Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17180a98-8d27-3274-b5de-e6c7dfa71bfc.roa
File:                     17180a98-8d27-3274-b5de-e6c7dfa71bfc.roa (raw, json)
Hash identifier:          OgOWUIAwRU6BZRBjdfAdOdpZwQBAE/MxzQN86DJdC/Q=
Subject key identifier:   6A:6D:25:C4:81:21:2B:39:C4:B0:77:23:9A:DB:EB:2D:1D:04:B8:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC59784B1ABEA081FF2E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17180a98-8d27-3274-b5de-e6c7dfa71bfc.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        74.93.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:59:78:4b:1a:be:a0:81:ff:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=2f63395b-d424-4389-bfff-0a4544f6a8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:6a:13:1e:89:07:59:42:ff:aa:4c:b4:4b:
                    b7:2e:3e:a3:76:5d:b6:02:38:a3:b5:34:97:2d:62:
                    fb:6e:16:2d:57:72:d8:79:b7:3f:c1:65:63:29:b8:
                    58:f4:c5:c8:e1:47:57:ec:57:5b:b3:e0:a8:be:52:
                    c7:1c:b9:8a:bf:f1:d7:a4:c6:dd:83:14:23:6b:14:
                    90:34:b9:06:97:25:c2:15:67:ad:07:f6:19:94:96:
                    ee:e1:65:08:b0:1c:8e:a0:51:86:54:dd:67:5d:7a:
                    f3:60:04:b4:c3:d2:e3:0f:e1:b4:b5:00:cf:f5:cd:
                    95:e1:fa:d2:c3:fa:fa:04:ff:a9:fd:94:27:50:7a:
                    7b:75:f9:b6:74:24:7d:2b:e2:e2:05:1f:1e:5d:1a:
                    1a:e4:98:aa:5d:a9:7d:6e:34:45:dd:28:86:13:3c:
                    b8:2d:54:5d:4a:3e:9d:e3:d1:f4:6c:ac:97:66:21:
                    d7:16:30:68:e7:bd:e3:f9:43:a8:ff:87:09:ec:9d:
                    0b:c9:89:4b:20:be:43:fb:ab:b1:99:86:2b:4f:0a:
                    b3:53:68:d9:a0:20:c5:20:f8:da:62:a0:9d:19:6a:
                    cd:ae:9e:d5:22:d2:c5:5f:bd:54:c3:4c:ba:4e:1b:
                    17:63:38:d4:6b:80:1c:d0:b2:ff:83:84:0c:35:45:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6D:25:C4:81:21:2B:39:C4:B0:77:23:9A:DB:EB:2D:1D:04:B8:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17180a98-8d27-3274-b5de-e6c7dfa71bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.93.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:af:bd:ea:b8:a9:74:4f:ef:79:59:fb:e7:d2:dd:e6:23:29:
         1a:0d:6e:d2:08:be:cc:da:9c:2c:e0:b8:b9:e3:0a:32:a2:53:
         d0:0a:3e:e2:db:09:8c:07:e3:05:05:45:8c:01:f4:96:98:b2:
         9f:3b:4a:9f:da:b4:6e:97:fb:59:6e:81:c0:e9:b9:1a:56:02:
         4e:fa:1b:40:0b:62:3f:84:4b:72:01:b0:56:7d:36:23:f7:29:
         78:22:08:83:73:c9:12:07:7f:db:2d:94:f3:eb:cc:7e:7d:d6:
         d0:19:8a:d6:17:b3:b4:8a:50:b6:24:b2:07:b0:60:13:6e:38:
         c9:71:c6:5d:a0:4e:69:58:6c:27:c9:62:b0:77:e6:b3:ff:25:
         ca:56:cf:ad:f3:a7:5e:e5:f2:31:35:92:63:f6:7a:26:7d:08:
         81:69:ae:03:2f:73:fb:10:52:5f:ff:a3:84:0e:a4:c0:22:bb:
         28:ed:ce:3b:5a:f2:9d:95:46:9a:ff:93:65:0a:ef:0d:33:9d:
         60:d2:81:73:3f:30:b2:47:68:b6:d2:4a:3f:5d:50:fa:da:a9:
         0d:e8:65:75:90:ef:9f:ee:8b:fe:5a:f9:e0:a8:04:d3:80:ec:
         c0:83:f4:fd:62:bd:3c:67:9a:1d:27:2c:49:60:20:b6:cd:e3:
         5a:47:9c:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/Fl4Sxq+oIH/LgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MmY2MzM5NWItZDQyNC00Mzg5LWJmZmYtMGE0NTQ0ZjZhOGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZRqEx6JB1lC/6pMtEu3Lj6jdl22AjijtTSX
LWL7bhYtV3LYebc/wWVjKbhY9MXI4UdX7Fdbs+CovlLHHLmKv/HXpMbdgxQjaxSQ
NLkGlyXCFWetB/YZlJbu4WUIsByOoFGGVN1nXXrzYAS0w9LjD+G0tQDP9c2V4frS
w/r6BP+p/ZQnUHp7dfm2dCR9K+LiBR8eXRoa5JiqXal9bjRF3SiGEzy4LVRdSj6d
49H0bKyXZiHXFjBo573j+UOo/4cJ7J0LyYlLIL5D+6uxmYYrTwqzU2jZoCDFIPja
YqCdGWrNrp7VItLFX71Uw0y6ThsXYzjUa4Ac0LL/g4QMNUWBgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGptJcSBISs5xLB3I5rb6y0dBLhYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTcxODBhOTgtOGQyNy0z
Mjc0LWI1ZGUtZTZjN2RmYTcxYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSl04MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWvveq4qXRP73lZ++fS3eYjKRoNbtIIvszanCzguLnjCjKiU9AKPuLb
CYwH4wUFRYwB9JaYsp87Sp/atG6X+1lugcDpuRpWAk76G0ALYj+ES3IBsFZ9NiP3
KXgiCINzyRIHf9stlPPrzH591tAZitYXs7SKULYksgewYBNuOMlxxl2gTmlYbCfJ
YrB35rP/JcpWz63zp17l8jE1kmP2eiZ9CIFprgMvc/sQUl//o4QOpMAiuyjtzjta
8p2VRpr/k2UK7w0znWDSgXM/MLJHaLbSSj9dUPraqQ3oZXWQ75/ui/5a+eCoBNOA
7MCD9P1ivTxnmh0nLElgILbN41pHnCQ=
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:04 2025 by rpki-client