Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5a45c8-97e5-364e-af7f-dae0688f094a.roa
File:                     cf5a45c8-97e5-364e-af7f-dae0688f094a.roa (raw, json)
Hash identifier:          LNJAEjA949NMl5Q5RZtYiLGZ+kNnmjG/VSxwAfdZMhU=
Subject key identifier:   AB:0B:6C:9D:91:AE:6A:04:51:A2:07:BC:1C:34:D5:08:8A:15:1C:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB79ECD835108035FB6480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5a45c8-97e5-364e-af7f-dae0688f094a.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        68.85.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:79:ec:d8:35:10:80:35:fb:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=39ee10fe-2a1e-4121-a644-d5c7506c66dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ee:07:d8:77:44:19:cd:b8:81:18:95:c0:6e:
                    77:34:5a:42:76:54:42:e4:3c:99:94:70:fa:a8:4e:
                    5e:df:09:e9:ae:66:ab:a8:fd:6d:00:dd:43:0f:55:
                    76:a0:33:e3:64:72:f3:e1:de:f3:81:71:49:62:ae:
                    22:ad:b4:b5:3c:98:76:be:72:75:41:b6:d7:b9:09:
                    47:0d:f0:c7:89:44:11:40:bd:05:12:8b:35:96:18:
                    e6:b6:cb:b2:c6:db:f3:a6:0d:6a:08:ab:ad:ed:b4:
                    b7:68:6c:d3:fc:6f:4d:1d:23:fe:06:1d:76:3f:83:
                    29:8f:f1:f2:13:fb:1a:ab:00:4a:fe:58:c1:99:aa:
                    a9:dc:dc:36:14:52:c6:6e:67:81:75:53:b2:e6:08:
                    c0:4b:ee:55:f4:fe:34:c0:9b:4b:04:d4:fe:e4:5a:
                    a4:1c:c2:4f:88:66:de:dd:1d:bb:a2:31:91:c3:7b:
                    8c:ad:1e:e1:89:f8:dc:01:94:f6:fc:b8:76:9a:76:
                    58:a1:7e:32:2d:43:95:55:06:4a:1e:f2:78:a0:c4:
                    bd:1d:23:40:ad:97:11:6e:12:57:03:92:bd:19:2a:
                    c0:bd:cf:c6:a0:6d:16:32:cc:96:2b:26:a0:db:69:
                    96:94:8d:c1:81:6c:70:07:73:50:23:5b:11:67:60:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0B:6C:9D:91:AE:6A:04:51:A2:07:BC:1C:34:D5:08:8A:15:1C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5a45c8-97e5-364e-af7f-dae0688f094a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:65:f6:11:e1:cb:65:cd:89:81:ae:a6:89:71:b5:f4:2a:fc:
         82:01:6c:89:e9:ae:f6:76:58:33:a9:f9:cf:85:e3:02:ff:1e:
         fa:77:bc:d3:60:d6:84:bc:3c:20:8c:a7:6a:2b:3f:03:94:04:
         52:d7:98:4e:7c:37:f6:3b:fe:93:0d:99:43:8c:dc:bc:91:99:
         37:a5:58:aa:5a:f9:01:c3:68:72:96:95:da:11:21:b8:73:53:
         0b:9f:f3:30:0f:40:16:fc:df:2c:11:d6:a9:d3:35:20:83:3e:
         41:02:e2:8e:ae:2e:4d:52:c9:95:fe:84:85:fe:c8:ed:2f:14:
         ca:a4:00:b1:49:01:69:71:18:6c:4a:7a:a9:2b:10:02:6a:08:
         da:b3:ad:04:24:ba:9f:06:4d:34:02:05:a1:f5:b5:9b:54:a2:
         34:90:d2:0a:5c:1a:75:90:bc:74:fb:cd:d9:e8:ae:48:85:b9:
         3c:75:09:8c:71:f3:04:93:16:0a:48:c1:c0:35:75:86:33:75:
         9a:5e:7f:86:87:a6:d4:5d:73:88:fe:13:3f:23:73:a6:25:3e:
         c6:e4:19:9f:06:b2:14:f4:76:4c:1d:40:59:62:b5:92:a8:39:
         d9:07:ef:8f:02:d2:ad:08:55:cf:92:65:92:61:87:ba:7d:c1:
         bb:0d:d3:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+3ns2DUQgDX7ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MzllZTEwZmUtMmExZS00MTIxLWE2NDQtZDVjNzUwNmM2NmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+4H2HdEGc24gRiVwG53NFpCdlRC5DyZlHD6
qE5e3wnprmarqP1tAN1DD1V2oDPjZHLz4d7zgXFJYq4irbS1PJh2vnJ1QbbXuQlH
DfDHiUQRQL0FEos1lhjmtsuyxtvzpg1qCKut7bS3aGzT/G9NHSP+Bh12P4Mpj/Hy
E/saqwBK/ljBmaqp3Nw2FFLGbmeBdVOy5gjAS+5V9P40wJtLBNT+5FqkHMJPiGbe
3R27ojGRw3uMrR7hifjcAZT2/Lh2mnZYoX4yLUOVVQZKHvJ4oMS9HSNArZcRbhJX
A5K9GSrAvc/GoG0WMsyWKyag22mWlI3BgWxwB3NQI1sRZ2ALoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKsLbJ2RrmoEUaIHvBw01QiKFRy/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y1YTQ1YzgtOTdlNS0z
NjRlLWFmN2YtZGFlMDY4OGYwOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFVIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFl9hHhy2XNiYGupolxtfQq/IIBbInprvZ2WDOp+c+F4wL/Hvp3vNNg
1oS8PCCMp2orPwOUBFLXmE58N/Y7/pMNmUOM3LyRmTelWKpa+QHDaHKWldoRIbhz
Uwuf8zAPQBb83ywR1qnTNSCDPkEC4o6uLk1SyZX+hIX+yO0vFMqkALFJAWlxGGxK
eqkrEAJqCNqzrQQkup8GTTQCBaH1tZtUojSQ0gpcGnWQvHT7zdnorkiFuTx1CYxx
8wSTFgpIwcA1dYYzdZpef4aHptRdc4j+Ez8jc6YlPsbkGZ8GshT0dkwdQFlitZKo
OdkH748C0q0IVc+SZZJhh7p9wbsN0w0=
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:10:53 2025 by rpki-client