Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f71b400-38e3-3931-a436-bfa122952b2e.roa
File:                     2f71b400-38e3-3931-a436-bfa122952b2e.roa (raw, json)
Hash identifier:          zWUmXqXhlbKJ4EvwnuJqmYsB2356bwLg//t4EmA7pcY=
Subject key identifier:   12:74:23:04:22:57:29:E6:98:11:90:CE:EB:B6:CC:DB:81:20:0A:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A7086098AACDA344DCD1B47C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f71b400-38e3-3931-a436-bfa122952b2e.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     7922
IP address blocks:        96.99.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:09:8a:ac:da:34:4d:cd:1b:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=6207b580-edfc-4703-82ec-51d292160fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:6a:e2:83:a1:30:c4:e2:1f:9f:b4:67:f4:
                    57:63:c3:52:1d:bb:e6:a7:0d:03:7e:0d:60:a8:51:
                    10:c8:ce:88:a0:98:93:19:d1:55:f1:03:1e:85:ea:
                    19:56:0a:bd:78:0d:8a:d2:b9:8b:5e:aa:cf:4c:0c:
                    22:9c:4a:8e:7d:90:bf:b5:79:e7:25:8f:bb:84:39:
                    30:35:d4:99:8b:cb:5d:fc:c9:75:af:af:a3:7c:59:
                    54:64:86:e4:a0:f0:7c:34:59:16:42:22:56:fb:4c:
                    42:32:4b:06:08:24:fd:bf:cb:cb:4e:d4:f0:8e:78:
                    03:e5:e0:1b:31:22:18:06:b2:54:33:ba:21:d8:13:
                    59:e5:5d:90:29:56:4c:16:91:78:98:19:c2:b1:e7:
                    49:93:25:79:9e:a0:65:b8:97:7d:72:6e:d5:ca:ab:
                    0a:ff:34:2e:b2:76:24:fd:45:94:60:8d:06:5a:f8:
                    15:50:c6:84:27:40:64:5b:50:78:a2:a2:d1:cb:bc:
                    cf:15:87:9a:73:10:65:be:5f:02:f9:57:33:7a:27:
                    ab:0f:6a:f5:f6:d5:3d:d5:7a:6d:b1:f7:d6:6a:c4:
                    91:c1:d2:53:bf:64:e1:08:64:7e:f4:13:5e:66:15:
                    5f:92:c9:aa:10:25:99:5e:a5:7d:13:8a:f0:05:a7:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:74:23:04:22:57:29:E6:98:11:90:CE:EB:B6:CC:DB:81:20:0A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f71b400-38e3-3931-a436-bfa122952b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.99.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:1b:de:c6:40:ff:4f:61:c2:f1:fe:9a:35:c2:96:07:ef:98:
         4f:d2:8f:0b:ac:a8:b5:86:d0:86:b0:25:ac:58:e8:f7:48:33:
         01:cb:99:f1:27:92:60:84:51:fe:8a:d9:4b:b4:62:6c:ae:d4:
         8f:c5:8c:d6:1a:69:2f:0a:25:6f:39:14:7a:b1:12:bf:2c:21:
         61:af:2b:90:90:07:70:91:f4:d6:e2:cf:41:db:05:e9:94:af:
         c2:23:e8:0a:8e:2b:77:02:39:b6:df:da:9e:38:bd:43:9a:12:
         0a:47:1c:dc:af:3c:c6:f8:e8:27:e2:f5:68:4d:d9:1b:d6:f8:
         2d:d3:13:e0:a9:2d:e7:7f:03:0b:7b:2e:07:f9:44:7c:90:bb:
         57:2b:a8:db:a6:15:fe:f1:87:83:47:05:94:0f:d6:3b:f8:71:
         56:09:63:d0:ab:27:99:88:0b:58:f8:1c:c9:e0:2b:0e:1d:07:
         b2:67:5c:cd:a2:ad:ed:41:8b:37:79:23:3f:2b:b9:76:cd:1f:
         32:2a:58:14:93:94:83:05:fc:1d:b8:c6:a6:09:13:17:23:ac:
         6f:b0:19:6c:1c:39:73:e7:14:3d:6f:27:47:fb:1a:11:bb:7a:
         1b:00:7d:86:59:0b:e6:c4:3d:02:c9:a4:01:db:c7:00:e2:bd:
         86:79:63:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhgmKrNo0Tc0bR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
NjIwN2I1ODAtZWRmYy00NzAzLTgyZWMtNTFkMjkyMTYwZmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0Jq4oOhMMTiH5+0Z/RXY8NSHbvmpw0Dfg1g
qFEQyM6IoJiTGdFV8QMeheoZVgq9eA2K0rmLXqrPTAwinEqOfZC/tXnnJY+7hDkw
NdSZi8td/Ml1r6+jfFlUZIbkoPB8NFkWQiJW+0xCMksGCCT9v8vLTtTwjngD5eAb
MSIYBrJUM7oh2BNZ5V2QKVZMFpF4mBnCsedJkyV5nqBluJd9cm7VyqsK/zQusnYk
/UWUYI0GWvgVUMaEJ0BkW1B4oqLRy7zPFYeacxBlvl8C+VczeierD2r19tU91Xpt
sffWasSRwdJTv2ThCGR+9BNeZhVfksmqECWZXqV9E4rwBacvXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJ0IwQiVynmmBGQzuu2zNuBIArkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmY3MWI0MDAtMzhlMy0z
OTMxLWE0MzYtYmZhMTIyOTUyYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYGPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALcb3sZA/09hwvH+mjXClgfvmE/SjwusqLWG0IawJaxY6PdIMwHLmfEn
kmCEUf6K2Uu0Ymyu1I/FjNYaaS8KJW85FHqxEr8sIWGvK5CQB3CR9Nbiz0HbBemU
r8Ij6AqOK3cCObbf2p44vUOaEgpHHNyvPMb46Cfi9WhN2RvW+C3TE+CpLed/Awt7
Lgf5RHyQu1crqNumFf7xh4NHBZQP1jv4cVYJY9CrJ5mIC1j4HMngKw4dB7JnXM2i
re1Bizd5Iz8ruXbNHzIqWBSTlIMF/B24xqYJExcjrG+wGWwcOXPnFD1vJ0f7GhG7
ehsAfYZZC+bEPQLJpAHbxwDivYZ5Y54=
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:26:07 2025 by rpki-client