Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b7824e8-53ba-34cd-ba10-fc46bd862ac8.roa
File:                     9b7824e8-53ba-34cd-ba10-fc46bd862ac8.roa (raw, json)
Hash identifier:          of0+jDe3HKQ6y3WoLDnwZjK9G0uL4ZOELT32JHzb8fo=
Subject key identifier:   41:3E:BD:CB:72:01:93:B8:6E:05:27:61:CC:F6:31:72:C1:6A:60:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4F5DFF92EAF60FCDA3880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b7824e8-53ba-34cd-ba10-fc46bd862ac8.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33660
IP address blocks:        68.86.180.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:f5:df:f9:2e:af:60:fc:da:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=24aeba68-606c-4a67-9075-d4d16a7743fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:b1:4a:51:2f:a3:79:a6:07:ad:98:69:b3:
                    8e:93:f5:20:51:ab:4a:0a:9e:cd:02:66:a8:8f:fb:
                    87:37:b5:98:00:ad:2f:66:2f:b3:65:6d:3d:f9:f1:
                    1a:9d:48:09:1c:51:96:14:7e:99:07:00:f0:49:0d:
                    56:bc:08:3b:86:bf:c0:b3:4e:17:cb:d3:5d:53:6b:
                    b0:d8:ee:5c:d4:7b:d2:2a:19:f9:d4:bc:a9:d0:44:
                    53:f6:38:df:eb:f4:4f:a5:d8:a3:97:9a:a7:43:3c:
                    cf:32:3e:09:a3:f0:5e:c8:ba:90:3f:99:3d:f6:3c:
                    3c:7a:ca:95:14:e9:80:4a:c6:76:60:54:71:45:02:
                    36:17:af:08:96:d4:c2:b9:35:a5:ef:43:79:a8:e9:
                    b0:85:0d:13:79:8e:54:20:d2:33:6c:3a:c0:ed:e3:
                    2b:0f:81:0e:05:7a:b2:99:5a:a6:7d:ac:7c:7b:80:
                    75:79:3c:2b:13:32:58:5e:82:0b:db:bc:9b:9e:57:
                    fe:8d:3f:60:60:e5:f0:a2:29:29:22:d9:29:c2:61:
                    30:e4:13:b4:17:11:6b:21:ba:49:e4:6a:ff:ed:f0:
                    fe:17:10:97:f8:44:ee:a3:10:49:ba:5e:80:93:39:
                    50:4d:f5:05:d4:e7:73:25:8a:c4:ec:4e:98:1e:b3:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3E:BD:CB:72:01:93:B8:6E:05:27:61:CC:F6:31:72:C1:6A:60:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b7824e8-53ba-34cd-ba10-fc46bd862ac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.180.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:88:0f:64:91:a9:42:2f:17:b0:0a:85:24:86:c3:16:44:51:
         4e:c5:e4:d2:d3:29:5a:ca:2f:c3:76:0e:d0:88:a0:b5:4e:7f:
         d8:7b:a1:eb:ce:d1:b1:2c:6c:10:69:05:db:ac:a3:6f:16:df:
         2f:55:f3:44:3a:1e:e8:27:a6:9c:de:b9:95:bc:c3:a8:18:7e:
         85:6d:93:63:54:c4:c2:f6:72:35:30:51:bf:06:22:44:0c:ee:
         8b:22:b3:52:db:23:c2:da:47:78:42:54:a4:1b:c2:b6:6d:b9:
         af:34:b3:52:5e:ac:7a:4c:1d:81:9a:13:8d:3d:3d:df:df:f2:
         e4:6a:7f:53:21:33:25:fd:ab:b3:88:bf:02:29:e0:0e:98:4f:
         21:7c:62:ab:a8:73:28:68:ee:1d:e0:c4:e5:c9:2f:81:60:4b:
         64:79:c1:81:a2:7f:89:96:bb:12:39:ba:00:29:c5:b1:59:c0:
         42:c7:f9:c4:2a:89:58:33:b5:cf:03:86:f4:a2:95:c4:0e:93:
         f7:85:c9:70:1e:81:3b:9f:96:84:5d:77:b6:9d:8b:ff:3f:f3:
         ba:9c:0e:ae:f9:4d:5d:20:b4:d9:a5:b5:b8:7a:03:fe:1d:82:
         e9:ce:fa:0c:ef:0e:a6:2e:21:64:93:8f:75:e4:51:ac:9e:c3:
         ee:ba:b0:41
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl9pPXf+S6vYPzaOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MjRhZWJhNjgtNjA2Yy00YTY3LTkwNzUtZDRkMTZhNzc0M2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkaxSlEvo3mmB62YabOOk/UgUatKCp7NAmao
j/uHN7WYAK0vZi+zZW09+fEanUgJHFGWFH6ZBwDwSQ1WvAg7hr/As04Xy9NdU2uw
2O5c1HvSKhn51Lyp0ERT9jjf6/RPpdijl5qnQzzPMj4Jo/BeyLqQP5k99jw8esqV
FOmASsZ2YFRxRQI2F68IltTCuTWl70N5qOmwhQ0TeY5UINIzbDrA7eMrD4EOBXqy
mVqmfax8e4B1eTwrEzJYXoIL27ybnlf+jT9gYOXwoikpItkpwmEw5BO0FxFrIbpJ
5Gr/7fD+FxCX+ETuoxBJul6AkzlQTfUF1OdzJYrE7E6YHrNe0wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEE+vctyAZO4bgUnYcz2MXLBamB5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWI3ODI0ZTgtNTNiYS0z
NGNkLWJhMTAtZmM0NmJkODYyYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHRFa0ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAhiA9kkalCLxewCoUkhsMWRFFOxeTS0ylayi/Ddg7QiKC1Tn/Ye6Hr
ztGxLGwQaQXbrKNvFt8vVfNEOh7oJ6ac3rmVvMOoGH6FbZNjVMTC9nI1MFG/BiJE
DO6LIrNS2yPC2kd4QlSkG8K2bbmvNLNSXqx6TB2BmhONPT3f3/Lkan9TITMl/auz
iL8CKeAOmE8hfGKrqHMoaO4d4MTlyS+BYEtkecGBon+JlrsSOboAKcWxWcBCx/nE
KolYM7XPA4b0opXEDpP3hclwHoE7n5aEXXe2nYv/P/O6nA6u+U1dILTZpbW4egP+
HYLpzvoM7w6mLiFkk4915FGsnsPuurBB
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:40:47 2025 by rpki-client