Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a5add02-1f8c-3f9b-972d-3b3eadb60e4b.roa
File:                     4a5add02-1f8c-3f9b-972d-3b3eadb60e4b.roa (raw, json)
Hash identifier:          vRRW8r6WrTugdxuDM/+ZSrzWn5vJktSvc0NACdz9Ees=
Subject key identifier:   1B:43:DC:98:AC:DA:0C:9C:B5:57:43:A1:D6:6C:36:3F:A3:EE:F0:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A6DBB4F29F0FBFAD1FAD0F980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a5add02-1f8c-3f9b-972d-3b3eadb60e4b.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     33661
IP address blocks:        96.73.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:4f:29:f0:fb:fa:d1:fa:d0:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=8d295b34-281f-4892-a2a7-2eaabc0903cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:79:44:aa:df:80:24:2d:5f:07:c1:e6:d0:f3:
                    e8:f2:07:69:84:bb:dc:c4:9b:20:26:26:26:f6:9c:
                    ed:4f:93:df:5f:ef:19:bb:6b:27:c8:15:ee:2d:6a:
                    08:de:92:b7:94:d7:3f:c0:f2:1a:7e:f8:e4:9f:84:
                    01:f1:e0:ea:e4:01:6f:a9:d3:8c:b2:cc:c2:22:3c:
                    e0:5a:08:6f:61:9d:d1:74:fd:bb:fb:0a:8e:87:8e:
                    03:1b:39:b9:02:2b:d9:72:0b:98:6e:72:2e:d0:c8:
                    59:20:1a:d5:01:32:43:b4:3d:ab:e6:aa:a1:4c:40:
                    a1:f8:77:c3:b5:80:5e:c3:54:2b:65:97:79:6e:42:
                    fc:7d:ee:40:f2:59:f4:3c:41:0c:ba:f2:bc:10:4c:
                    6f:6b:9b:8f:87:a7:e4:58:a2:c1:77:38:57:97:67:
                    2b:0b:ae:db:e6:f5:3a:a3:26:82:b9:34:f6:39:86:
                    83:6a:b0:d8:9d:8a:7d:64:9d:75:b4:75:0c:c9:a4:
                    1c:4a:33:c9:65:bd:52:12:78:6e:5c:3c:98:2d:e2:
                    72:80:23:d7:ee:1f:92:37:32:2c:a8:44:0e:94:4d:
                    59:9a:e4:c9:7f:7b:b6:6c:09:64:68:e5:26:98:41:
                    be:45:db:86:d4:df:12:a2:05:f8:41:14:3e:de:88:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:43:DC:98:AC:DA:0C:9C:B5:57:43:A1:D6:6C:36:3F:A3:EE:F0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a5add02-1f8c-3f9b-972d-3b3eadb60e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.73.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:9f:74:bf:15:86:9d:e9:92:f4:d4:89:db:99:ea:51:6c:
         8a:79:c7:ec:01:0f:4a:5c:73:4d:eb:f8:8a:20:74:cc:67:ef:
         d7:1c:a1:ca:20:b1:89:09:9c:41:2c:36:11:89:f6:47:52:3d:
         dc:1d:e3:36:56:f3:b5:18:47:fe:f9:f7:f5:94:8b:b5:78:4c:
         a3:0d:ed:51:43:9b:e7:28:dc:69:fc:9d:78:5b:58:18:6c:fc:
         c7:a7:3e:86:0c:2a:19:8e:a9:22:86:c5:a9:16:98:50:a2:0a:
         07:3b:6e:4f:cd:86:47:cf:86:69:e9:f1:68:7d:d2:f2:87:67:
         78:7a:e0:4e:d6:52:09:70:ba:8f:8b:9a:38:fa:3f:d9:88:3d:
         47:cb:03:1e:aa:e3:7f:6e:31:c5:ce:2e:81:7f:f7:04:86:d3:
         30:65:b2:3e:19:39:b2:7c:13:c1:88:9d:69:51:31:9c:fe:86:
         ef:fd:b4:cc:cf:68:d1:18:42:fd:24:3f:82:36:e3:74:05:38:
         30:6c:55:9c:c7:40:99:ae:f6:4f:6f:7c:c0:10:a0:5d:d8:97:
         8e:e2:2e:99:8b:4e:99:a4:6c:12:55:d5:fc:05:66:6c:ca:57:
         1d:55:2e:e4:5d:80:df:ed:72:df:45:82:a8:2f:e4:c4:79:89:
         7b:61:c5:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu08p8Pv60frQ+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
OGQyOTViMzQtMjgxZi00ODkyLWEyYTctMmVhYWJjMDkwM2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXlEqt+AJC1fB8Hm0PPo8gdphLvcxJsgJiYm
9pztT5PfX+8Zu2snyBXuLWoI3pK3lNc/wPIafvjkn4QB8eDq5AFvqdOMsszCIjzg
WghvYZ3RdP27+wqOh44DGzm5AivZcguYbnIu0MhZIBrVATJDtD2r5qqhTECh+HfD
tYBew1QrZZd5bkL8fe5A8ln0PEEMuvK8EExva5uPh6fkWKLBdzhXl2crC67b5vU6
oyaCuTT2OYaDarDYnYp9ZJ11tHUMyaQcSjPJZb1SEnhuXDyYLeJygCPX7h+SNzIs
qEQOlE1ZmuTJf3u2bAlkaOUmmEG+RduG1N8SogX4QRQ+3ohYYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtD3Jis2gyctVdDodZsNj+j7vDDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGE1YWRkMDItMWY4Yy0z
ZjliLTk3MmQtM2IzZWFkYjYwZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYEksMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGOn3S/FYad6ZL01InbmepRbIp5x+wBD0pcc03r+IogdMxn79ccocog
sYkJnEEsNhGJ9kdSPdwd4zZW87UYR/759/WUi7V4TKMN7VFDm+co3Gn8nXhbWBhs
/MenPoYMKhmOqSKGxakWmFCiCgc7bk/NhkfPhmnp8Wh90vKHZ3h64E7WUglwuo+L
mjj6P9mIPUfLAx6q439uMcXOLoF/9wSG0zBlsj4ZObJ8E8GInWlRMZz+hu/9tMzP
aNEYQv0kP4I243QFODBsVZzHQJmu9k9vfMAQoF3Yl47iLpmLTpmkbBJV1fwFZmzK
Vx1VLuRdgN/tct9Fgqgv5MR5iXthxZ8=
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:58:37 2025 by rpki-client