Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32fcb452-bf6a-3fce-a1b3-563211d9bd63.roa
File:                     32fcb452-bf6a-3fce-a1b3-563211d9bd63.roa (raw, json)
Hash identifier:          PQE2rn26DlFFz+qkpKvA9S+93EUI5V6QijX0ceYuyQk=
Subject key identifier:   F5:E8:BD:1C:97:E8:F2:8B:A9:3D:20:AC:4F:57:E4:24:4F:DD:6A:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED229E62D4C6B54F31B1A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32fcb452-bf6a-3fce-a1b3-563211d9bd63.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33662
IP address blocks:        76.31.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:22:9e:62:d4:c6:b5:4f:31:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=0279d028-2eee-41a1-b6f9-3e85aa34ee75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:fe:dd:ae:80:05:01:38:df:28:0b:b1:3c:
                    d9:27:33:8c:b8:c2:bb:a1:d3:81:48:42:d9:b7:2d:
                    0b:06:9c:f7:f5:56:37:b8:b4:44:27:e9:e4:88:cf:
                    ba:b1:06:99:15:31:e8:7d:12:7d:77:de:13:a5:ad:
                    ff:a1:e4:86:43:54:54:5f:35:29:40:fa:15:ee:da:
                    e5:61:b9:19:6c:10:d5:0d:27:a9:7a:48:32:80:fa:
                    ab:67:ee:17:67:dc:26:cd:df:19:3e:f9:15:ba:fc:
                    a3:58:f4:57:46:9e:a0:ae:d5:be:e0:57:4f:c5:a3:
                    52:10:f0:a2:31:db:b5:46:1a:0b:93:0f:b1:b4:16:
                    ad:85:82:e6:96:1a:8d:ca:b3:bd:75:ee:45:d8:55:
                    15:28:eb:52:89:de:54:22:76:49:a9:8a:1c:1f:a5:
                    92:ad:32:20:5a:a4:f1:35:f1:d6:73:f5:e4:f0:e8:
                    65:b5:22:6d:40:28:8f:74:37:af:9c:79:f8:57:43:
                    00:60:5d:a8:07:e4:31:cb:53:21:40:08:aa:dd:9d:
                    50:e4:12:23:03:91:15:12:16:ba:97:e4:cc:f0:54:
                    5e:96:80:30:40:0c:d8:3d:57:28:f5:98:f2:86:ba:
                    e1:1d:5b:1b:3f:3a:c0:40:90:1b:b7:c8:8c:38:94:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:BD:1C:97:E8:F2:8B:A9:3D:20:AC:4F:57:E4:24:4F:DD:6A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32fcb452-bf6a-3fce-a1b3-563211d9bd63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a5:03:7d:2a:41:90:78:b6:e1:35:1d:17:8c:0d:3e:d3:9f:
         8b:34:ee:59:fc:31:dd:5a:d0:b6:30:36:35:0c:6a:85:1e:f6:
         65:54:6a:ea:07:bc:e1:1e:95:1a:f5:52:82:7d:1e:2f:a9:b1:
         68:e4:43:0c:6b:c6:70:d7:b3:1f:5a:37:88:01:bb:4d:3d:7f:
         32:4d:9f:5d:5c:66:e5:0f:2d:c9:61:5a:66:9d:28:e9:ac:69:
         8f:47:91:de:22:49:6d:17:73:17:1c:9e:30:bb:14:e6:65:4a:
         9a:0d:9b:bf:8b:e4:9d:cd:8e:7a:45:ff:59:8e:39:39:99:4e:
         44:c2:4f:3d:0a:af:5d:98:9a:04:78:6d:fc:d1:59:fd:00:63:
         c8:f4:52:a5:54:09:aa:24:64:26:57:e2:b4:5b:a7:e6:bd:47:
         a7:f6:4b:24:2f:a8:0f:83:28:16:1e:df:45:b2:8b:6b:f3:61:
         f8:4b:d3:92:c2:01:12:f5:0e:f0:a2:2e:35:fd:08:84:dc:45:
         46:dd:74:e3:52:4e:d3:32:f4:85:90:78:6d:7a:21:df:37:55:
         e4:89:5b:ce:44:30:51:4e:a2:3c:16:b7:7e:32:7f:de:84:c4:
         a1:00:e0:7d:21:83:57:12:7b:3b:85:81:66:2f:40:c3:eb:f0:
         ee:33:65:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07SKeYtTGtU8xsaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MDI3OWQwMjgtMmVlZS00MWExLWI2ZjktM2U4NWFhMzRlZTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+j+3a6ABQE43ygLsTzZJzOMuMK7odOBSELZ
ty0LBpz39VY3uLREJ+nkiM+6sQaZFTHofRJ9d94Tpa3/oeSGQ1RUXzUpQPoV7trl
YbkZbBDVDSepekgygPqrZ+4XZ9wmzd8ZPvkVuvyjWPRXRp6grtW+4FdPxaNSEPCi
Mdu1RhoLkw+xtBathYLmlhqNyrO9de5F2FUVKOtSid5UInZJqYocH6WSrTIgWqTx
NfHWc/Xk8OhltSJtQCiPdDevnHn4V0MAYF2oB+Qxy1MhQAiq3Z1Q5BIjA5EVEha6
l+TM8FReloAwQAzYPVco9ZjyhrrhHVsbPzrAQJAbt8iMOJR13QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPXovRyX6PKLqT0grE9X5CRP3WrQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJmY2I0NTItYmY2YS0z
ZmNlLWExYjMtNTYzMjExZDliZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTB/0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJilA30qQZB4tuE1HReMDT7Tn4s07ln8Md1a0LYwNjUMaoUe9mVUauoH
vOEelRr1UoJ9Hi+psWjkQwxrxnDXsx9aN4gBu009fzJNn11cZuUPLclhWmadKOms
aY9Hkd4iSW0XcxccnjC7FOZlSpoNm7+L5J3NjnpF/1mOOTmZTkTCTz0Kr12YmgR4
bfzRWf0AY8j0UqVUCaokZCZX4rRbp+a9R6f2SyQvqA+DKBYe30Wyi2vzYfhL05LC
ARL1DvCiLjX9CITcRUbddONSTtMy9IWQeG16Id83VeSJW85EMFFOojwWt34yf96E
xKEA4H0hg1cSezuFgWYvQMPr8O4zZVU=
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:42:24 2025 by rpki-client