Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5163a022-09a4-3004-931c-f97a0644d5b5.roa
File:                     5163a022-09a4-3004-931c-f97a0644d5b5.roa (raw, json)
Hash identifier:          9EZOVZkup5XkZNW0PBFvr/EaT5s7T/9KMIswhykP7R0=
Subject key identifier:   11:5B:5D:0C:97:8E:C9:FD:38:A5:AD:77:14:42:49:90:9D:A0:82:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED491F66CF64D1D8121D28
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5163a022-09a4-3004-931c-f97a0644d5b5.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        174.174.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:49:1f:66:cf:64:d1:d8:12:1d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=e0d19d06-fc56-42da-981c-550e192b97ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:fa:fe:40:a5:8f:a1:71:a2:16:87:36:da:
                    13:88:88:d2:54:b4:84:f4:85:db:f7:42:b0:6a:b2:
                    05:7e:ea:d6:6b:d4:ab:0e:db:d7:54:e5:a5:e2:53:
                    59:0c:9f:54:87:8a:98:bd:5b:d5:6f:28:df:e1:a3:
                    b1:bf:31:a1:53:5e:47:33:ca:9a:3e:4f:3d:79:2b:
                    8f:26:31:00:19:a5:16:5f:c8:e1:cc:11:be:75:6c:
                    a8:ee:3f:4e:87:89:9d:00:07:f3:bf:1c:81:15:5f:
                    42:b1:8e:21:78:83:97:c6:4d:88:aa:b6:60:da:63:
                    13:29:68:36:6d:48:c0:68:6d:1f:30:45:5f:20:06:
                    6f:72:0d:70:65:06:58:af:53:f6:9c:51:bb:d5:53:
                    c6:81:f5:a2:3a:8a:81:ba:b2:05:8c:cc:af:47:f3:
                    da:d0:32:1c:60:c1:02:a1:34:76:b2:c6:4d:c9:de:
                    ab:ab:dc:de:92:cb:3d:cf:a1:b7:c4:cc:3f:79:f2:
                    85:b8:4c:60:8a:66:33:e1:f2:45:52:a6:ff:49:fa:
                    2d:db:ab:fc:c9:5d:65:79:34:ac:72:8c:02:30:bc:
                    ff:d0:5c:f4:57:85:90:19:1d:d7:d2:c2:92:da:4d:
                    9b:31:01:af:ea:ff:76:0e:2c:8c:c7:bf:fc:97:7b:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5B:5D:0C:97:8E:C9:FD:38:A5:AD:77:14:42:49:90:9D:A0:82:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5163a022-09a4-3004-931c-f97a0644d5b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.174.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:26:d5:a6:d9:51:d0:b5:80:05:ad:39:01:a4:a6:e5:f0:
         37:37:91:fa:eb:ad:14:e4:81:c4:f9:f5:2d:41:36:e7:10:f6:
         be:52:04:08:90:b5:74:22:f1:a0:0f:3b:d2:2d:a2:75:2c:d6:
         71:79:88:f6:bc:c0:8a:36:ae:b3:ce:70:f8:27:76:d5:83:ca:
         b3:d4:c4:03:69:89:b7:80:ba:b6:b2:22:bc:7f:b3:1c:25:2b:
         46:16:da:65:ad:47:f3:ca:c3:f2:80:d1:4e:2f:0c:fa:24:2f:
         ff:e2:81:f8:19:bf:2e:34:6d:9e:c0:2d:d0:bd:fc:38:c5:6a:
         5d:36:c3:38:b0:b9:29:a6:22:e8:a8:3f:9d:56:4a:b5:9f:9a:
         b6:99:2c:ac:62:e6:ce:e0:aa:43:6e:aa:77:1e:46:57:92:21:
         0f:45:5e:1d:66:7a:28:ea:87:70:d7:29:80:34:d2:d0:74:19:
         4a:32:09:39:3c:cd:5d:d2:2c:2d:b1:aa:d1:30:84:01:d3:7b:
         e8:d4:23:00:19:b5:dd:67:35:b7:a4:a6:cb:6c:01:ce:f0:10:
         a4:77:90:88:46:de:bb:73:94:06:a9:a3:c6:eb:6c:5a:6e:7d:
         e2:e5:d1:02:ab:7e:f8:1c:b6:37:c0:43:86:8a:af:c3:80:ad:
         d0:cf:16:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07UkfZs9k0dgSHSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZTBkMTlkMDYtZmM1Ni00MmRhLTk4MWMtNTUwZTE5MmI5N2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOn6/kClj6FxohaHNtoTiIjSVLSE9IXb90Kw
arIFfurWa9SrDtvXVOWl4lNZDJ9Uh4qYvVvVbyjf4aOxvzGhU15HM8qaPk89eSuP
JjEAGaUWX8jhzBG+dWyo7j9Oh4mdAAfzvxyBFV9CsY4heIOXxk2IqrZg2mMTKWg2
bUjAaG0fMEVfIAZvcg1wZQZYr1P2nFG71VPGgfWiOoqBurIFjMyvR/Pa0DIcYMEC
oTR2ssZNyd6rq9zekss9z6G3xMw/efKFuExgimYz4fJFUqb/Sfot26v8yV1leTSs
cowCMLz/0Fz0V4WQGR3X0sKS2k2bMQGv6v92DiyMx7/8l3vO6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFbXQyXjsn9OKWtdxRCSZCdoILPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTE2M2EwMjItMDlhNC0z
MDA0LTkzMWMtZjk3YTA2NDRkNWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrq4+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTWJtWm2VHQtYAFrTkBpKbl8Dc3kfrrrRTkgcT59S1BNucQ9r5SBAiQ
tXQi8aAPO9ItonUs1nF5iPa8wIo2rrPOcPgndtWDyrPUxANpibeAurayIrx/sxwl
K0YW2mWtR/PKw/KA0U4vDPokL//igfgZvy40bZ7ALdC9/DjFal02wziwuSmmIuio
P51WSrWfmraZLKxi5s7gqkNuqnceRleSIQ9FXh1meijqh3DXKYA00tB0GUoyCTk8
zV3SLC2xqtEwhAHTe+jUIwAZtd1nNbekpstsAc7wEKR3kIhG3rtzlAapo8brbFpu
feLl0QKrfvgctjfAQ4aKr8OArdDPFq0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:21 2025 by rpki-client