Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1ccaa5c-04d0-353f-8bc0-df66898c9b85.roa
File:                     a1ccaa5c-04d0-353f-8bc0-df66898c9b85.roa (raw, json)
Hash identifier:          DnCt0x7LIAQa13W7htkrX5WQk/1fPeRP458/N9fflN4=
Subject key identifier:   AE:03:0A:BD:0E:B9:F3:EB:9E:E2:02:F7:A6:A4:4B:82:E6:53:93:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC988C626575ED765132C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1ccaa5c-04d0-353f-8bc0-df66898c9b85.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        68.47.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:98:8c:62:65:75:ed:76:51:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=167b191d-76cb-4bdb-8570-f2802f5e70c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ac:ea:67:a2:de:69:af:93:ca:6f:a1:a7:e0:
                    11:bf:79:29:22:46:f7:e9:11:4f:16:6e:52:9f:05:
                    9d:96:67:f7:3e:a7:97:30:42:62:a6:e1:9f:de:eb:
                    2c:7a:93:34:92:4c:15:18:12:2e:88:7e:13:6d:ba:
                    8f:d6:d0:eb:1e:37:ee:3e:63:3b:7c:b9:79:ea:92:
                    1c:0e:d6:46:27:be:fb:2b:95:65:06:39:da:65:75:
                    20:07:81:89:2b:c3:c8:3e:95:7a:31:74:29:39:7a:
                    77:13:89:97:36:0a:8b:f8:1c:9f:31:7a:c7:b9:97:
                    33:08:af:07:b2:b0:46:09:c1:74:bc:5b:ff:05:b2:
                    41:de:00:b6:1e:6b:8d:da:95:85:07:77:a2:65:cf:
                    44:48:6d:dd:dd:91:94:50:d2:67:da:e7:a1:3f:71:
                    8f:01:33:d2:f5:30:a6:e1:86:d5:d5:0e:94:51:86:
                    fe:1b:6a:35:69:d1:32:0b:de:63:db:cc:c8:b4:7f:
                    bd:8c:09:88:35:c1:63:bf:7a:9b:ec:8a:63:87:22:
                    1c:10:31:39:af:a1:de:e6:e2:cf:cc:45:35:be:4e:
                    52:21:5d:b8:b0:9f:0d:75:06:6c:12:a6:77:77:4f:
                    83:6a:dc:14:1f:8d:cc:57:87:9b:00:8f:63:d0:21:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:03:0A:BD:0E:B9:F3:EB:9E:E2:02:F7:A6:A4:4B:82:E6:53:93:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1ccaa5c-04d0-353f-8bc0-df66898c9b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:57:a6:10:2b:11:1e:d4:02:a4:c5:dc:c2:43:ab:df:85:50:
         8f:e5:b6:fa:4d:3b:b4:0e:13:70:8a:2d:80:8b:0c:00:07:8f:
         9d:d5:31:2d:e2:1c:db:11:50:e5:ea:a9:d4:7f:3e:b4:7c:b9:
         c6:14:b9:e5:c9:cc:98:39:83:85:f2:cf:22:81:f5:ff:27:84:
         2e:03:b3:14:82:16:09:c4:94:a8:c3:67:e8:3c:e1:65:a3:16:
         03:f0:91:73:1f:e3:a1:51:97:15:a5:9f:ea:07:56:0d:df:85:
         b0:5c:8f:c2:06:77:4a:71:22:25:e9:8b:25:8d:97:1d:b8:de:
         f3:ad:a6:bb:be:f0:b5:1e:f0:49:d4:b0:fc:97:10:d2:2e:6b:
         66:9f:27:3f:b0:d1:b1:ab:bd:e1:4e:91:bb:b6:52:86:5a:29:
         e3:b6:69:0a:57:a0:96:8d:82:fb:c7:fa:85:9e:a2:29:a0:4c:
         f7:aa:24:b8:97:16:98:d8:52:39:1d:8b:de:3f:9f:61:bc:98:
         e5:6d:0e:78:2e:f1:81:7c:94:5b:78:b5:35:34:13:95:75:19:
         80:f3:8e:59:0e:80:0e:16:01:43:cc:e6:c7:50:ee:9b:f6:2a:
         1a:a1:d6:1c:66:c0:1a:b5:79:f4:b8:fd:65:f6:8e:97:ba:46:
         c3:80:51:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/JiMYmV17XZRMsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MTY3YjE5MWQtNzZjYi00YmRiLTg1NzAtZjI4MDJmNWU3MGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqzqZ6Leaa+Tym+hp+ARv3kpIkb36RFPFm5S
nwWdlmf3PqeXMEJipuGf3ussepM0kkwVGBIuiH4TbbqP1tDrHjfuPmM7fLl56pIc
DtZGJ777K5VlBjnaZXUgB4GJK8PIPpV6MXQpOXp3E4mXNgqL+ByfMXrHuZczCK8H
srBGCcF0vFv/BbJB3gC2HmuN2pWFB3eiZc9ESG3d3ZGUUNJn2uehP3GPATPS9TCm
4YbV1Q6UUYb+G2o1adEyC95j28zItH+9jAmINcFjv3qb7IpjhyIcEDE5r6He5uLP
zEU1vk5SIV24sJ8NdQZsEqZ3d0+DatwUH43MV4ebAI9j0CFYxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4DCr0OufPrnuIC96akS4LmU5OWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTFjY2FhNWMtMDRkMC0z
NTNmLThiYzAtZGY2Njg5OGM5Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARC/7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRXphArER7UAqTF3MJDq9+FUI/ltvpNO7QOE3CKLYCLDAAHj53VMS3i
HNsRUOXqqdR/PrR8ucYUueXJzJg5g4XyzyKB9f8nhC4DsxSCFgnElKjDZ+g84WWj
FgPwkXMf46FRlxWln+oHVg3fhbBcj8IGd0pxIiXpiyWNlx243vOtpru+8LUe8EnU
sPyXENIua2afJz+w0bGrveFOkbu2UoZaKeO2aQpXoJaNgvvH+oWeoimgTPeqJLiX
FpjYUjkdi94/n2G8mOVtDngu8YF8lFt4tTU0E5V1GYDzjlkOgA4WAUPM5sdQ7pv2
Khqh1hxmwBq1efS4/WX2jpe6RsOAUbc=
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:03:09 2025 by rpki-client