/R0NOdBZTuRGdRF/22PCp1zZtuivnaGt60BTuWIf1TJBUF
ByArVZOYI+5+IKMgolUmXF3NbQr4iKgr0qBgnieNizqwIoELsDNBgLcAnZaHLr9h
sEBFoNhE3GIjy60ZVcbxHNMU4gWDGrU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:30 2025 by rpki-client