Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e89968-6c95-3283-9f1a-fdd7d088bdb0.roa
File:                     20e89968-6c95-3283-9f1a-fdd7d088bdb0.roa (raw, json)
Hash identifier:          6k6F+FkBVF4qAYMPZh06IJIwugxuyCuLS4mU4ejPz6w=
Subject key identifier:   99:5C:3F:A0:29:93:4F:A4:60:26:9B:06:69:B8:2A:6A:78:67:FE:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC7C89EE5458B5425531E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e89968-6c95-3283-9f1a-fdd7d088bdb0.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        107.4.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:7c:89:ee:54:58:b5:42:55:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9d473483-3e5a-49e9-a22a-885c182c8b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:45:c7:4f:a4:ef:2f:4a:fc:c0:dd:c7:6e:
                    a6:c5:8c:f6:1b:b2:cd:3b:98:ba:5d:e6:9a:31:73:
                    0c:db:16:95:d6:dd:4e:af:07:dd:29:b7:8f:f4:ac:
                    de:a6:7f:81:3d:df:20:79:53:4c:11:bc:91:df:b2:
                    26:e3:c6:3c:38:e9:8c:77:94:cc:fa:bf:6e:3c:50:
                    4d:97:af:5b:9c:db:7b:a1:3d:ba:4a:1c:24:c9:42:
                    86:f8:af:0c:f3:80:ff:4e:6f:96:42:8c:a0:89:46:
                    fc:03:28:bf:ac:ea:6d:b4:fa:79:24:a0:c0:b2:e7:
                    c9:37:5a:4d:4b:30:2a:44:bd:ef:40:8c:cf:38:2b:
                    54:38:0a:43:1c:61:e1:86:34:36:e8:d4:d3:6a:10:
                    12:a1:e4:07:c0:7c:f5:08:de:7e:50:af:93:db:b6:
                    85:2a:85:85:97:b3:29:a9:43:9f:c0:f9:33:e5:9c:
                    e8:c7:d0:fa:17:41:56:8b:bb:6c:67:c8:ea:c8:ca:
                    d4:32:84:57:ea:ea:49:f6:95:64:a7:6f:3d:07:60:
                    16:09:ca:52:98:f3:37:a5:11:85:a7:e1:01:88:51:
                    fe:98:62:99:52:c8:90:aa:d8:9f:d2:5e:cd:97:72:
                    2c:a3:cd:21:69:89:73:f8:66:5a:67:dd:e5:d8:36:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5C:3F:A0:29:93:4F:A4:60:26:9B:06:69:B8:2A:6A:78:67:FE:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e89968-6c95-3283-9f1a-fdd7d088bdb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:a8:a7:97:61:da:9d:23:48:73:5b:98:8d:b1:a8:e8:00:
         15:c6:7a:c7:b9:44:c4:42:20:3c:a1:3c:43:9d:12:1e:79:03:
         d4:28:0b:36:4b:c1:83:54:35:14:d4:6c:b1:91:1c:40:8a:0a:
         c8:43:b9:9f:1f:11:cd:e9:99:5b:0d:20:84:b4:08:8e:b8:8e:
         82:fa:b2:b0:9f:9b:db:00:e6:58:17:bb:11:3d:80:24:a6:93:
         07:e1:c7:a7:3d:f1:4e:bf:2d:0e:f3:06:3f:7a:da:53:73:68:
         01:45:d0:e7:69:45:87:1e:04:73:04:b5:1a:4c:4d:75:6a:c1:
         d0:36:9f:22:99:1d:4c:64:51:b0:27:30:e4:a2:1d:9c:88:d5:
         39:61:bf:da:20:3d:24:33:19:f1:ae:49:2e:89:8c:ea:7c:04:
         8d:27:bb:b7:19:00:86:2a:f9:2c:08:b5:26:a3:16:62:7e:f1:
         3d:41:f4:ad:65:e4:52:83:41:82:e3:0d:6c:4d:2f:0d:2b:cc:
         c2:f7:f8:a2:04:77:63:04:90:60:7a:3f:b5:f4:2b:d7:48:59:
         73:8a:1b:01:86:ec:ae:6e:a8:85:1e:22:e7:d9:1e:e4:5a:34:
         02:e1:60:2d:b7:d3:ac:93:ab:6d:1d:33:ac:14:54:d2:41:7e:
         f6:f0:d3:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07HyJ7lRYtUJVMeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
OWQ0NzM0ODMtM2U1YS00OWU5LWEyMmEtODg1YzE4MmM4Yjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFdFx0+k7y9K/MDdx26mxYz2G7LNO5i6Xeaa
MXMM2xaV1t1OrwfdKbeP9Kzepn+BPd8geVNMEbyR37Im48Y8OOmMd5TM+r9uPFBN
l69bnNt7oT26ShwkyUKG+K8M84D/Tm+WQoygiUb8Ayi/rOpttPp5JKDAsufJN1pN
SzAqRL3vQIzPOCtUOApDHGHhhjQ26NTTahASoeQHwHz1CN5+UK+T27aFKoWFl7Mp
qUOfwPkz5Zzox9D6F0FWi7tsZ8jqyMrUMoRX6upJ9pVkp289B2AWCcpSmPM3pRGF
p+EBiFH+mGKZUsiQqtif0l7Nl3Iso80haYlz+GZaZ93l2DaQtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJlcP6Apk0+kYCabBmm4Kmp4Z/7YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBlODk5NjgtNmM5NS0z
MjgzLTlmMWEtZmRkN2QwODhiZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawQYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0GqKeXYdqdI0hzW5iNsajoABXGese5RMRCIDyhPEOdEh55A9QoCzZL
wYNUNRTUbLGRHECKCshDuZ8fEc3pmVsNIIS0CI64joL6srCfm9sA5lgXuxE9gCSm
kwfhx6c98U6/LQ7zBj962lNzaAFF0OdpRYceBHMEtRpMTXVqwdA2nyKZHUxkUbAn
MOSiHZyI1Tlhv9ogPSQzGfGuSS6JjOp8BI0nu7cZAIYq+SwItSajFmJ+8T1B9K1l
5FKDQYLjDWxNLw0rzML3+KIEd2MEkGB6P7X0K9dIWXOKGwGG7K5uqIUeIufZHuRa
NALhYC2306yTq20dM6wUVNJBfvbw0xI=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:07:58 2025 by rpki-client