Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da6497e9-9c39-3b19-bd1d-9272500d732b.roa
File:                     da6497e9-9c39-3b19-bd1d-9272500d732b.roa (raw, json)
Hash identifier:          kWW9ILu9PdHLgd6+0jSiOyV+UVxuGuGJGN186Z4TUMc=
Subject key identifier:   D0:63:71:C7:6C:67:9F:05:EA:28:98:AB:36:82:9A:4D:20:CA:23:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE56C46B5A0F22AC5D0B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da6497e9-9c39-3b19-bd1d-9272500d732b.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        68.41.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:56:c4:6b:5a:0f:22:ac:5d:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=651e929c-2b49-4a28-b68a-bb86ac1bf3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:79:ab:30:5c:aa:e0:91:1f:91:ad:48:d4:
                    bf:17:32:da:4d:ec:ee:83:ba:9f:a1:5a:7f:ef:bc:
                    aa:2d:1e:96:4e:ad:cd:21:d8:af:49:f5:2b:77:8b:
                    4c:ed:a1:6b:18:d4:cc:32:00:c8:07:4e:9c:ad:b7:
                    2d:da:bd:56:2a:89:e9:93:58:f5:86:70:e8:d1:8e:
                    8c:08:4c:52:c5:20:ce:28:59:54:bd:c7:e0:56:8d:
                    c1:0a:d2:7d:c6:fc:a0:ad:37:66:db:a3:e0:bb:6c:
                    f5:5e:13:7d:3e:83:04:85:36:da:91:eb:b3:88:a8:
                    6d:26:2a:84:75:6e:4f:c7:1d:06:9f:e5:b7:3b:87:
                    ef:0e:3e:dc:2a:7f:4e:dd:c4:30:4f:5a:11:44:db:
                    6f:ac:c1:af:f3:96:aa:15:2e:15:5f:2c:f8:51:93:
                    34:b6:58:29:b5:1f:89:d1:0a:7b:57:25:96:5b:70:
                    ae:1f:bb:04:69:62:fc:29:e4:84:1d:74:34:86:91:
                    39:13:7c:4a:57:57:a3:c6:75:72:1e:26:ce:bb:23:
                    fb:a1:11:50:04:8b:1c:ea:32:e8:da:64:95:b9:72:
                    25:6c:6b:76:97:ce:94:05:23:63:03:7e:7e:f5:0c:
                    30:19:cb:f9:a6:2b:51:32:cf:94:27:be:c0:62:1f:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:71:C7:6C:67:9F:05:EA:28:98:AB:36:82:9A:4D:20:CA:23:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da6497e9-9c39-3b19-bd1d-9272500d732b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.41.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:40:18:6b:f4:8b:b2:98:b8:89:f9:3f:7e:92:1a:b0:f6:af:
         c7:d2:5f:67:b5:81:f2:16:a1:c6:cf:61:d0:85:8e:92:de:1e:
         9c:67:9e:b7:d2:1e:b6:fa:4e:b9:0e:20:d4:97:2f:4a:04:13:
         ab:89:f4:42:30:ca:ef:7a:53:bc:7c:5a:ec:c2:af:f2:b3:4a:
         88:5f:50:fc:a7:0b:d1:56:79:97:9f:bd:38:85:e4:3e:c7:a7:
         db:8f:40:9f:9c:fe:2f:b4:ca:69:72:4d:75:d6:1f:5a:a6:e7:
         c2:9a:ca:f3:87:72:fa:99:2b:fa:1d:ba:f6:01:b6:2d:9f:56:
         84:c5:7c:43:ba:15:2f:f5:b6:2e:50:c6:97:44:c1:68:78:25:
         20:0a:08:1e:af:5f:36:56:70:bd:66:18:be:fe:07:e0:2e:33:
         0f:ed:22:fd:6e:4f:c9:5f:19:be:81:3e:c8:81:f1:c9:96:2a:
         3b:49:4f:3e:18:ee:ba:b8:b0:cf:25:cc:5a:c1:63:4b:f7:1c:
         65:50:a0:10:6e:91:2c:38:aa:9a:86:fd:d3:49:59:52:ac:dd:
         83:dc:43:05:8d:ab:b4:d6:7e:b6:96:d0:d7:b5:d4:21:2f:9a:
         a7:5e:ef:b8:7a:b1:9b:b6:bb:bc:42:00:53:9f:01:75:b9:9e:
         e3:e0:84:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07lbEa1oPIqxdCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NjUxZTkyOWMtMmI0OS00YTI4LWI2OGEtYmI4NmFjMWJmM2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt55qzBcquCRH5GtSNS/FzLaTezug7qfoVp/
77yqLR6WTq3NIdivSfUrd4tM7aFrGNTMMgDIB06crbct2r1WKonpk1j1hnDo0Y6M
CExSxSDOKFlUvcfgVo3BCtJ9xvygrTdm26Pgu2z1XhN9PoMEhTbakeuziKhtJiqE
dW5Pxx0Gn+W3O4fvDj7cKn9O3cQwT1oRRNtvrMGv85aqFS4VXyz4UZM0tlgptR+J
0Qp7VyWWW3CuH7sEaWL8KeSEHXQ0hpE5E3xKV1ejxnVyHibOuyP7oRFQBIsc6jLo
2mSVuXIlbGt2l86UBSNjA35+9QwwGcv5pitRMs+UJ77AYh+PjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNBjccdsZ58F6iiYqzaCmk0gyiNlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE2NDk3ZTktOWMzOS0z
YjE5LWJkMWQtOTI3MjUwMGQ3MzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCm4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtAGGv0i7KYuIn5P36SGrD2r8fSX2e1gfIWocbPYdCFjpLeHpxnnrfS
Hrb6TrkOINSXL0oEE6uJ9EIwyu96U7x8WuzCr/KzSohfUPynC9FWeZefvTiF5D7H
p9uPQJ+c/i+0ymlyTXXWH1qm58KayvOHcvqZK/oduvYBti2fVoTFfEO6FS/1ti5Q
xpdEwWh4JSAKCB6vXzZWcL1mGL7+B+AuMw/tIv1uT8lfGb6BPsiB8cmWKjtJTz4Y
7rq4sM8lzFrBY0v3HGVQoBBukSw4qpqG/dNJWVKs3YPcQwWNq7TWfraW0Ne11CEv
mqde77h6sZu2u7xCAFOfAXW5nuPghEw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:47 2025 by rpki-client