Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/4f097ada-9f5a-31c6-89e9-e080c153edce.roa
File:                     4f097ada-9f5a-31c6-89e9-e080c153edce.roa (raw, json)
Hash identifier:          XO/0rCyVdyam/c2cRMaKhxggPItSO6pY6a74RiUsf7o=
Subject key identifier:   BA:9C:6B:B7:4C:36:C6:BD:B7:11:E3:BF:81:3D:03:3E:A8:77:20:D7
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F43285849DC8FB670C4969B219641F6C0
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/4f097ada-9f5a-31c6-89e9-e080c153edce.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     393398
IP address blocks:        96.47.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b6:70:c4:96:9b:21:96:41:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=e1eb8fa8-43c3-4eff-99df-0a40b18c337c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:45:02:94:9c:fe:9d:3f:72:1e:40:f5:09:c6:
                    63:53:bd:6b:17:1c:e0:84:da:3e:97:59:69:27:ca:
                    9b:8c:41:6f:9d:5e:e6:16:5e:f9:0f:26:d0:6f:2b:
                    a3:7a:e2:8e:a8:8a:b5:6c:57:bb:0c:ed:21:5d:a8:
                    c4:6b:19:ed:39:61:95:0d:e0:3e:6b:4d:a9:42:b2:
                    fd:62:80:d4:c1:56:06:dc:4c:0f:d6:b0:c3:c1:e9:
                    4c:dd:1b:a3:97:16:bc:1e:78:ca:6c:49:c8:95:39:
                    b6:85:db:99:56:40:a3:97:c2:7f:7a:b4:5e:c3:19:
                    e9:e1:00:f0:82:64:1c:ef:0d:b7:d1:d0:c6:29:6e:
                    c1:5c:b5:d1:ae:8b:6f:63:c3:1a:2c:e8:36:79:ef:
                    14:ef:e6:a4:57:d6:3b:a6:43:bd:2a:34:53:0c:15:
                    d8:21:41:46:1d:06:2a:a4:71:5a:89:6b:1a:d5:aa:
                    3b:5a:b3:03:34:66:4f:5a:11:06:f3:b8:b5:a6:0b:
                    a7:23:57:00:07:71:b7:f2:cf:c5:d7:34:68:6c:7d:
                    be:28:1b:57:c2:f0:ab:69:21:c1:10:62:42:87:f0:
                    9e:2e:ad:31:0b:1d:da:7e:1f:26:b8:0e:8a:3c:de:
                    85:18:e4:ba:61:e3:a2:bb:06:a5:be:4a:1d:40:f9:
                    b7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9C:6B:B7:4C:36:C6:BD:B7:11:E3:BF:81:3D:03:3E:A8:77:20:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/4f097ada-9f5a-31c6-89e9-e080c153edce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:16:26:9f:00:cb:f0:04:08:a1:eb:f9:1a:83:98:3d:3c:16:
         fc:50:9f:a6:f3:b7:e1:8c:08:c2:6c:bd:18:a0:0f:f9:c3:35:
         61:1f:cf:a4:14:e1:eb:f5:80:56:60:e8:28:88:03:fa:59:43:
         9c:b7:de:64:28:6d:a9:61:fc:58:30:da:78:2d:16:c0:4e:ab:
         d2:c3:3e:13:e0:e9:6f:c4:25:4e:1c:ee:28:e2:3c:1e:37:3a:
         0d:e4:ba:2f:38:94:66:36:84:c7:85:41:39:7a:db:17:c7:c2:
         96:16:3f:be:3d:3b:eb:51:bf:04:ae:42:ba:75:15:91:92:2d:
         af:69:a4:b8:70:5f:71:3a:6d:89:bc:f0:a1:22:1f:3c:2e:87:
         7a:1d:2d:c8:17:1d:f2:15:bc:1b:ac:d8:7d:8a:38:b4:01:58:
         7a:28:77:04:21:f2:26:5a:a3:2e:2e:b6:46:15:08:c9:50:d1:
         c9:6f:b4:37:ce:85:14:68:17:53:3a:6b:fb:96:54:77:4b:3c:
         d4:f2:77:92:dc:a2:6d:21:cb:34:3d:c8:55:2f:b2:2c:51:54:
         31:43:9d:c9:e9:1b:29:72:06:ce:da:c3:87:1a:45:d8:5a:76:
         4c:79:e8:fc:3f:00:33:b0:8e:84:d6:5e:ee:f4:28:c9:61:69:
         f8:ed:35:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7ZwxJabIZZB9sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz
ZmU0MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
ZTFlYjhmYTgtNDNjMy00ZWZmLTk5ZGYtMGE0MGIxOGMzMzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEUClJz+nT9yHkD1CcZjU71rFxzghNo+l1lp
J8qbjEFvnV7mFl75DybQbyujeuKOqIq1bFe7DO0hXajEaxntOWGVDeA+a02pQrL9
YoDUwVYG3EwP1rDDwelM3Rujlxa8HnjKbEnIlTm2hduZVkCjl8J/erRewxnp4QDw
gmQc7w230dDGKW7BXLXRrotvY8MaLOg2ee8U7+akV9Y7pkO9KjRTDBXYIUFGHQYq
pHFaiWsa1ao7WrMDNGZPWhEG87i1pgunI1cAB3G38s/F1zRobH2+KBtXwvCraSHB
EGJCh/CeLq0xCx3afh8muA6KPN6FGOS6YeOiuwalvkodQPm34QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqca7dMNsa9txHjv4E9Az6odyDXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3
OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvNGYwOTdhZGEtOWY1YS0z
MWM2LTg5ZTktZTA4MGMxNTNlZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw
MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0
M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm
NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcWJp8Ay/AECKHr+RqDmD08FvxQn6bzt+GMCMJsvRigD/nDNWEfz6QU
4ev1gFZg6CiIA/pZQ5y33mQobalh/Fgw2ngtFsBOq9LDPhPg6W/EJU4c7ijiPB43
Og3kui84lGY2hMeFQTl62xfHwpYWP749O+tRvwSuQrp1FZGSLa9ppLhwX3E6bYm8
8KEiHzwuh3odLcgXHfIVvBus2H2KOLQBWHoodwQh8iZaoy4utkYVCMlQ0clvtDfO
hRRoF1M6a/uWVHdLPNTyd5Lcom0hyzQ9yFUvsixRVDFDncnpGylyBs7aw4caRdha
dkx56Pw/ADOwjoTWXu70KMlhafjtNQg=
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:26:58 2025 by rpki-client