Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3659bae8-2e25-341c-aa14-eb4333f43e25.roa
File:                     3659bae8-2e25-341c-aa14-eb4333f43e25.roa (raw, json)
Hash identifier:          lxtBfhZWwWP/Su176owauk02NpV1nhizItbVSN+QiAk=
Subject key identifier:   19:B2:93:96:5B:91:BD:25:07:5A:72:E2:F7:FA:F2:B6:CE:AB:74:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC960A7A52BAC3865F9200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3659bae8-2e25-341c-aa14-eb4333f43e25.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.36.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:96:0a:7a:52:ba:c3:86:5f:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=ec55ade5-b160-4448-9325-6ef92372bda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:a3:c3:3e:86:f7:16:ea:e5:a8:e7:0e:f6:
                    9d:34:79:00:b9:49:02:50:1c:3a:80:a2:56:af:b4:
                    59:2f:38:4b:79:fd:e6:ee:fd:11:50:36:98:62:11:
                    6e:54:ad:e4:78:ff:72:f2:d4:5c:4b:33:a9:ae:70:
                    6d:b2:b4:7e:2d:f7:1b:e7:03:6a:99:33:ae:81:05:
                    76:93:ec:9b:da:4f:6a:4a:65:fc:7e:4f:38:cf:1b:
                    3d:14:1b:54:35:05:22:92:38:d0:51:a7:9e:ef:c1:
                    23:86:b9:d0:41:dd:ba:74:9c:56:4f:11:2f:7e:c6:
                    71:bb:98:dd:84:09:f3:d1:9b:0e:e8:77:df:71:4e:
                    37:31:fa:f1:77:5a:01:ba:50:8f:c1:ef:19:f9:39:
                    e9:9f:56:b3:9c:1b:c5:e4:ec:b6:43:06:a3:e3:57:
                    de:e5:fd:54:02:ad:e3:ab:c0:cf:56:9a:97:19:5c:
                    ee:7c:20:53:ed:f9:bb:98:47:3c:38:dc:ae:2e:e7:
                    61:1f:78:f9:0d:e6:8c:98:4b:51:73:98:95:34:47:
                    80:90:f7:0e:29:d0:78:68:ed:f8:6b:6a:85:90:c3:
                    53:5d:96:10:ec:55:7b:92:84:9c:41:5e:d3:2f:50:
                    86:3a:9e:9b:fe:a5:a5:3c:c9:2c:bf:98:32:83:63:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:93:96:5B:91:BD:25:07:5A:72:E2:F7:FA:F2:B6:CE:AB:74:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3659bae8-2e25-341c-aa14-eb4333f43e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:4f:ad:c7:e7:a8:35:39:ac:f7:63:62:8f:33:4d:db:74:5f:
         3b:70:cd:b7:e8:8a:99:34:24:c5:8c:fa:73:3d:87:40:58:0e:
         0a:00:a5:09:06:f4:06:c0:8b:db:a0:80:8a:f5:d6:77:ea:9d:
         a8:8b:d4:15:d9:f3:91:23:d5:1e:bf:f7:be:11:24:13:ad:69:
         27:00:39:e1:17:2b:da:0a:c8:0a:4c:4f:db:ae:85:7b:42:7e:
         a4:be:00:75:a5:1e:15:ee:18:d2:74:a2:f0:b3:19:1a:dc:bf:
         6e:be:b0:90:7c:dc:9a:82:43:33:1a:c2:ff:a8:81:2b:68:c9:
         a9:29:ca:c0:01:e1:c1:ba:25:ce:a2:5e:20:17:28:42:5b:4a:
         2c:b7:73:10:7c:08:10:78:77:c3:bc:0f:8c:37:12:85:06:59:
         86:eb:c4:1d:43:d6:94:6f:63:f3:68:0b:5d:00:b8:06:bd:ce:
         b2:79:58:ff:f9:b5:e1:6d:f0:f3:5d:34:fd:a8:55:40:6b:11:
         70:3d:c9:62:61:7e:6b:3d:59:68:ab:bb:3a:3a:27:8e:94:ea:
         31:b2:e7:e5:ae:69:66:f0:b2:e3:4d:33:c6:ca:22:35:87:20:
         f9:65:09:3c:ba:ce:0e:9a:15:31:cc:d1:e9:d7:68:d5:27:46:
         c8:d1:0b:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07JYKelK6w4ZfkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZWM1NWFkZTUtYjE2MC00NDQ4LTkzMjUtNmVmOTIzNzJiZGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMqjwz6G9xbq5ajnDvadNHkAuUkCUBw6gKJW
r7RZLzhLef3m7v0RUDaYYhFuVK3keP9y8tRcSzOprnBtsrR+Lfcb5wNqmTOugQV2
k+yb2k9qSmX8fk84zxs9FBtUNQUikjjQUaee78EjhrnQQd26dJxWTxEvfsZxu5jd
hAnz0ZsO6HffcU43Mfrxd1oBulCPwe8Z+Tnpn1aznBvF5Oy2Qwaj41fe5f1UAq3j
q8DPVpqXGVzufCBT7fm7mEc8ONyuLudhH3j5DeaMmEtRc5iVNEeAkPcOKdB4aO34
a2qFkMNTXZYQ7FV7koScQV7TL1CGOp6b/qWlPMksv5gyg2POmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmyk5Zbkb0lB1py4vf68rbOq3RQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzY1OWJhZTgtMmUyNS0z
NDFjLWFhMTQtZWI0MzMzZjQzZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM9PrcfnqDU5rPdjYo8zTdt0Xztwzbfoipk0JMWM+nM9h0BYDgoApQkG
9AbAi9uggIr11nfqnaiL1BXZ85Ej1R6/974RJBOtaScAOeEXK9oKyApMT9uuhXtC
fqS+AHWlHhXuGNJ0ovCzGRrcv26+sJB83JqCQzMawv+ogStoyakpysAB4cG6Jc6i
XiAXKEJbSiy3cxB8CBB4d8O8D4w3EoUGWYbrxB1D1pRvY/NoC10AuAa9zrJ5WP/5
teFt8PNdNP2oVUBrEXA9yWJhfms9WWiruzo6J46U6jGy5+WuaWbwsuNNM8bKIjWH
IPllCTy6zg6aFTHM0enXaNUnRsjRC4Q=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:06 2025 by rpki-client