Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd503ff1-6fd4-3698-b6aa-8f2f9b8ad577.roa
File:                     cd503ff1-6fd4-3698-b6aa-8f2f9b8ad577.roa (raw, json)
Hash identifier:          He0UbWUwS21eVqv99fxkPbKZDTBXtl2XRZBf9JAalZ8=
Subject key identifier:   D1:3F:4D:CF:D1:73:34:56:A0:8A:D3:BB:61:46:67:C0:49:9E:AF:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBD62076CC753D00996F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd503ff1-6fd4-3698-b6aa-8f2f9b8ad577.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33667
IP address blocks:        76.29.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:d6:20:76:cc:75:3d:00:99:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=239b0be2-a7e9-4def-9a07-ae7f08f334c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:da:04:b9:ad:4a:79:86:87:60:3d:bb:88:87:
                    d2:dd:9f:84:a9:d3:fe:da:3e:d6:98:65:ad:7c:ce:
                    65:0b:a3:83:03:02:eb:47:65:9c:10:5d:52:30:c6:
                    1a:e1:d2:54:bd:2b:37:1a:af:24:3c:3b:45:dd:b3:
                    a2:48:5d:76:a5:fa:ec:d6:c7:94:d8:a8:81:d7:df:
                    c0:8d:89:77:bb:90:50:28:03:64:26:b8:90:d4:7b:
                    5a:9f:8d:93:f8:d4:23:0d:1b:23:86:97:76:ae:96:
                    ef:05:38:c0:c0:55:12:c4:a3:3b:73:2c:7d:24:a3:
                    d9:5d:2a:42:c2:7c:db:5c:40:f2:0b:5b:e5:5a:1a:
                    6b:5f:ab:41:c9:9d:d4:c0:28:32:ea:cb:0c:65:d3:
                    5f:aa:5d:d4:3c:4d:65:95:b9:69:ef:99:3d:d8:b4:
                    a0:99:91:1d:f3:21:fb:8d:7f:5a:58:7d:95:88:3b:
                    22:d2:76:6c:bd:59:d8:a8:78:49:54:10:40:c8:d4:
                    26:5a:68:ee:35:06:02:e9:e6:d1:7a:2f:76:48:4a:
                    e2:80:76:09:7f:dd:a9:04:de:f3:84:68:aa:e1:37:
                    6b:28:13:40:4f:b1:6c:85:e8:48:e2:b0:8c:21:7b:
                    1b:e2:2e:c4:37:f0:62:f1:aa:d2:da:20:93:74:9f:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3F:4D:CF:D1:73:34:56:A0:8A:D3:BB:61:46:67:C0:49:9E:AF:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd503ff1-6fd4-3698-b6aa-8f2f9b8ad577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.29.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:68:48:27:9d:69:2b:ff:f8:c9:4d:22:76:98:6e:94:c5:f7:
         03:dc:b4:53:49:9f:4f:7d:b3:df:61:5d:f0:cd:98:40:d9:d5:
         2f:e7:9d:88:a2:75:b2:55:c8:a2:e0:4e:f9:5c:b0:37:e3:c3:
         74:81:c4:ea:4d:01:71:12:e5:af:8b:ad:2b:88:a6:9c:57:6c:
         90:37:b3:93:4c:ac:7c:b9:23:9c:00:92:1e:4e:8e:98:72:0a:
         d8:ed:8d:ae:09:d4:f6:5b:38:05:e1:7a:33:11:ca:4e:5e:07:
         64:c1:72:ea:5a:63:df:9d:21:2a:7e:ee:ac:68:58:ae:52:4f:
         f9:72:8e:89:2c:7a:35:fc:1a:83:db:66:8b:fe:9e:cb:b2:70:
         31:e6:d3:1e:68:ca:5e:06:64:ab:6c:47:a3:7e:7a:cc:36:c5:
         5c:96:d3:ed:66:c7:ab:08:82:77:14:91:76:fa:fe:bd:0e:62:
         c2:0e:9c:ff:a5:76:a8:bd:04:c2:d6:2b:e7:cf:49:6b:dd:fd:
         b9:f6:08:2c:19:2b:90:81:a4:a5:d0:55:23:23:52:95:39:9f:
         4e:51:5f:db:7e:0a:2e:04:28:83:05:8e:28:2c:e5:1c:d8:b5:
         8c:46:25:be:26:b8:69:b4:ae:40:81:99:05:4b:7e:dc:ff:ad:
         40:1f:67:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+9Ygdsx1PQCZb0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MjM5YjBiZTItYTdlOS00ZGVmLTlhMDctYWU3ZjA4ZjMzNGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9oEua1KeYaHYD27iIfS3Z+EqdP+2j7WmGWt
fM5lC6ODAwLrR2WcEF1SMMYa4dJUvSs3Gq8kPDtF3bOiSF12pfrs1seU2KiB19/A
jYl3u5BQKANkJriQ1Htan42T+NQjDRsjhpd2rpbvBTjAwFUSxKM7cyx9JKPZXSpC
wnzbXEDyC1vlWhprX6tByZ3UwCgy6ssMZdNfql3UPE1llblp75k92LSgmZEd8yH7
jX9aWH2ViDsi0nZsvVnYqHhJVBBAyNQmWmjuNQYC6ebRei92SErigHYJf92pBN7z
hGiq4TdrKBNAT7FshehI4rCMIXsb4i7EN/Bi8arS2iCTdJ+1QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNE/Tc/RczRWoIrTu2FGZ8BJnq/DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q1MDNmZjEtNmZkNC0z
Njk4LWI2YWEtOGYyZjliOGFkNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETB2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABloSCedaSv/+MlNInaYbpTF9wPctFNJn099s99hXfDNmEDZ1S/nnYii
dbJVyKLgTvlcsDfjw3SBxOpNAXES5a+LrSuIppxXbJA3s5NMrHy5I5wAkh5Ojphy
Ctjtja4J1PZbOAXhejMRyk5eB2TBcupaY9+dISp+7qxoWK5ST/lyjoksejX8GoPb
Zov+nsuycDHm0x5oyl4GZKtsR6N+esw2xVyW0+1mx6sIgncUkXb6/r0OYsIOnP+l
dqi9BMLWK+fPSWvd/bn2CCwZK5CBpKXQVSMjUpU5n05RX9t+Ci4EKIMFjigs5RzY
tYxGJb4muGm0rkCBmQVLftz/rUAfZ44=
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:33:10 2025 by rpki-client