Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0153929d-2563-3e86-83bc-e600139b5490.roa
File:                     0153929d-2563-3e86-83bc-e600139b5490.roa (raw, json)
Hash identifier:          Bt+Rn4pHkOENJCJXHbKhIBCihtZ7/6+oFC1wNVN8KY0=
Subject key identifier:   D4:B4:AB:AF:D8:C5:E5:88:4F:22:26:F6:43:E7:F3:40:6B:62:A3:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC7BE8EF3B09293AD899C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0153929d-2563-3e86-83bc-e600139b5490.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        107.4.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:7b:e8:ef:3b:09:29:3a:d8:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=eb6a2c8f-819e-41a1-b9a3-c0a91d7a757a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:1a:d7:dd:e0:31:c4:da:4a:bf:dc:5b:19:
                    17:9f:f5:60:da:d3:de:71:64:64:40:62:14:dc:46:
                    f2:d2:f0:7f:45:4d:cc:7b:ce:ea:ae:f4:02:75:ff:
                    20:c9:cd:de:2f:3c:e5:ab:98:b4:a4:cc:4e:c7:8c:
                    d6:fc:66:51:8e:c9:84:fd:2a:a3:5b:98:31:3c:02:
                    05:ad:d6:61:93:66:da:30:cb:3f:77:c2:39:90:80:
                    e4:09:f5:d7:4e:64:a4:ea:ad:2d:5d:e0:04:9d:25:
                    ed:88:23:81:02:a6:a0:a4:bb:80:7d:dd:dd:d4:ef:
                    b6:5e:81:6a:40:09:c7:7b:92:e3:82:43:a0:c2:ff:
                    1b:f6:b7:ef:ea:d4:33:bb:5e:6a:36:42:bd:da:92:
                    de:b9:39:0f:80:c5:e0:ff:90:f8:a7:bd:73:26:29:
                    9c:89:f2:2b:a0:b5:36:3d:58:03:d2:89:e1:02:bd:
                    93:ef:31:d3:79:56:e4:b9:cc:21:dd:68:35:56:96:
                    e5:d4:2a:1e:d3:00:88:46:ed:99:08:c2:40:46:78:
                    0d:6e:f1:03:10:2a:47:7d:e2:08:fa:bd:fa:37:01:
                    fe:36:e1:cb:eb:0e:52:c9:36:37:66:0c:71:0e:15:
                    13:cb:ce:08:71:bd:f1:0e:30:80:c9:1c:98:d2:99:
                    e9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B4:AB:AF:D8:C5:E5:88:4F:22:26:F6:43:E7:F3:40:6B:62:A3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0153929d-2563-3e86-83bc-e600139b5490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0e:3c:c2:9b:4a:32:dd:60:1f:51:e5:fa:f4:aa:13:5f:ed:
         95:16:33:a3:fa:41:f8:e3:4f:8f:e6:67:a4:ee:9d:98:3c:6e:
         30:a4:d3:6b:91:22:8c:78:74:23:4c:01:d3:86:a3:7f:da:61:
         ee:2f:7d:ba:62:fc:b2:df:d3:74:a0:57:95:96:bf:3f:42:95:
         16:9b:c0:61:7b:52:03:ce:4e:84:67:41:60:d0:3e:d5:5d:84:
         15:7c:96:e2:b6:69:ef:aa:34:0a:23:67:02:15:bb:af:24:e1:
         eb:0f:21:e3:48:e7:66:3b:a7:4e:d8:7b:b8:e4:9e:2f:ef:85:
         51:84:9c:99:14:fd:9e:97:9c:2f:05:a0:1c:27:12:b1:c2:fd:
         8b:7a:cc:98:bc:ef:15:7e:f3:b9:0b:19:f7:50:5c:a7:9f:17:
         f1:da:86:37:e0:87:48:0b:35:0a:22:2d:fc:ab:f1:a9:68:d2:
         fa:82:ad:18:ab:a4:38:28:ee:6b:f0:c3:87:89:81:84:98:77:
         40:0e:c4:00:91:7b:00:32:3e:de:ec:3d:90:40:ff:0e:da:a3:
         ad:d6:13:cb:08:0a:c5:9d:4a:2a:9e:c0:13:77:56:39:08:23:
         bd:82:40:d3:41:cc:79:e4:19:a4:c8:ab:28:a8:88:26:73:8c:
         03:c2:ae:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07Hvo7zsJKTrYmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZWI2YTJjOGYtODE5ZS00MWExLWI5YTMtYzBhOTFkN2E3NTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpUa193gMcTaSr/cWxkXn/Vg2tPecWRkQGIU
3Eby0vB/RU3Me87qrvQCdf8gyc3eLzzlq5i0pMxOx4zW/GZRjsmE/SqjW5gxPAIF
rdZhk2baMMs/d8I5kIDkCfXXTmSk6q0tXeAEnSXtiCOBAqagpLuAfd3d1O+2XoFq
QAnHe5LjgkOgwv8b9rfv6tQzu15qNkK92pLeuTkPgMXg/5D4p71zJimcifIroLU2
PVgD0onhAr2T7zHTeVbkucwh3Wg1Vpbl1Coe0wCIRu2ZCMJARngNbvEDECpHfeII
+r36NwH+NuHL6w5SyTY3ZgxxDhUTy84Icb3xDjCAyRyY0pnpdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNS0q6/YxeWITyIm9kPn80BrYqNgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDE1MzkyOWQtMjU2My0z
ZTg2LTgzYmMtZTYwMDEzOWI1NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawRoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIsOPMKbSjLdYB9R5fr0qhNf7ZUWM6P6QfjjT4/mZ6TunZg8bjCk02uR
Iox4dCNMAdOGo3/aYe4vfbpi/LLf03SgV5WWvz9ClRabwGF7UgPOToRnQWDQPtVd
hBV8luK2ae+qNAojZwIVu68k4esPIeNI52Y7p07Ye7jkni/vhVGEnJkU/Z6XnC8F
oBwnErHC/Yt6zJi87xV+87kLGfdQXKefF/Hahjfgh0gLNQoiLfyr8alo0vqCrRir
pDgo7mvww4eJgYSYd0AOxACRewAyPt7sPZBA/w7ao63WE8sICsWdSiqewBN3VjkI
I72CQNNBzHnkGaTIqyioiCZzjAPCrtM=
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:19:52 2025 by rpki-client