Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a990554c-0353-35dd-bd4f-04a2f5f8a775.roa
File:                     a990554c-0353-35dd-bd4f-04a2f5f8a775.roa (raw, json)
Hash identifier:          iUvTdVwKxlgXTCUx4eBhR1lMjLXChgkbt/cJwKcml1I=
Subject key identifier:   65:F1:11:B2:96:E0:E0:5E:0F:E8:77:98:63:93:86:87:58:C9:64:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE5F63DE06D14D7583E580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a990554c-0353-35dd-bd4f-04a2f5f8a775.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.48.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:5f:63:de:06:d1:4d:75:83:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=f07e6d01-8e8c-4809-901e-ac3279de6729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c8:72:2e:80:6a:e2:41:e8:0b:00:5f:fe:a7:
                    5e:27:f6:97:f7:e6:bf:4c:a1:7c:84:20:e0:b4:95:
                    84:3e:e0:9c:b1:21:85:c5:d9:d8:e0:3a:8b:fc:fe:
                    1e:99:48:72:16:e5:05:22:7b:3a:32:17:0a:ed:46:
                    1d:25:7f:4a:30:e9:72:e0:f5:97:36:ca:db:74:f3:
                    0a:e3:c3:89:97:9e:38:5d:ac:1d:eb:68:3d:40:7b:
                    22:1f:8a:eb:aa:35:97:8c:09:7e:a6:00:49:e7:c5:
                    61:13:b9:0f:4a:4b:12:eb:18:f9:50:a0:24:73:91:
                    00:74:f1:bc:69:b3:52:25:80:cb:f7:f2:aa:2d:23:
                    08:36:b0:17:85:f0:b7:cf:46:22:1d:1a:bc:a4:c7:
                    d9:30:c0:2b:0b:94:19:1a:41:eb:81:b8:20:13:17:
                    73:91:19:25:04:4b:c1:23:b0:99:e5:ac:20:c3:a8:
                    67:28:f5:f9:af:87:9a:03:e4:b0:5d:c3:3c:b5:f1:
                    3c:e8:15:4e:9e:5b:7a:83:2a:cc:56:66:1b:1c:24:
                    e8:f8:75:ab:ea:41:64:7a:97:8f:9b:55:91:4a:27:
                    d0:16:1b:67:c4:d7:c3:b3:23:da:cc:c2:24:f7:09:
                    fd:bb:34:68:4a:f1:53:8c:c2:0a:f2:ae:69:d4:4b:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F1:11:B2:96:E0:E0:5E:0F:E8:77:98:63:93:86:87:58:C9:64:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a990554c-0353-35dd-bd4f-04a2f5f8a775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.48.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5d:65:81:58:80:4c:ff:cf:2c:39:1e:1d:c8:d8:c1:aa:26:
         f9:63:0c:40:9c:86:5a:b7:2f:88:99:0a:d9:94:80:5c:db:6f:
         79:cb:30:d6:e7:a4:ca:b1:64:25:9e:c0:4f:0a:1f:60:7e:02:
         96:d4:61:6a:19:fe:8e:65:1a:5c:57:c3:90:a4:62:5c:c1:9d:
         7a:24:0a:09:5b:63:df:04:e0:d1:56:2a:2c:dc:9f:e9:39:b3:
         50:c3:fe:aa:4c:e4:6b:bb:a3:08:ac:28:e2:9c:8b:4e:2c:e6:
         f1:e7:c7:ea:1d:10:0b:3e:b2:7c:a9:6c:b4:27:e9:45:bc:3c:
         6e:be:6e:c8:e7:a3:3c:67:c8:ab:f2:f3:cf:ee:6c:a6:45:1f:
         de:73:0a:39:60:12:7a:d0:29:a3:d2:12:83:93:10:d4:cc:19:
         82:ed:e3:ff:93:a0:5a:9c:5a:34:43:c9:49:e8:9e:56:30:e2:
         ca:94:57:e5:28:a4:8d:cf:96:a3:40:59:50:71:57:ad:ed:08:
         09:d9:73:5e:be:62:9d:bf:bc:a4:3f:1a:da:a0:6e:85:63:e5:
         30:58:aa:40:ba:21:e9:54:93:90:10:fc:77:e7:3b:11:89:90:
         9c:dd:5d:97:13:2e:70:5d:aa:23:d6:6d:2e:8b:92:69:cd:d6:
         36:5e:9c:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07l9j3gbRTXWD5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZjA3ZTZkMDEtOGU4Yy00ODA5LTkwMWUtYWMzMjc5ZGU2NzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8hyLoBq4kHoCwBf/qdeJ/aX9+a/TKF8hCDg
tJWEPuCcsSGFxdnY4DqL/P4emUhyFuUFIns6MhcK7UYdJX9KMOly4PWXNsrbdPMK
48OJl544Xawd62g9QHsiH4rrqjWXjAl+pgBJ58VhE7kPSksS6xj5UKAkc5EAdPG8
abNSJYDL9/KqLSMINrAXhfC3z0YiHRq8pMfZMMArC5QZGkHrgbggExdzkRklBEvB
I7CZ5awgw6hnKPX5r4eaA+SwXcM8tfE86BVOnlt6gyrMVmYbHCTo+HWr6kFkepeP
m1WRSifQFhtnxNfDsyPazMIk9wn9uzRoSvFTjMIK8q5p1EtFxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGXxEbKW4OBeD+h3mGOThodYyWQsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk5MDU1NGMtMDM1My0z
NWRkLWJkNGYtMDRhMmY1ZjhhNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDDEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFdZYFYgEz/zyw5Hh3I2MGqJvljDECchlq3L4iZCtmUgFzbb3nLMNbn
pMqxZCWewE8KH2B+ApbUYWoZ/o5lGlxXw5CkYlzBnXokCglbY98E4NFWKizcn+k5
s1DD/qpM5Gu7owisKOKci04s5vHnx+odEAs+snypbLQn6UW8PG6+bsjnozxnyKvy
88/ubKZFH95zCjlgEnrQKaPSEoOTENTMGYLt4/+ToFqcWjRDyUnonlYw4sqUV+Uo
pI3PlqNAWVBxV63tCAnZc16+Yp2/vKQ/GtqgboVj5TBYqkC6IelUk5AQ/HfnOxGJ
kJzdXZcTLnBdqiPWbS6LkmnN1jZenM0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:49:38 2025 by rpki-client