Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5771aa32-762a-3514-90e9-2fc4775a7502.roa
File:                     5771aa32-762a-3514-90e9-2fc4775a7502.roa (raw, json)
Hash identifier:          IuaBKSHwqlEyQJR9AilQAteAcLZQh69o8YYFs9vqGkk=
Subject key identifier:   B9:8C:8A:27:73:B7:CD:D9:FE:53:76:E5:9E:C0:94:BE:58:41:FE:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED7C29B2B86613C0CD3C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5771aa32-762a-3514-90e9-2fc4775a7502.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        76.115.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:7c:29:b2:b8:66:13:c0:cd:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2f5fbd14-6864-44b8-b51b-cd155abbae60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:b7:d3:21:c5:ae:19:fe:e9:a3:8e:91:8e:
                    7c:9d:8a:e7:8b:ef:5e:8f:d5:b6:8a:4c:a8:2f:39:
                    a2:b3:52:05:0c:84:7e:f5:27:7d:52:53:d3:26:d2:
                    2d:8e:62:f9:34:a1:9f:3a:f7:55:b0:d6:a3:ba:a1:
                    50:f1:52:74:bc:05:2e:5c:0e:e5:bb:16:c5:72:9e:
                    63:a6:bc:a4:b3:0f:35:08:8b:69:80:93:eb:75:58:
                    6d:98:d6:3c:9b:27:94:0e:9e:ac:8a:83:c3:0b:a4:
                    2f:15:d3:9b:04:45:b1:0c:c5:8b:96:33:0d:42:f2:
                    0c:30:b9:a4:a7:13:3e:17:cb:67:17:90:a6:02:c8:
                    7f:a7:ed:47:99:6e:f7:11:18:ec:52:9c:0e:2c:01:
                    76:12:29:42:f8:30:6c:f0:b1:ae:94:b3:fa:45:de:
                    70:d5:4d:8e:2a:36:8f:c0:d3:34:6a:25:1b:89:8e:
                    e9:45:6f:ee:b6:e1:24:45:fc:74:6b:d4:0f:01:ff:
                    c0:f3:64:ff:b7:34:d0:01:69:e8:28:63:bd:6d:0b:
                    5f:f6:9f:77:fe:0d:97:95:67:db:5d:28:13:91:16:
                    17:d9:1d:f8:dd:4f:15:57:97:cf:9e:8f:f9:44:1e:
                    b5:95:cd:31:49:d3:3d:75:1e:7c:12:8e:b2:f1:56:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8C:8A:27:73:B7:CD:D9:FE:53:76:E5:9E:C0:94:BE:58:41:FE:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5771aa32-762a-3514-90e9-2fc4775a7502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:b6:f2:31:c3:d3:72:f1:22:84:b4:51:7b:20:c9:a8:a2:44:
         9a:09:ea:c6:b2:19:c1:0e:b0:ab:da:59:45:fc:43:7f:98:d2:
         bc:47:6d:91:28:8a:e1:ff:5b:c7:d7:c2:de:7a:e3:28:6a:51:
         f1:9c:1d:94:de:3c:d2:ed:9f:6d:61:46:45:95:9f:1d:bb:1f:
         7b:6c:55:ef:e1:41:d3:bd:a8:41:70:39:02:dd:a0:20:91:75:
         01:96:99:b1:ee:58:57:79:35:37:35:a6:1b:02:6c:1a:cc:0c:
         7e:fa:da:41:b0:b5:8f:66:77:eb:6a:08:40:61:e6:66:1f:3d:
         de:06:ec:bb:a5:4c:8a:59:02:8a:a2:7a:e5:62:97:c5:51:e0:
         29:ec:bc:b6:55:da:a9:67:31:08:29:09:4e:81:81:d8:81:22:
         ea:ef:66:1f:d5:10:2f:f4:34:80:70:1a:54:74:0e:96:78:b0:
         e9:dd:21:c7:8c:f1:ce:43:cd:5b:a2:8b:41:e4:1a:01:fb:6e:
         ed:f3:4d:79:5e:2e:7f:9c:58:96:ec:4b:37:9c:e3:26:92:62:
         0d:d8:90:66:9a:3e:4d:9c:5f:af:25:93:92:06:62:43:0b:6d:
         01:0a:5d:cd:d6:94:dc:b5:75:f7:8c:03:10:71:ad:74:65:1b:
         d3:cd:11:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07XwpsrhmE8DNPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MmY1ZmJkMTQtNjg2NC00NGI4LWI1MWItY2QxNTVhYmJhZTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZa30yHFrhn+6aOOkY58nYrni+9ej9W2ikyo
Lzmis1IFDIR+9Sd9UlPTJtItjmL5NKGfOvdVsNajuqFQ8VJ0vAUuXA7luxbFcp5j
pryksw81CItpgJPrdVhtmNY8myeUDp6sioPDC6QvFdObBEWxDMWLljMNQvIMMLmk
pxM+F8tnF5CmAsh/p+1HmW73ERjsUpwOLAF2EilC+DBs8LGulLP6Rd5w1U2OKjaP
wNM0aiUbiY7pRW/utuEkRfx0a9QPAf/A82T/tzTQAWnoKGO9bQtf9p93/g2XlWfb
XSgTkRYX2R343U8VV5fPno/5RB61lc0xSdM9dR58Eo6y8VZnWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmMiidzt83Z/lN25Z7AlL5YQf50MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTc3MWFhMzItNzYyYS0z
NTE0LTkwZTktMmZjNDc3NWE3NTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALy28jHD03LxIoS0UXsgyaiiRJoJ6sayGcEOsKvaWUX8Q3+Y0rxHbZEo
iuH/W8fXwt564yhqUfGcHZTePNLtn21hRkWVnx27H3tsVe/hQdO9qEFwOQLdoCCR
dQGWmbHuWFd5NTc1phsCbBrMDH762kGwtY9md+tqCEBh5mYfPd4G7LulTIpZAoqi
euVil8VR4CnsvLZV2qlnMQgpCU6BgdiBIurvZh/VEC/0NIBwGlR0DpZ4sOndIceM
8c5DzVuii0HkGgH7bu3zTXleLn+cWJbsSzec4yaSYg3YkGaaPk2cX68lk5IGYkML
bQEKXc3WlNy1dfeMAxBxrXRlG9PNEbo=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:42 2025 by rpki-client