Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8313e29-70ab-3ac1-afe1-0c8bacddf72e.roa
File:                     b8313e29-70ab-3ac1-afe1-0c8bacddf72e.roa (raw, json)
Hash identifier:          GCaPw8rQL+YeKa7lNQMkDkEPOw8iqCsgKUylGrqTGnE=
Subject key identifier:   A8:4B:49:13:09:E6:69:6F:0D:5D:10:E8:9C:14:91:0C:30:33:CA:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE5757D9DEB02101A56C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8313e29-70ab-3ac1-afe1-0c8bacddf72e.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.41.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:57:57:d9:de:b0:21:01:a5:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9b1b7db9-0858-42ed-a371-10244172c513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:be:4f:b7:f5:80:b0:8f:d6:cb:e9:53:1f:
                    21:37:1c:4f:6a:4b:e1:71:4e:37:27:af:a1:8b:84:
                    95:cd:4a:84:1e:c6:65:e5:89:dd:e0:f6:bb:1c:13:
                    b0:f9:e6:89:d6:76:3f:26:be:02:a5:f4:37:b7:e6:
                    9b:0e:e6:32:2d:9e:6d:a9:67:2b:fe:98:de:3e:db:
                    e0:e8:40:2e:bc:2a:bb:08:c0:66:40:29:6f:45:e5:
                    84:c5:ca:f2:cc:df:dc:ed:96:92:0a:db:3d:f3:f5:
                    cc:bc:65:78:5b:dd:f7:a2:2d:df:f7:69:5c:fe:52:
                    7e:29:73:f4:ef:10:ad:f5:23:50:4c:61:db:09:15:
                    49:26:37:0d:46:fb:eb:e9:cc:fe:58:ee:ac:79:68:
                    bb:12:c3:97:59:0e:09:af:a9:e9:81:86:2e:e0:ea:
                    6e:89:76:82:ab:c5:fc:1c:91:f7:27:c7:95:11:d2:
                    96:aa:df:b3:3f:a4:08:b9:23:07:d9:93:9a:c5:59:
                    e2:5c:f7:2f:6a:b4:8b:dd:70:94:22:44:9a:7b:f5:
                    67:52:78:2a:ad:06:b7:02:fe:d1:16:38:71:e9:ef:
                    97:7e:10:61:01:ae:3a:e8:c9:eb:0b:1a:da:e3:19:
                    00:19:09:31:13:e9:de:32:66:69:3d:a6:22:10:ee:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4B:49:13:09:E6:69:6F:0D:5D:10:E8:9C:14:91:0C:30:33:CA:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8313e29-70ab-3ac1-afe1-0c8bacddf72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.41.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:46:5c:00:ff:5a:b1:cf:49:d2:e1:cd:80:bd:ca:22:df:
         7f:e6:c2:34:f3:bb:e9:a3:d9:21:f3:84:68:a4:19:d6:79:da:
         0b:f0:ad:dc:c9:e0:41:09:cc:fb:6d:29:82:ef:68:01:1c:59:
         2b:cb:93:73:e0:16:b7:12:bc:83:66:48:73:4f:7b:5c:ba:99:
         b3:62:3f:a6:3e:7f:b8:aa:63:db:31:db:f3:73:1f:36:55:c1:
         95:e0:fb:ae:87:c0:49:46:f3:11:cc:8a:e5:83:81:ef:ea:51:
         79:18:f1:c1:b1:0d:56:61:a8:ad:1b:40:82:77:15:c7:5c:79:
         e8:2f:83:82:2c:11:06:e9:2e:64:d3:a3:42:c3:d3:13:55:82:
         fc:10:84:28:9e:d5:24:b0:1b:ca:64:05:75:e1:4d:de:94:74:
         68:00:5a:8f:d1:72:50:5b:ad:ad:36:4c:c9:59:d8:06:d2:32:
         5a:66:e0:d1:33:99:f6:e9:ed:75:9a:7e:cb:8e:65:3d:24:26:
         0d:87:32:bf:3b:ce:3f:da:ff:ab:d2:1b:f4:19:52:b0:72:cc:
         5e:82:96:29:65:8a:bf:8b:b8:fa:ba:16:76:9a:af:0d:49:d4:
         f6:17:99:62:f0:50:e3:ee:8a:1d:59:05:54:9d:31:e4:9e:9a:
         a8:56:47:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07ldX2d6wIQGlbEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
OWIxYjdkYjktMDg1OC00MmVkLWEzNzEtMTAyNDQxNzJjNTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIG+T7f1gLCP1svpUx8hNxxPakvhcU43J6+h
i4SVzUqEHsZl5Ynd4Pa7HBOw+eaJ1nY/Jr4CpfQ3t+abDuYyLZ5tqWcr/pjePtvg
6EAuvCq7CMBmQClvReWExcryzN/c7ZaSCts98/XMvGV4W933oi3f92lc/lJ+KXP0
7xCt9SNQTGHbCRVJJjcNRvvr6cz+WO6seWi7EsOXWQ4Jr6npgYYu4OpuiXaCq8X8
HJH3J8eVEdKWqt+zP6QIuSMH2ZOaxVniXPcvarSL3XCUIkSae/VnUngqrQa3Av7R
Fjhx6e+XfhBhAa466MnrCxra4xkAGQkxE+neMmZpPaYiEO6bvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhLSRMJ5mlvDV0Q6JwUkQwwM8r7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjgzMTNlMjktNzBhYi0z
YWMxLWFmZTEtMGM4YmFjZGRmNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCnsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbhRlwA/1qxz0nS4c2Avcoi33/mwjTzu+mj2SHzhGikGdZ52gvwrdzJ
4EEJzPttKYLvaAEcWSvLk3PgFrcSvINmSHNPe1y6mbNiP6Y+f7iqY9sx2/NzHzZV
wZXg+66HwElG8xHMiuWDge/qUXkY8cGxDVZhqK0bQIJ3Fcdceegvg4IsEQbpLmTT
o0LD0xNVgvwQhCie1SSwG8pkBXXhTd6UdGgAWo/RclBbra02TMlZ2AbSMlpm4NEz
mfbp7XWafsuOZT0kJg2HMr87zj/a/6vSG/QZUrByzF6Clillir+LuPq6Fnaarw1J
1PYXmWLwUOPuih1ZBVSdMeSemqhWRxk=
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:48:39 2025 by rpki-client