Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db28428c-40ee-30b3-8792-af59b8f78d5d.roa
File:                     db28428c-40ee-30b3-8792-af59b8f78d5d.roa (raw, json)
Hash identifier:          i5oB/Zvm1jZEExqvCouWgSY/SjlmhKhzuNo+1wxD6fg=
Subject key identifier:   FE:1F:E5:E0:27:D4:BA:D1:15:95:63:28:CC:34:E5:65:7B:AF:93:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858498E6491AAFB99E5FC87B26400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db28428c-40ee-30b3-8792-af59b8f78d5d.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     33661
IP address blocks:        69.242.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:91:aa:fb:99:e5:fc:87:b2:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=9550414e-9309-4f26-9715-e86eb120d93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:07:67:e0:fd:22:ab:f4:72:d6:8c:f8:ff:
                    86:49:1c:0c:50:96:63:04:d6:a7:fa:e6:52:6f:12:
                    46:4d:10:46:52:00:11:ca:ba:7f:9c:23:ac:b9:df:
                    78:99:f5:0a:f2:01:75:67:dc:28:a2:40:be:34:c5:
                    f4:19:2e:cd:05:b1:df:df:a6:21:06:e3:7a:6a:6f:
                    f5:d2:e0:9c:4e:59:bd:22:ac:76:8e:62:e5:91:e2:
                    7d:25:4c:49:a2:dd:a5:b0:94:d1:8c:09:73:cf:ee:
                    1d:c9:21:e3:f6:31:19:82:a3:2f:e7:c2:8d:1b:75:
                    62:83:28:7d:75:b7:f3:30:f6:69:c3:ff:44:e8:4f:
                    dd:b5:87:47:e6:74:b5:c2:e4:6e:37:14:29:de:f8:
                    45:6f:0f:16:9f:41:5d:b0:fe:df:da:b0:dc:25:35:
                    ff:4f:3e:78:8a:83:de:ae:fa:8c:bc:f0:02:35:cb:
                    df:de:b4:47:72:58:5b:4a:a7:2a:4c:62:bb:5e:51:
                    9d:84:ba:51:e3:f0:00:a7:84:06:fc:03:f3:36:a8:
                    2b:84:c2:00:e6:31:69:84:49:24:ea:06:cf:8e:9a:
                    0a:79:37:50:1f:68:2b:1d:e9:8b:5a:5c:26:af:d8:
                    e4:a5:98:96:c5:c1:0e:0f:1e:5d:d0:0e:11:10:e5:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1F:E5:E0:27:D4:BA:D1:15:95:63:28:CC:34:E5:65:7B:AF:93:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db28428c-40ee-30b3-8792-af59b8f78d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.242.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:93:8e:21:bc:94:88:f3:32:9d:c1:ed:fd:18:12:4b:c2:10:
         f4:c9:95:a2:da:91:77:12:ed:88:10:d4:fb:db:e4:cc:2c:14:
         7b:ec:4f:12:61:5f:02:46:a0:97:0e:4c:f2:30:71:24:38:7b:
         9f:31:27:63:d7:ab:0f:da:c0:fc:0a:04:c0:23:80:42:b9:99:
         78:25:7e:5e:93:5f:34:9f:77:3a:f4:29:05:fc:3f:07:6e:c7:
         b3:ca:7f:c4:f4:98:83:2c:de:a3:40:53:4e:49:43:c7:f1:88:
         35:06:40:03:63:d8:db:2b:66:c4:bd:96:d3:20:9e:0f:5c:86:
         3d:99:3a:33:41:00:26:ef:be:a3:32:df:d8:95:bd:5f:f1:5a:
         7c:b5:14:f6:7d:2a:3d:99:9d:c1:c2:12:6b:a6:25:71:6e:51:
         60:ac:b0:7f:dd:3f:92:55:63:6b:94:40:e9:de:2d:dc:42:56:
         2a:f6:5e:e0:28:8b:c7:54:f3:42:e9:e2:3d:09:56:10:96:f0:
         0c:86:65:34:5c:15:bf:53:2d:85:41:f3:38:42:f1:66:d2:63:
         2b:2e:cb:b0:2f:a6:5f:98:1c:db:fc:11:45:6e:38:18:65:53:
         17:01:25:a5:d4:1f:ff:fd:85:1b:4a:de:cf:f8:a9:3e:7a:25:
         ef:48:e6:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJGq+5nl/IeyZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk
OTU1MDQxNGUtOTMwOS00ZjI2LTk3MTUtZTg2ZWIxMjBkOTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhIHZ+D9Iqv0ctaM+P+GSRwMUJZjBNan+uZS
bxJGTRBGUgARyrp/nCOsud94mfUK8gF1Z9wookC+NMX0GS7NBbHf36YhBuN6am/1
0uCcTlm9Iqx2jmLlkeJ9JUxJot2lsJTRjAlzz+4dySHj9jEZgqMv58KNG3Vigyh9
dbfzMPZpw/9E6E/dtYdH5nS1wuRuNxQp3vhFbw8Wn0FdsP7f2rDcJTX/Tz54ioPe
rvqMvPACNcvf3rRHclhbSqcqTGK7XlGdhLpR4/AAp4QG/APzNqgrhMIA5jFphEkk
6gbPjpoKeTdQH2grHemLWlwmr9jkpZiWxcEODx5d0A4REOU5PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4f5eAn1LrRFZVjKMw05WV7r5M3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGIyODQyOGMtNDBlZS0z
MGIzLTg3OTItYWY1OWI4Zjc4ZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERfLwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMCTjiG8lIjzMp3B7f0YEkvCEPTJlaLakXcS7YgQ1Pvb5MwsFHvsTxJh
XwJGoJcOTPIwcSQ4e58xJ2PXqw/awPwKBMAjgEK5mXglfl6TXzSfdzr0KQX8Pwdu
x7PKf8T0mIMs3qNAU05JQ8fxiDUGQANj2NsrZsS9ltMgng9chj2ZOjNBACbvvqMy
39iVvV/xWny1FPZ9Kj2ZncHCEmumJXFuUWCssH/dP5JVY2uUQOneLdxCVir2XuAo
i8dU80Lp4j0JVhCW8AyGZTRcFb9TLYVB8zhC8WbSYysuy7Avpl+YHNv8EUVuOBhl
UxcBJaXUH//9hRtK3s/4qT56Je9I5q8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:45:51 2025 by rpki-client