Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c68798de-a500-31e8-955f-1b62b1d2621b.roa
File:                     c68798de-a500-31e8-955f-1b62b1d2621b.roa (raw, json)
Hash identifier:          bw5um57HhlFeDvsWhTUlqsi23Bw0bPeDPaq88SERAUs=
Subject key identifier:   16:F3:6A:80:4C:D5:B4:2B:A1:87:E2:0D:C1:EA:50:F2:00:C4:0B:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB8DC117F08909824B1100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c68798de-a500-31e8-955f-1b62b1d2621b.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7725
IP address blocks:        68.63.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:8d:c1:17:f0:89:09:82:4b:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e25c97c3-a743-4cf2-8fb8-2470610a2b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:d0:06:31:31:c3:13:e2:eb:f2:59:22:11:
                    32:97:dd:32:11:7b:41:5a:22:4f:fd:1b:ed:a4:78:
                    84:7d:d7:b9:77:e5:48:56:ef:c0:c8:93:5e:b2:59:
                    bc:91:d4:92:36:ea:97:4a:d6:a2:cd:cc:64:cf:23:
                    47:30:37:ef:25:38:63:17:e0:ee:0e:24:1e:ed:9a:
                    be:1e:8e:e6:91:7e:46:a2:cb:04:5f:42:cf:b8:b2:
                    04:5e:d7:33:76:b2:94:f4:4f:ff:f0:c0:aa:5c:63:
                    48:13:34:d5:96:62:0b:cb:7c:8b:bf:0b:2b:9f:35:
                    8a:30:01:4b:af:79:9a:0a:99:2d:9d:59:e1:1b:f3:
                    b5:63:7d:8e:ca:f5:42:40:7b:71:73:0f:4c:09:50:
                    c6:51:33:a4:b3:2b:92:c8:dc:a3:94:43:70:85:8e:
                    d5:74:84:a6:9e:dd:7c:1f:5c:f3:88:cb:35:4e:a9:
                    0d:52:45:de:cf:8f:32:d6:93:12:73:d0:fa:70:58:
                    01:72:87:22:16:eb:b6:0c:72:5a:92:52:7f:41:21:
                    6f:69:c7:32:e2:f8:f4:9c:be:d0:d0:1d:75:8e:53:
                    94:d2:51:78:84:3f:ca:97:3f:5d:cf:8e:90:53:f9:
                    43:ea:8c:0b:5b:30:e8:cb:8c:14:b0:c8:77:07:0c:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F3:6A:80:4C:D5:B4:2B:A1:87:E2:0D:C1:EA:50:F2:00:C4:0B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c68798de-a500-31e8-955f-1b62b1d2621b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.63.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:61:21:1d:79:0a:d8:be:5b:c0:c0:63:85:ba:cc:c1:be:ff:
         aa:c1:bd:3f:84:f8:9f:ec:56:bb:3f:24:3f:a3:4d:9f:d5:5c:
         d6:47:56:a4:70:83:ed:69:ad:2b:78:4b:c8:d2:47:a2:ce:82:
         7f:c2:8f:54:14:a6:be:d7:fd:ae:3a:32:78:5f:27:04:fc:4b:
         fc:0b:db:85:6c:19:f1:39:91:55:d2:18:4b:69:02:ad:97:50:
         42:43:84:c3:74:cc:51:58:ba:0f:92:50:38:59:31:df:d7:7d:
         90:ce:fa:4b:c8:78:8f:0d:fb:93:d9:03:f5:54:af:8c:79:e1:
         88:8a:ba:ef:26:97:05:88:1b:67:d1:7e:0e:43:86:0f:b0:be:
         02:32:d7:25:10:87:e6:24:98:c0:d5:5b:1c:09:de:ae:c4:56:
         f7:82:2e:2b:d3:9e:19:02:c8:85:a1:61:bb:04:27:41:98:53:
         49:1f:8f:bf:f6:69:1f:56:de:ce:7e:fc:67:f3:15:cb:0f:4c:
         ec:69:6c:d2:62:e1:72:76:81:b9:57:08:b0:79:02:ad:62:2c:
         80:c7:98:03:3f:bc:74:b6:14:d1:0d:6e:8f:03:9e:25:be:e6:
         e2:1c:3d:47:ae:06:f4:ae:44:05:72:c0:fb:58:50:24:ca:47:
         4d:fa:a2:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+43BF/CJCYJLEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
ZTI1Yzk3YzMtYTc0My00Y2YyLThmYjgtMjQ3MDYxMGEyYjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz37QBjExwxPi6/JZIhEyl90yEXtBWiJP/Rvt
pHiEfde5d+VIVu/AyJNeslm8kdSSNuqXStaizcxkzyNHMDfvJThjF+DuDiQe7Zq+
Ho7mkX5GossEX0LPuLIEXtczdrKU9E//8MCqXGNIEzTVlmILy3yLvwsrnzWKMAFL
r3maCpktnVnhG/O1Y32OyvVCQHtxcw9MCVDGUTOksyuSyNyjlENwhY7VdISmnt18
H1zziMs1TqkNUkXez48y1pMSc9D6cFgBcociFuu2DHJaklJ/QSFvaccy4vj0nL7Q
0B11jlOU0lF4hD/Klz9dz46QU/lD6owLWzDoy4wUsMh3BwwtDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbzaoBM1bQroYfiDcHqUPIAxAscMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzY4Nzk4ZGUtYTUwMC0z
MWU4LTk1NWYtMWI2MmIxZDI2MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERD9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALhhIR15Cti+W8DAY4W6zMG+/6rBvT+E+J/sVrs/JD+jTZ/VXNZHVqRw
g+1prSt4S8jSR6LOgn/Cj1QUpr7X/a46MnhfJwT8S/wL24VsGfE5kVXSGEtpAq2X
UEJDhMN0zFFYug+SUDhZMd/XfZDO+kvIeI8N+5PZA/VUr4x54YiKuu8mlwWIG2fR
fg5Dhg+wvgIy1yUQh+YkmMDVWxwJ3q7EVveCLivTnhkCyIWhYbsEJ0GYU0kfj7/2
aR9W3s5+/GfzFcsPTOxpbNJi4XJ2gblXCLB5Aq1iLIDHmAM/vHS2FNENbo8DniW+
5uIcPUeuBvSuRAVywPtYUCTKR036ouI=
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:39:10 2025 by rpki-client