Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49026add-252b-31ef-9248-339e1d031c21.roa
File:                     49026add-252b-31ef-9248-339e1d031c21.roa (raw, json)
Hash identifier:          g1/fr7F88OWmyfm/vzyKi/dN00KYhK1GyHADHOTDBvs=
Subject key identifier:   84:D9:C2:76:65:58:3D:E9:9E:DC:A3:83:59:45:57:59:BA:33:44:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC09CB309996D03EED3580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49026add-252b-31ef-9248-339e1d031c21.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        73.62.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:09:cb:30:99:96:d0:3e:ed:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=34cf8ce1-ed03-4186-bf03-239be715f5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:66:00:39:32:e3:f5:3b:71:8d:ef:e5:97:
                    61:1b:fa:30:ef:cf:9f:f5:04:d3:7d:e4:b1:e1:37:
                    00:42:80:52:d4:8a:71:a4:36:a0:c0:fd:6d:16:14:
                    08:53:a7:c1:06:77:e5:ff:bc:98:83:d9:44:67:17:
                    fa:c1:44:7f:36:01:27:63:17:62:47:3d:54:af:0c:
                    a0:b2:10:af:3a:05:9b:b7:c5:20:1b:ba:31:61:01:
                    46:15:b8:da:da:4f:7e:a0:9a:61:9e:26:12:9e:ad:
                    0b:4e:5e:f8:f0:cd:4e:37:22:45:40:25:3e:e1:af:
                    0e:bd:8b:7a:d0:dc:dc:7b:43:e0:7b:b1:db:03:a3:
                    50:5b:bc:a0:09:95:01:55:dd:c4:a9:d6:b0:01:a2:
                    99:85:41:fd:77:4d:5f:3b:ce:78:7e:c3:0d:37:35:
                    03:6c:52:df:e9:df:cc:ec:2d:99:f4:34:36:0a:06:
                    79:18:91:4b:0a:ce:30:5b:bc:0c:ad:c8:81:89:fb:
                    07:f6:d9:a9:49:bc:88:0b:34:00:f2:75:35:b2:93:
                    0d:64:bc:b3:8a:56:47:91:8d:7b:77:b9:83:47:17:
                    e3:e7:1d:15:c6:57:3f:ba:2c:14:45:68:0a:9f:08:
                    7a:39:c8:2e:07:9f:f3:57:6c:a3:79:5a:2b:4f:0d:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D9:C2:76:65:58:3D:E9:9E:DC:A3:83:59:45:57:59:BA:33:44:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49026add-252b-31ef-9248-339e1d031c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.62.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:52:37:1e:84:ef:03:1b:59:37:36:fe:92:2e:59:9f:da:a5:
         1b:e3:67:d7:23:1e:54:fb:b9:83:e0:dd:d8:e2:8b:81:2f:69:
         d6:44:ae:c5:bb:d9:ea:1b:cd:f1:ad:81:6a:a8:aa:4a:cd:c7:
         01:b7:cd:ac:19:48:18:fd:90:2c:bb:d6:86:96:f9:90:5c:e7:
         40:04:6d:a0:bb:ca:b4:a0:2e:8f:3d:3f:d8:2a:9b:bb:fc:b1:
         2b:bb:95:90:6b:9d:dd:3f:47:39:5c:c5:db:bd:cf:e3:9e:7d:
         8a:9a:5f:6c:46:3d:23:f0:fc:57:37:42:04:6b:7d:6f:91:31:
         3b:a2:22:bb:5f:6c:08:f0:a4:52:37:7f:5b:1b:1e:dc:90:bb:
         f0:be:df:dc:d3:eb:24:04:20:b6:1a:cd:3a:ee:09:a9:e7:d6:
         bf:fe:08:36:9d:03:e8:6d:71:00:c7:6e:fa:7f:2c:6b:67:b1:
         08:bc:98:bc:0a:a2:49:c3:ca:4d:96:54:3d:2e:d6:e3:2e:72:
         95:a5:7d:1f:54:fa:75:fa:fb:27:26:f0:63:b1:48:fe:cd:e1:
         ec:a9:1d:f2:03:0c:a5:8b:4d:ec:bc:52:6c:43:a4:4e:09:42:
         d6:2c:aa:7e:e4:e8:07:eb:4d:c6:79:79:49:6c:3c:c2:bf:75:
         c7:13:3d:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/AnLMJmW0D7tNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MzRjZjhjZTEtZWQwMy00MTg2LWJmMDMtMjM5YmU3MTVmNWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxhmADky4/U7cY3v5ZdhG/ow78+f9QTTfeSx
4TcAQoBS1IpxpDagwP1tFhQIU6fBBnfl/7yYg9lEZxf6wUR/NgEnYxdiRz1Urwyg
shCvOgWbt8UgG7oxYQFGFbja2k9+oJphniYSnq0LTl748M1ONyJFQCU+4a8OvYt6
0Nzce0Pge7HbA6NQW7ygCZUBVd3EqdawAaKZhUH9d01fO854fsMNNzUDbFLf6d/M
7C2Z9DQ2CgZ5GJFLCs4wW7wMrciBifsH9tmpSbyICzQA8nU1spMNZLyzilZHkY17
d7mDRxfj5x0Vxlc/uiwURWgKnwh6OcguB5/zV2yjeVorTw2fRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITZwnZlWD3pntyjg1lFV1m6M0QsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDkwMjZhZGQtMjUyYi0z
MWVmLTkyNDgtMzM5ZTFkMDMxYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAST7QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1SNx6E7wMbWTc2/pIuWZ/apRvjZ9cjHlT7uYPg3djii4EvadZErsW7
2eobzfGtgWqoqkrNxwG3zawZSBj9kCy71oaW+ZBc50AEbaC7yrSgLo89P9gqm7v8
sSu7lZBrnd0/Rzlcxdu9z+OefYqaX2xGPSPw/Fc3QgRrfW+RMTuiIrtfbAjwpFI3
f1sbHtyQu/C+39zT6yQEILYazTruCann1r/+CDadA+htcQDHbvp/LGtnsQi8mLwK
oknDyk2WVD0u1uMucpWlfR9U+nX6+ycm8GOxSP7N4eypHfIDDKWLTey8UmxDpE4J
QtYsqn7k6AfrTcZ5eUlsPMK/dccTPfM=
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:29:59 2025 by rpki-client