Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fd659b4-a32e-3304-b37e-5521278834c5.roa
File:                     5fd659b4-a32e-3304-b37e-5521278834c5.roa (raw, json)
Hash identifier:          R6tVG3UX4cc+9vso25IfvFT/ejsYWxNshMjZpFlc5JE=
Subject key identifier:   0F:73:67:BA:A3:43:08:E6:B1:DE:C2:3B:D1:51:DD:10:02:7C:07:F4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE4935DD98A1EDD5D742E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fd659b4-a32e-3304-b37e-5521278834c5.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.32.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:49:35:dd:98:a1:ed:d5:d7:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=49822d71-a3a6-44b6-9b56-8857c67dd3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d5:4f:59:8e:eb:e0:22:c0:d2:f1:49:37:57:
                    c1:94:c1:c4:6f:50:72:02:f3:67:7e:42:8d:d9:38:
                    4c:cb:d5:fb:b7:a5:e6:5e:30:87:71:0d:c5:a4:19:
                    07:46:ee:7c:d6:a1:6f:ba:42:c2:a2:d1:e1:ad:17:
                    38:21:d0:48:d7:5d:8b:d2:c1:cd:1b:c2:8d:c9:2c:
                    d5:10:e9:75:27:5f:46:08:9a:c1:d9:8c:c9:9d:eb:
                    eb:b8:fe:b7:c1:b6:d0:a3:22:3e:19:eb:6c:a6:ce:
                    13:b4:d8:0e:8d:b4:51:1e:3e:2f:78:ca:2a:12:df:
                    7a:cc:da:7e:8b:bb:83:c7:eb:0e:53:92:d6:86:b4:
                    b4:b6:27:76:62:8a:52:23:1b:b0:a5:24:d9:e2:37:
                    31:c9:bf:0a:06:81:ad:da:3e:e4:89:82:0b:dd:5a:
                    e8:3d:f1:60:33:f7:de:7f:49:3c:f1:19:2b:5e:24:
                    14:11:d7:06:5a:8b:6e:52:da:79:9c:6d:5c:a9:e8:
                    fa:11:71:52:c7:8a:bc:d8:71:17:11:91:1e:0b:ed:
                    86:80:3b:36:e8:e9:03:e4:a5:16:8c:fd:87:a3:d9:
                    b8:40:3c:a9:d1:c3:25:84:bf:ba:f4:67:0c:81:1c:
                    97:1d:30:0d:ae:8d:b5:37:6b:6d:3f:ab:2f:5c:a1:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:73:67:BA:A3:43:08:E6:B1:DE:C2:3B:D1:51:DD:10:02:7C:07:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fd659b4-a32e-3304-b37e-5521278834c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:1b:dd:f1:84:9c:dd:e5:dd:a1:4c:3a:48:98:74:87:f5:f6:
         e2:ba:6f:66:8e:be:7f:eb:bb:ae:6b:82:a0:57:10:eb:fa:b9:
         45:7b:a2:ee:4c:61:7c:78:f3:f1:76:fd:e9:86:1c:b1:c1:be:
         35:98:9b:5d:7b:41:34:e1:af:77:a8:26:9c:83:89:da:94:a8:
         df:71:32:04:54:38:b1:5e:70:8b:0b:9c:46:ae:dd:95:9f:72:
         a4:5d:0f:91:04:bd:a2:97:c4:d5:31:21:ad:14:ed:88:91:b2:
         92:2b:34:3b:67:f7:04:cd:44:92:43:1d:d0:61:f0:85:69:c8:
         c4:5a:2f:f8:3f:70:c8:1d:f5:2d:3e:d5:f1:36:3c:d6:a6:fe:
         3c:63:43:36:36:b5:91:97:8a:d4:60:d1:ff:42:19:9a:12:3b:
         97:f1:ae:85:ef:e7:66:c8:c5:16:c3:9e:d9:96:19:e4:9b:7c:
         b0:d4:92:b6:d6:ce:1b:44:9f:6c:c6:2f:57:30:50:fa:db:5f:
         0b:dc:9f:0d:c9:0d:7d:e4:ab:35:51:33:5a:e2:bb:87:93:9c:
         34:a1:df:b5:6e:81:27:2a:4d:3c:62:9d:66:6e:06:02:cd:26:
         fb:63:ff:7a:87:d4:a6:0c:15:bc:24:b6:aa:c1:11:9a:88:ae:
         8a:09:fd:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07kk13Zih7dXXQuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NDk4MjJkNzEtYTNhNi00NGI2LTliNTYtODg1N2M2N2RkM2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtVPWY7r4CLA0vFJN1fBlMHEb1ByAvNnfkKN
2ThMy9X7t6XmXjCHcQ3FpBkHRu581qFvukLCotHhrRc4IdBI112L0sHNG8KNySzV
EOl1J19GCJrB2YzJnevruP63wbbQoyI+Getsps4TtNgOjbRRHj4veMoqEt96zNp+
i7uDx+sOU5LWhrS0tid2YopSIxuwpSTZ4jcxyb8KBoGt2j7kiYIL3VroPfFgM/fe
f0k88RkrXiQUEdcGWotuUtp5nG1cqej6EXFSx4q82HEXEZEeC+2GgDs26OkD5KUW
jP2Ho9m4QDyp0cMlhL+69GcMgRyXHTANro21N2ttP6svXKG88QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9zZ7qjQwjmsd7CO9FR3RACfAf0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWZkNjU5YjQtYTMyZS0z
MzA0LWIzN2UtNTUyMTI3ODgzNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCBUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK4b3fGEnN3l3aFMOkiYdIf19uK6b2aOvn/ru65rgqBXEOv6uUV7ou5M
YXx48/F2/emGHLHBvjWYm117QTThr3eoJpyDidqUqN9xMgRUOLFecIsLnEau3ZWf
cqRdD5EEvaKXxNUxIa0U7YiRspIrNDtn9wTNRJJDHdBh8IVpyMRaL/g/cMgd9S0+
1fE2PNam/jxjQzY2tZGXitRg0f9CGZoSO5fxroXv52bIxRbDntmWGeSbfLDUkrbW
zhtEn2zGL1cwUPrbXwvcnw3JDX3kqzVRM1riu4eTnDSh37VugScqTTxinWZuBgLN
Jvtj/3qH1KYMFbwktqrBEZqIrooJ/aI=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:38 2025 by rpki-client