Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48dac1b9-118f-3cd0-b3dd-abb6417f1166.roa
File:                     48dac1b9-118f-3cd0-b3dd-abb6417f1166.roa (raw, json)
Hash identifier:          gwLeHGaODlRo/aOtSwNwFSyFEw5OsJf7FEKMbRaIAEQ=
Subject key identifier:   64:D8:CF:97:17:93:F6:48:D7:BC:12:88:42:9A:00:DA:7E:13:CE:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDA7A41D0C461535C45D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48dac1b9-118f-3cd0-b3dd-abb6417f1166.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        66.30.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:a7:a4:1d:0c:46:15:35:c4:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=dfe23bc7-1e68-4050-bc1a-3862ec52eaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:7d:df:e4:42:c2:32:89:69:c4:f9:7f:63:
                    fc:38:9a:61:f6:11:d5:d8:15:7a:13:66:46:64:ca:
                    fe:ee:15:9c:20:72:72:5d:a9:94:e1:e7:11:21:85:
                    15:24:5c:01:00:52:ce:f6:aa:39:43:44:18:19:1e:
                    65:b6:83:ed:05:17:a9:32:42:69:37:38:29:99:30:
                    51:71:84:0d:59:af:19:58:39:92:64:4e:db:a7:f8:
                    7e:be:06:56:9c:95:cb:50:07:ac:69:15:07:33:79:
                    6d:39:c6:2a:f9:66:d4:d6:88:c6:e4:7f:bc:07:8b:
                    6a:69:65:ed:5c:f7:bc:2b:dd:58:27:aa:e8:a5:18:
                    20:62:9b:eb:92:51:1d:15:1e:c6:2a:0d:56:db:94:
                    fe:61:3e:ff:ed:f7:84:ef:cf:c0:2d:be:fc:3b:84:
                    8b:96:bd:d5:b7:4d:32:3c:34:db:3e:3c:3f:d7:be:
                    8f:a3:8f:12:97:f1:85:36:d7:61:72:40:7e:8d:9a:
                    af:19:9e:0c:45:0e:4a:75:53:9c:30:01:84:e1:36:
                    40:5f:18:b1:dd:10:cf:3a:84:66:da:ae:f6:b5:88:
                    e2:4d:db:75:f4:d5:61:1b:2e:f4:e9:23:03:86:1a:
                    37:5e:d4:28:c1:51:d2:fd:ed:6c:9b:a4:03:74:9d:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D8:CF:97:17:93:F6:48:D7:BC:12:88:42:9A:00:DA:7E:13:CE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48dac1b9-118f-3cd0-b3dd-abb6417f1166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.30.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:14:32:b2:fb:33:06:fa:80:06:d3:1e:88:15:cb:c3:ec:bf:
         df:4a:26:45:0d:8b:7b:df:59:d6:2f:fe:58:67:37:9b:02:1f:
         77:f4:a5:8c:36:30:26:07:ce:b1:df:46:69:8a:3f:ef:cf:24:
         c8:c2:78:2c:95:2f:8f:e2:fe:9c:9c:b8:e0:74:31:f1:1a:6c:
         d6:0c:7d:79:a5:ff:ae:3e:34:60:a9:0c:21:54:5f:e4:e6:b3:
         92:6d:f7:ca:a3:26:c9:76:62:09:71:2b:e6:3b:13:d3:a3:0c:
         db:5e:50:a4:33:97:3b:b9:e9:fe:96:b1:1e:8b:aa:e4:a3:7a:
         45:38:2a:9a:43:05:61:43:d9:05:bd:f5:b1:a4:f2:fa:36:bf:
         a0:30:95:bb:4f:83:3a:15:4c:82:8c:a7:c9:ef:04:db:5c:42:
         83:69:09:f2:b9:46:fe:b1:82:57:be:41:2a:54:fb:49:6a:ed:
         fd:70:f4:d3:43:3f:f8:c6:6a:b8:2e:c0:e7:73:45:9e:e9:82:
         32:4a:e2:b6:5b:e2:c0:58:24:d3:64:75:a1:23:3c:f2:58:68:
         34:61:85:7a:ee:4c:77:0d:57:f9:d1:5c:41:e2:34:d7:01:2c:
         32:4b:0c:f1:56:58:80:e9:80:f4:91:db:9f:4c:83:cf:d3:39:
         57:74:4b:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07aekHQxGFTXEXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZGZlMjNiYzctMWU2OC00MDUwLWJjMWEtMzg2MmVjNTJlYWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjp93+RCwjKJacT5f2P8OJph9hHV2BV6E2ZG
ZMr+7hWcIHJyXamU4ecRIYUVJFwBAFLO9qo5Q0QYGR5ltoPtBRepMkJpNzgpmTBR
cYQNWa8ZWDmSZE7bp/h+vgZWnJXLUAesaRUHM3ltOcYq+WbU1ojG5H+8B4tqaWXt
XPe8K91YJ6ropRggYpvrklEdFR7GKg1W25T+YT7/7feE78/ALb78O4SLlr3Vt00y
PDTbPjw/176Po48Sl/GFNtdhckB+jZqvGZ4MRQ5KdVOcMAGE4TZAXxix3RDPOoRm
2q72tYjiTdt19NVhGy706SMDhho3XtQowVHS/e1sm6QDdJ1XGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTYz5cXk/ZI17wSiEKaANp+E84vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDhkYWMxYjktMTE4Zi0z
Y2QwLWIzZGQtYWJiNjQxN2YxMTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQh5cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQUMrL7Mwb6gAbTHogVy8Psv99KJkUNi3vfWdYv/lhnN5sCH3f0pYw2
MCYHzrHfRmmKP+/PJMjCeCyVL4/i/pycuOB0MfEabNYMfXml/64+NGCpDCFUX+Tm
s5Jt98qjJsl2YglxK+Y7E9OjDNteUKQzlzu56f6WsR6LquSjekU4KppDBWFD2QW9
9bGk8vo2v6AwlbtPgzoVTIKMp8nvBNtcQoNpCfK5Rv6xgle+QSpU+0lq7f1w9NND
P/jGarguwOdzRZ7pgjJK4rZb4sBYJNNkdaEjPPJYaDRhhXruTHcNV/nRXEHiNNcB
LDJLDPFWWIDpgPSR259Mg8/TOVd0S+k=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:00:39 2025 by rpki-client