Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90c0021c-1c10-340c-97dc-cdc6cb87fc7c.roa
File:                     90c0021c-1c10-340c-97dc-cdc6cb87fc7c.roa (raw, json)
Hash identifier:          /kg4Fejqay0e0RXgfSdoDro4VYO9jCklDGgO5wBoufI=
Subject key identifier:   58:0E:36:C0:19:AD:F4:3A:9C:EF:01:E0:E2:DC:30:13:E7:A2:3C:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584992946A20F772F202DE978500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90c0021c-1c10-340c-97dc-cdc6cb87fc7c.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33491
IP address blocks:        67.184.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:6a:20:f7:72:f2:02:de:97:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=80835d62-bbcd-4ce6-bc73-41ab80d450bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:97:6f:d6:b5:ed:0a:62:1d:5b:1a:b5:b3:
                    9e:bc:04:86:b8:35:a8:ef:3f:b3:6e:6b:ea:db:53:
                    6e:ad:85:9e:7f:92:1a:06:4d:4f:aa:2b:59:af:e3:
                    4c:1f:55:97:30:cf:6c:cf:f2:0d:32:02:7c:7c:d2:
                    30:d3:17:5d:a0:e7:5c:b1:6d:a2:de:d6:27:a2:ee:
                    c9:52:0f:b8:e4:27:7d:c3:49:0e:07:d8:be:fa:ed:
                    fe:18:37:08:58:69:ee:1a:7c:78:09:c1:84:26:15:
                    2e:18:b1:55:ee:76:d0:98:94:9d:8c:96:ad:e3:f3:
                    c5:26:c8:5b:76:5c:d2:18:d9:ac:ef:3d:aa:46:e0:
                    da:4b:e1:4c:21:b3:96:e4:56:52:4e:81:0a:b3:c6:
                    a7:3a:fa:dd:2b:b0:34:be:e5:cc:71:95:e0:2e:a5:
                    16:34:f7:59:39:9e:b0:87:9d:18:cb:10:46:df:36:
                    51:23:26:b2:a3:98:e1:15:50:64:d6:fa:c1:f5:36:
                    65:a1:12:d8:53:6b:fe:bb:fb:0e:77:b0:43:70:f1:
                    66:42:19:df:67:91:57:df:97:e1:9c:a2:00:9e:d2:
                    05:b0:91:3f:36:30:f6:98:b3:bf:f9:85:85:84:10:
                    72:f2:8b:c1:3b:38:3a:31:6d:83:63:b1:b4:f8:4a:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0E:36:C0:19:AD:F4:3A:9C:EF:01:E0:E2:DC:30:13:E7:A2:3C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90c0021c-1c10-340c-97dc-cdc6cb87fc7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.184.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:84:50:06:ea:27:80:61:f3:3e:ea:68:7d:0b:3d:da:11:
         43:28:0b:f7:45:b0:b8:ca:a8:c5:82:ae:71:10:81:a6:5b:1b:
         cc:c9:e8:b0:fe:ba:00:9c:0d:62:b2:67:f0:f8:bd:18:5b:6a:
         40:2f:ba:35:dd:1e:d4:d8:dc:fd:93:ef:d0:7f:0c:96:e2:4b:
         90:17:e6:a5:73:6f:3a:b9:00:ff:24:e6:b5:1b:aa:eb:57:12:
         41:e7:02:2b:c4:fe:2a:c7:73:ab:29:2f:b1:c7:87:60:c6:d1:
         86:80:2b:d0:78:98:c5:14:c8:72:b1:7f:40:93:c8:27:d3:83:
         c7:10:89:41:e4:e3:43:de:41:76:a2:5c:e0:14:0c:1c:a9:db:
         5c:66:14:98:56:46:7b:31:35:a7:8b:cb:a5:d7:fb:89:70:bf:
         e5:00:3a:9e:99:1a:6d:59:66:62:f0:4c:aa:c7:90:25:34:e3:
         54:ed:09:5a:02:51:ce:1c:ee:86:2d:8f:7c:8d:75:45:b8:c6:
         4e:49:b0:fe:9b:4f:10:35:66:2c:03:da:3d:f8:b3:b4:94:20:
         65:de:ca:9d:1b:c5:56:55:ff:10:c8:d5:cc:cc:92:70:4e:7a:
         bd:f0:31:78:7e:52:a2:1e:40:25:f6:48:51:c5:50:20:f7:43:
         5f:16:5d:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlGog93LyAt6XhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
ODA4MzVkNjItYmJjZC00Y2U2LWJjNzMtNDFhYjgwZDQ1MGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIuXb9a17QpiHVsatbOevASGuDWo7z+zbmvq
21NurYWef5IaBk1PqitZr+NMH1WXMM9sz/INMgJ8fNIw0xddoOdcsW2i3tYnou7J
Ug+45Cd9w0kOB9i++u3+GDcIWGnuGnx4CcGEJhUuGLFV7nbQmJSdjJat4/PFJshb
dlzSGNms7z2qRuDaS+FMIbOW5FZSToEKs8anOvrdK7A0vuXMcZXgLqUWNPdZOZ6w
h50YyxBG3zZRIyayo5jhFVBk1vrB9TZloRLYU2v+u/sOd7BDcPFmQhnfZ5FX35fh
nKIAntIFsJE/NjD2mLO/+YWFhBBy8ovBOzg6MW2DY7G0+EqCTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgONsAZrfQ6nO8B4OLcMBPnojw9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTBjMDAyMWMtMWMxMC0z
NDBjLTk3ZGMtY2RjNmNiODdmYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7gwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAId/hFAG6ieAYfM+6mh9Cz3aEUMoC/dFsLjKqMWCrnEQgaZbG8zJ6LD+
ugCcDWKyZ/D4vRhbakAvujXdHtTY3P2T79B/DJbiS5AX5qVzbzq5AP8k5rUbqutX
EkHnAivE/irHc6spL7HHh2DG0YaAK9B4mMUUyHKxf0CTyCfTg8cQiUHk40PeQXai
XOAUDByp21xmFJhWRnsxNaeLy6XX+4lwv+UAOp6ZGm1ZZmLwTKrHkCU041TtCVoC
Uc4c7oYtj3yNdUW4xk5JsP6bTxA1ZiwD2j34s7SUIGXeyp0bxVZV/xDI1czMknBO
er3wMXh+UqIeQCX2SFHFUCD3Q18WXfI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:17:14 2025 by rpki-client