Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d604e20-2bce-3745-84eb-7b17750b04ca.roa
File:                     5d604e20-2bce-3745-84eb-7b17750b04ca.roa (raw, json)
Hash identifier:          HmpgdcRBbTGPXstqslK5dtyr3Tqx1HMKW25rX9eGT9Q=
Subject key identifier:   F1:41:22:19:A6:6D:36:12:34:D1:FF:64:E0:16:2A:AD:76:25:E3:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCA25711F527AB5432E000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d604e20-2bce-3745-84eb-7b17750b04ca.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        68.54.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:a2:57:11:f5:27:ab:54:32:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=4581fd67-4047-467b-b597-1deb639c8b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:3f:46:82:7e:4d:8e:fe:16:dc:32:ab:18:
                    2f:b1:59:b6:c4:f5:73:84:e3:9f:ba:7e:6e:dd:13:
                    86:c4:c7:71:7d:13:31:81:a2:6b:4f:01:97:78:28:
                    b1:b2:75:62:aa:a4:76:ed:06:a6:f8:54:e4:66:e9:
                    b2:36:78:14:ee:dc:48:a6:ec:a2:f9:da:8c:a0:56:
                    aa:ec:b5:15:18:e9:c5:73:83:cd:ab:44:13:67:74:
                    cd:00:f6:4d:66:6c:d3:ac:d7:24:b0:f4:f0:79:47:
                    59:12:c2:b2:4f:aa:77:0e:44:b5:24:f2:60:96:bd:
                    91:2d:46:60:d2:de:83:96:0d:e2:23:d2:05:ed:e6:
                    a5:81:d8:5a:dc:d1:c6:24:33:c8:bb:a4:82:16:54:
                    1e:e3:67:38:a3:5c:be:20:85:86:f2:ec:79:15:b9:
                    8c:f5:26:c7:93:2f:b7:29:87:19:5a:b4:45:c2:25:
                    b7:b0:1f:0d:16:c6:44:91:71:08:1c:7b:eb:92:38:
                    d4:97:41:0b:81:7d:81:52:52:2a:be:3e:b2:64:2e:
                    bd:b7:1e:e9:29:75:09:21:1c:8a:54:60:42:5e:3a:
                    53:82:92:0e:9b:fb:bc:f4:e9:0d:4f:e7:2b:fd:bb:
                    68:a2:51:92:51:18:b4:ac:1a:c1:ee:27:60:3d:f4:
                    33:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:41:22:19:A6:6D:36:12:34:D1:FF:64:E0:16:2A:AD:76:25:E3:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d604e20-2bce-3745-84eb-7b17750b04ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c1:61:42:3e:bb:ca:80:4d:66:2f:00:0e:90:25:80:73:8d:
         a7:19:45:28:33:94:e5:85:a9:8c:a3:59:36:2b:3e:bb:aa:61:
         b3:21:c3:15:76:23:b2:f5:20:0c:05:24:e3:ce:64:fc:91:91:
         4a:ce:df:1a:3a:b8:8c:a3:f3:f9:56:86:c7:bd:ac:15:da:5f:
         f0:ef:14:d6:16:b2:e2:a9:e4:72:8b:8d:70:bf:b2:71:f3:e1:
         7d:ec:a8:77:44:76:ca:db:60:65:06:70:5e:0e:52:b8:97:63:
         1d:fb:52:24:1b:d0:ad:3c:1d:f5:02:3f:31:d5:b0:85:20:02:
         bb:41:72:71:b2:5f:46:59:29:34:92:25:f2:b3:ef:4d:41:ae:
         1e:bd:a7:1b:7e:19:56:2f:e8:f7:a4:13:f2:a1:25:0c:1b:80:
         ef:85:7b:11:e4:02:98:ed:2a:8a:00:91:c4:07:0b:d2:de:c1:
         e5:39:f4:c1:b7:13:98:ba:e3:3c:23:94:c0:af:51:4e:4a:a2:
         41:2b:f0:ad:20:41:15:32:0a:15:8b:35:96:cb:60:6e:4c:37:
         b3:41:60:bd:66:35:14:a7:35:6f:ba:fa:37:29:13:05:18:10:
         c6:c8:b2:08:fb:07:13:8c:33:89:bf:35:48:80:57:36:d3:b2:
         1e:7a:63:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/KJXEfUnq1Qy4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
NDU4MWZkNjctNDA0Ny00NjdiLWI1OTctMWRlYjYzOWM4YjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVc/RoJ+TY7+FtwyqxgvsVm2xPVzhOOfun5u
3ROGxMdxfRMxgaJrTwGXeCixsnViqqR27Qam+FTkZumyNngU7txIpuyi+dqMoFaq
7LUVGOnFc4PNq0QTZ3TNAPZNZmzTrNcksPTweUdZEsKyT6p3DkS1JPJglr2RLUZg
0t6Dlg3iI9IF7ealgdha3NHGJDPIu6SCFlQe42c4o1y+IIWG8ux5FbmM9SbHky+3
KYcZWrRFwiW3sB8NFsZEkXEIHHvrkjjUl0ELgX2BUlIqvj6yZC69tx7pKXUJIRyK
VGBCXjpTgpIOm/u89OkNT+cr/btoolGSURi0rBrB7idgPfQzOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFBIhmmbTYSNNH/ZOAWKq12JeOPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQ2MDRlMjAtMmJjZS0z
NzQ1LTg0ZWItN2IxNzc1MGIwNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDbrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjBYUI+u8qATWYvAA6QJYBzjacZRSgzlOWFqYyjWTYrPruqYbMhwxV2
I7L1IAwFJOPOZPyRkUrO3xo6uIyj8/lWhse9rBXaX/DvFNYWsuKp5HKLjXC/snHz
4X3sqHdEdsrbYGUGcF4OUriXYx37UiQb0K08HfUCPzHVsIUgArtBcnGyX0ZZKTSS
JfKz701Brh69pxt+GVYv6PekE/KhJQwbgO+FexHkApjtKooAkcQHC9LeweU59MG3
E5i64zwjlMCvUU5KokEr8K0gQRUyChWLNZbLYG5MN7NBYL1mNRSnNW+6+jcpEwUY
EMbIsgj7BxOMM4m/NUiAVzbTsh56YzQ=
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:33:12 2025 by rpki-client