Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6db2e8a0-2639-34e0-bd34-a3edafa99fe9.roa
File:                     6db2e8a0-2639-34e0-bd34-a3edafa99fe9.roa (raw, json)
Hash identifier:          oLhkxmBp+pXSdpuQmnPATujFi5+YYrIDudczwr2mJf8=
Subject key identifier:   2C:F2:98:F8:BF:8E:4D:C5:26:FB:3E:32:1D:27:EA:07:75:46:65:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431D34060787CADD5B97C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6db2e8a0-2639-34e0-bd34-a3edafa99fe9.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        76.152.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:d3:40:60:78:7c:ad:d5:b9:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=ad208e9b-8ca4-4308-aa07-12932d96130b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:00:92:ad:c9:ba:f4:16:89:ba:dc:8d:fa:30:
                    e7:55:11:76:ed:ce:0e:11:b5:ad:de:95:97:5e:49:
                    c4:49:0a:cb:e3:dc:29:b2:1e:ea:8c:45:d2:4e:42:
                    f7:47:fc:2b:04:3f:39:74:63:80:a1:3f:3e:c3:e7:
                    b6:eb:72:06:bb:be:49:30:7d:75:d2:b3:51:84:66:
                    95:8b:50:29:5b:6d:39:b9:d2:34:24:60:f2:b3:5f:
                    3e:8c:29:fb:9a:38:7e:c4:bd:02:a0:63:88:57:b0:
                    19:d9:46:cc:48:f2:65:aa:43:f2:ee:87:58:4d:8e:
                    26:95:2d:d4:2f:07:7c:4c:ae:00:e7:0a:48:47:44:
                    2e:57:a3:71:2f:9d:10:48:db:f1:20:1a:8a:a3:bb:
                    e4:3a:69:03:74:d5:58:07:14:11:69:88:3d:56:5d:
                    aa:36:18:79:4f:2b:b9:1b:ef:a3:6a:f9:21:f5:07:
                    2d:a5:58:4a:20:3d:f5:51:28:92:68:f3:82:ed:7b:
                    7b:fa:dd:58:bf:08:02:56:0b:ff:2a:31:1a:ff:5b:
                    32:53:8e:62:b7:d7:b9:8e:91:66:14:ee:80:0a:d6:
                    db:1c:76:43:50:8b:e5:14:36:aa:1e:b2:a0:1b:aa:
                    ba:7f:80:41:1f:02:27:b1:f8:a6:aa:14:df:ec:e1:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F2:98:F8:BF:8E:4D:C5:26:FB:3E:32:1D:27:EA:07:75:46:65:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6db2e8a0-2639-34e0-bd34-a3edafa99fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.152.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:a1:65:bd:f5:6d:c1:dd:6b:0f:bd:9e:b3:a8:a7:d4:0a:
         9f:23:17:c4:a1:4e:1c:b3:71:f9:f6:fb:7f:6f:76:2d:1c:be:
         15:f5:a8:cb:4c:5f:84:22:f5:67:34:79:ac:e6:18:4e:48:15:
         a1:bc:54:69:e9:a4:26:83:e9:ff:f9:8d:08:1f:bc:b2:97:b7:
         6d:5a:5a:f9:2f:c0:12:fe:d5:82:a0:47:53:8e:31:36:01:1f:
         bf:f2:3a:56:5e:f5:ea:42:e4:92:06:89:45:9b:d3:0c:21:9b:
         31:43:3e:da:f7:0c:49:49:37:38:44:5b:7c:94:78:4a:d0:eb:
         88:f6:93:eb:ed:56:39:de:8b:03:42:82:48:b4:fd:73:f9:c9:
         07:01:f0:46:c0:01:0a:ae:da:ac:fa:86:bc:d2:2b:56:ae:f9:
         19:0d:fe:33:91:92:a9:d3:f2:bb:b2:a1:8d:da:36:f8:7f:3d:
         51:4e:00:48:3f:1a:3c:77:54:98:61:8c:b8:a0:9b:67:50:88:
         fc:94:61:28:e2:83:cb:f2:6c:66:45:cd:bd:0c:a1:2e:51:e9:
         08:8a:e1:36:69:e8:a8:ea:d3:2d:22:bc:c8:61:d2:86:ed:a2:
         57:00:ba:27:4e:2c:a0:d6:e1:58:b3:93:ec:df:f4:d8:06:39:
         ac:4b:4b:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMdNAYHh8rdW5fIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YWQyMDhlOWItOGNhNC00MzA4LWFhMDctMTI5MzJkOTYxMzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QCSrcm69BaJutyN+jDnVRF27c4OEbWt3pWX
XknESQrL49wpsh7qjEXSTkL3R/wrBD85dGOAoT8+w+e263IGu75JMH110rNRhGaV
i1ApW205udI0JGDys18+jCn7mjh+xL0CoGOIV7AZ2UbMSPJlqkPy7odYTY4mlS3U
Lwd8TK4A5wpIR0QuV6NxL50QSNvxIBqKo7vkOmkDdNVYBxQRaYg9Vl2qNhh5Tyu5
G++javkh9QctpVhKID31USiSaPOC7Xt7+t1YvwgCVgv/KjEa/1syU45it9e5jpFm
FO6ACtbbHHZDUIvlFDaqHrKgG6q6f4BBHwInsfimqhTf7OESOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzymPi/jk3FJvs+Mh0n6gd1RmUxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmRiMmU4YTAtMjYzOS0z
NGUwLWJkMzQtYTNlZGFmYTk5ZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAy8oWW99W3B3WsPvZ6zqKfUCp8jF8ShThyzcfn2+39vdi0cvhX1qMtM
X4Qi9Wc0eazmGE5IFaG8VGnppCaD6f/5jQgfvLKXt21aWvkvwBL+1YKgR1OOMTYB
H7/yOlZe9epC5JIGiUWb0wwhmzFDPtr3DElJNzhEW3yUeErQ64j2k+vtVjneiwNC
gki0/XP5yQcB8EbAAQqu2qz6hrzSK1au+RkN/jORkqnT8ruyoY3aNvh/PVFOAEg/
Gjx3VJhhjLigm2dQiPyUYSjig8vybGZFzb0MoS5R6QiK4TZp6Kjq0y0ivMhh0obt
olcAuidOLKDW4Vizk+zf9NgGOaxLSxc=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:13:36 2025 by rpki-client