Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fd7d8cd-3782-3185-8f9b-34c59fdd97f9.roa
File:                     4fd7d8cd-3782-3185-8f9b-34c59fdd97f9.roa (raw, json)
Hash identifier:          gCUf10jYq5WrxUPytzXoKuz+9QBV9TxxXZBctTgxesk=
Subject key identifier:   96:0A:92:09:9D:4F:A6:AA:AA:49:A5:D7:11:04:75:59:CF:5E:2B:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A6DBB6C42F13DEADB9CFC1560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fd7d8cd-3782-3185-8f9b-34c59fdd97f9.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     33661
IP address blocks:        96.109.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:6c:42:f1:3d:ea:db:9c:fc:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=bf93a994-b48b-4abc-abf3-d1a5bbdb817d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:42:b5:e3:02:e2:bf:e5:c9:d8:e9:e4:05:
                    bc:6c:9e:81:35:51:37:60:f9:81:65:78:15:5c:13:
                    6a:92:75:a0:e5:60:63:76:fb:9d:a3:2f:3e:a2:c2:
                    fc:20:78:65:0f:6a:06:15:90:03:8a:68:25:d7:cd:
                    99:88:af:c6:ae:88:3f:da:b8:9a:04:9e:5e:8e:97:
                    6e:3d:3e:03:51:2d:d3:a7:62:e0:bc:b7:9f:9a:ad:
                    21:d4:65:49:cd:7c:10:f7:81:a4:04:12:b3:c2:27:
                    99:aa:f5:0d:1e:d4:86:b6:43:70:36:22:e3:d5:c6:
                    57:96:6e:85:d0:97:55:54:e8:96:66:7c:63:6c:51:
                    8d:5a:bd:1d:08:7f:ce:0b:af:4c:5d:2c:bc:c2:9f:
                    4b:05:54:4c:3c:29:1c:76:fb:cf:1f:52:16:9c:91:
                    d5:2c:51:ad:2b:4c:b8:ed:43:7e:7d:ee:97:7f:e4:
                    49:67:b3:9c:32:57:16:f8:62:2b:ef:42:c7:a1:f3:
                    28:ff:b6:c8:f8:05:e2:93:87:c3:f7:ae:f2:c6:7c:
                    79:89:8a:b6:71:3b:86:ca:95:e9:95:56:4c:dd:7e:
                    6a:53:10:37:6c:60:3e:3e:de:de:27:9b:e1:32:08:
                    7c:49:ae:94:a9:35:77:db:4a:63:56:0d:d3:3f:04:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0A:92:09:9D:4F:A6:AA:AA:49:A5:D7:11:04:75:59:CF:5E:2B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fd7d8cd-3782-3185-8f9b-34c59fdd97f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4c:44:0a:76:34:9a:7f:b2:0b:03:4f:1e:5b:bb:30:6c:73:
         28:fa:21:73:ee:a2:40:e9:3d:b3:a5:0f:e8:23:cb:bf:f6:21:
         32:3b:03:70:12:aa:19:b6:95:37:a1:c5:53:d3:17:f1:2b:6e:
         21:51:f4:90:ff:14:6a:1c:76:13:b7:f7:92:8d:6d:9e:a3:dd:
         d4:13:a9:28:be:86:8b:21:bc:10:a3:8a:c8:62:57:09:af:ef:
         f8:0f:3b:77:07:8d:0b:b5:70:1f:d5:32:a1:31:23:c1:86:6a:
         87:18:ac:55:66:a1:00:83:76:73:2e:bf:95:f6:e9:3a:82:b2:
         d7:94:6f:a3:e2:79:c8:eb:e7:a5:c2:c7:2a:98:46:f0:ed:aa:
         4a:9a:7c:79:4e:c6:9b:13:cd:60:29:e9:0b:a5:8e:27:a4:24:
         3b:f6:09:b1:66:1e:9f:fd:c9:4c:81:8f:82:15:ac:51:9d:4a:
         dd:8b:09:de:b5:05:88:dd:e0:c4:c6:f0:cc:ee:84:ae:65:be:
         a6:f0:03:8f:c2:b1:9c:de:81:78:03:10:75:3c:01:34:2c:35:
         c5:fd:07:89:46:ae:78:a5:86:98:c0:0b:0c:19:c9:48:3f:6a:
         55:52:b2:96:35:1d:23:ec:75:14:b1:ec:fa:a1:43:74:cd:a4:
         dc:67:85:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu2xC8T3q25z8FWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
YmY5M2E5OTQtYjQ4Yi00YWJjLWFiZjMtZDFhNWJiZGI4MTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApthCteMC4r/lydjp5AW8bJ6BNVE3YPmBZXgV
XBNqknWg5WBjdvudoy8+osL8IHhlD2oGFZADimgl182ZiK/Grog/2riaBJ5ejpdu
PT4DUS3Tp2LgvLefmq0h1GVJzXwQ94GkBBKzwieZqvUNHtSGtkNwNiLj1cZXlm6F
0JdVVOiWZnxjbFGNWr0dCH/OC69MXSy8wp9LBVRMPCkcdvvPH1IWnJHVLFGtK0y4
7UN+fe6Xf+RJZ7OcMlcW+GIr70LHofMo/7bI+AXik4fD967yxnx5iYq2cTuGypXp
lVZM3X5qUxA3bGA+Pt7eJ5vhMgh8Sa6UqTV320pjVg3TPwRv/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJYKkgmdT6aqqkml1xEEdVnPXivnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGZkN2Q4Y2QtMzc4Mi0z
MTg1LThmOWItMzRjNTlmZGQ5N2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG3GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtMRAp2NJp/sgsDTx5buzBscyj6IXPuokDpPbOlD+gjy7/2ITI7A3AS
qhm2lTehxVPTF/ErbiFR9JD/FGocdhO395KNbZ6j3dQTqSi+hoshvBCjishiVwmv
7/gPO3cHjQu1cB/VMqExI8GGaocYrFVmoQCDdnMuv5X26TqCsteUb6Piecjr56XC
xyqYRvDtqkqafHlOxpsTzWAp6QuljiekJDv2CbFmHp/9yUyBj4IVrFGdSt2LCd61
BYjd4MTG8MzuhK5lvqbwA4/CsZzegXgDEHU8ATQsNcX9B4lGrnilhpjACwwZyUg/
alVSspY1HSPsdRSx7PqhQ3TNpNxnhTA=
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:14:05 2025 by rpki-client