Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d4ba315-0bfd-3fab-b7a2-0e3464f24231.roa
File:                     7d4ba315-0bfd-3fab-b7a2-0e3464f24231.roa (raw, json)
Hash identifier:          fFIA4Tlb0DFD6dB9fH8e7xPoqU8qBzfnMG5tKDLHc3Q=
Subject key identifier:   EC:96:FA:67:23:2C:E5:A1:39:75:06:DF:E4:1A:DB:EB:D2:11:BA:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC9EF5D3599D57BF8F0580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d4ba315-0bfd-3fab-b7a2-0e3464f24231.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.40.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:9e:f5:d3:59:9d:57:bf:8f:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=0628603d-69e1-4edd-af79-b7a9fdcce905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:c9:21:df:d6:30:4e:1a:e3:8e:97:07:e9:
                    03:6f:ec:dd:9f:6e:24:3c:c9:f9:44:17:48:74:f4:
                    a8:ec:0c:60:7e:1f:d5:06:cd:ae:25:5f:91:7c:ec:
                    60:3f:c6:db:70:4c:04:42:f1:6f:c3:f2:66:db:40:
                    0f:15:40:39:76:2f:dd:83:ec:6e:62:47:9a:ee:14:
                    c7:68:2b:a4:32:71:76:f9:fa:aa:92:8d:d9:01:00:
                    5a:19:bf:de:a8:0d:f1:b1:64:d2:87:8e:2b:d2:92:
                    03:31:4e:3b:60:07:35:c0:39:50:50:27:2b:0f:55:
                    69:42:22:2f:57:3e:cd:00:63:65:10:51:09:f0:ad:
                    5e:91:57:15:59:5f:8c:ef:e9:27:67:1d:d5:96:9b:
                    b8:50:b1:b6:5f:c9:a4:0b:9a:de:cb:f4:9a:7a:92:
                    80:22:27:5e:79:06:14:99:e8:18:ac:07:7c:03:01:
                    3f:1f:ac:57:ee:f6:8f:fa:1f:ec:ba:ae:49:e1:01:
                    a6:7f:c7:bc:4f:71:09:79:d8:71:f3:28:b8:67:3f:
                    bf:b3:80:dd:dc:0a:ff:27:85:4e:16:5f:3d:07:1c:
                    d1:9d:48:bd:b6:45:fa:6c:f8:f9:63:4f:a2:21:14:
                    d4:c1:bd:07:01:02:0c:a2:a9:b5:05:7b:31:79:5f:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:FA:67:23:2C:E5:A1:39:75:06:DF:E4:1A:DB:EB:D2:11:BA:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d4ba315-0bfd-3fab-b7a2-0e3464f24231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.40.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:67:f7:45:26:53:e3:50:7a:6e:dd:bd:27:06:ae:6b:6b:81:
         b4:97:cf:25:5f:00:bf:4f:a2:23:23:3e:f4:f1:92:f3:90:ea:
         34:93:eb:91:c1:f6:32:3e:f1:6c:7a:72:9c:57:bf:4e:79:54:
         be:7a:22:9b:b3:5a:cc:e4:3d:85:31:2a:64:3d:a2:e0:9f:11:
         6f:9d:d4:02:c0:1b:59:a1:f2:71:ef:98:69:0e:0c:7a:2b:4e:
         2f:06:50:9d:b2:66:d7:da:e7:39:ec:52:5f:9b:26:6f:10:e3:
         96:28:5f:0f:3b:b4:0e:b5:e1:1e:45:d6:eb:1a:ae:2b:68:97:
         4f:46:83:d1:63:19:9d:c3:a9:c1:b5:98:fe:89:68:9f:34:2f:
         79:3a:4c:d4:f5:24:83:fa:18:95:53:21:11:a5:06:23:fe:ff:
         52:bc:2a:a6:41:e8:5c:f2:ad:00:44:6f:4a:8d:cd:f0:e8:ff:
         55:9b:25:f6:4d:38:48:f6:c3:e0:86:52:22:ec:e7:81:11:7e:
         54:72:9e:09:96:89:de:52:d4:77:c6:cd:f2:a9:b4:3a:b6:84:
         76:6a:0a:17:76:07:eb:25:f4:74:0b:e1:43:c1:60:73:1b:d9:
         dd:9a:5e:ea:e4:13:ff:28:8f:3d:2c:38:7d:45:cf:56:43:01:
         ac:d3:e1:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07J7101mdV7+PBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
MDYyODYwM2QtNjllMS00ZWRkLWFmNzktYjdhOWZkY2NlOTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5/JId/WME4a446XB+kDb+zdn24kPMn5RBdI
dPSo7Axgfh/VBs2uJV+RfOxgP8bbcEwEQvFvw/Jm20APFUA5di/dg+xuYkea7hTH
aCukMnF2+fqqko3ZAQBaGb/eqA3xsWTSh44r0pIDMU47YAc1wDlQUCcrD1VpQiIv
Vz7NAGNlEFEJ8K1ekVcVWV+M7+knZx3Vlpu4ULG2X8mkC5rey/SaepKAIideeQYU
megYrAd8AwE/H6xX7vaP+h/suq5J4QGmf8e8T3EJedhx8yi4Zz+/s4Dd3Ar/J4VO
Fl89BxzRnUi9tkX6bPj5Y0+iIRTUwb0HAQIMoqm1BXsxeV85xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOyW+mcjLOWhOXUG3+Qa2+vSEbpTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Q0YmEzMTUtMGJmZC0z
ZmFiLWI3YTItMGUzNDY0ZjI0MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANJn90UmU+NQem7dvScGrmtrgbSXzyVfAL9PoiMjPvTxkvOQ6jST65HB
9jI+8Wx6cpxXv055VL56IpuzWszkPYUxKmQ9ouCfEW+d1ALAG1mh8nHvmGkODHor
Ti8GUJ2yZtfa5znsUl+bJm8Q45YoXw87tA614R5F1usaritol09Gg9FjGZ3DqcG1
mP6JaJ80L3k6TNT1JIP6GJVTIRGlBiP+/1K8KqZB6FzyrQBEb0qNzfDo/1WbJfZN
OEj2w+CGUiLs54ERflRyngmWid5S1HfGzfKptDq2hHZqChd2B+sl9HQL4UPBYHMb
2d2aXurkE/8ojz0sOH1Fz1ZDAazT4Uw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:05:33 2025 by rpki-client