Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dff323c5-45dd-39e8-adae-82c5aba0cd23.roa
File:                     dff323c5-45dd-39e8-adae-82c5aba0cd23.roa (raw, json)
Hash identifier:          UbTbUbyMx8x/m23pKmhS1mf2VZwKfAdhedogR5wPzp8=
Subject key identifier:   AC:AC:F5:8C:9E:2E:E7:32:1E:80:DD:E0:73:46:C4:6F:CB:EF:67:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC04D3F8B6819820444780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dff323c5-45dd-39e8-adae-82c5aba0cd23.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        69.180.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:04:d3:f8:b6:81:98:20:44:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f0e7c066-37db-4490-a9bc-9043ff2418c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:90:a2:ee:1c:81:a0:92:12:e2:e3:53:29:
                    69:08:f3:83:38:c8:92:87:7b:bb:8b:13:be:b7:cf:
                    f2:02:16:e2:a2:c4:40:6f:7e:26:08:f8:d0:34:b0:
                    9f:80:e9:c0:be:e4:8c:ba:11:d0:b9:0a:73:0e:5f:
                    9c:10:c9:71:e6:25:b1:fd:2b:e2:c9:ea:50:45:a0:
                    6e:9c:3a:44:ab:6e:01:52:03:ac:f8:a7:ed:fb:75:
                    8f:97:a7:67:8d:1e:23:e6:c0:3e:36:a0:ed:58:21:
                    d9:41:f1:21:cb:fc:39:dd:f2:58:db:1b:76:5e:de:
                    52:d0:a6:d5:de:11:9d:c1:e0:d6:86:a4:46:99:a6:
                    71:48:5a:21:94:24:e5:30:63:f1:6e:e3:9d:8b:cf:
                    b9:a2:5a:9b:8e:98:58:ee:de:d7:f5:28:53:85:b0:
                    96:bf:10:2b:d8:08:46:d8:da:7d:3a:a4:95:52:fc:
                    72:95:13:4e:9a:57:8a:c6:92:2c:37:11:a4:3d:86:
                    b3:7a:93:79:d8:b1:7c:03:df:33:7f:22:3b:79:ad:
                    1b:40:de:39:2b:7a:07:36:48:12:86:27:e2:15:aa:
                    61:e3:73:22:ab:7d:20:0a:fe:36:f3:94:8a:58:1f:
                    c6:78:80:91:1c:45:06:04:f7:33:a2:af:2f:aa:34:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AC:F5:8C:9E:2E:E7:32:1E:80:DD:E0:73:46:C4:6F:CB:EF:67:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dff323c5-45dd-39e8-adae-82c5aba0cd23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.180.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c4:36:5b:e3:77:69:a9:38:b4:16:e4:94:3f:67:f7:09:65:
         2b:b7:39:1a:96:2c:21:5e:d2:70:66:27:49:61:a2:d1:56:70:
         a9:3d:51:c3:52:93:be:d7:61:75:44:88:f6:e3:13:fa:8c:04:
         8a:7c:e7:c4:98:d8:d5:87:74:81:e2:d0:25:59:ed:d8:f6:96:
         fb:81:f5:7e:dd:06:81:e3:fa:ad:58:f8:7e:d7:f5:98:cd:88:
         0e:c2:11:60:97:c5:28:ed:ab:9e:7f:49:e5:35:89:a1:71:58:
         95:3e:4a:d7:da:cc:18:02:18:58:7c:28:6c:4a:e5:eb:2f:53:
         47:c1:90:e3:82:b7:a4:36:3a:75:94:2e:87:db:b2:5b:6d:f7:
         e7:b0:8a:50:f3:00:3a:e0:6c:e6:92:60:be:b8:5a:04:9e:4e:
         71:30:32:72:48:ea:95:c8:87:92:29:10:4d:c3:61:d0:58:a2:
         18:67:7f:b6:98:21:9f:f0:e8:08:75:77:6f:37:a6:f8:95:ac:
         82:5d:72:f6:27:62:ed:04:42:ef:bb:5e:5e:2c:55:f6:ab:60:
         21:b9:11:99:7c:aa:bd:4a:47:12:48:49:93:af:e3:a8:4f:97:
         10:07:e2:38:af:ae:1b:d9:1a:4e:5d:28:8c:54:40:84:70:f8:
         a4:9f:47:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/ATT+LaBmCBER4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
ZjBlN2MwNjYtMzdkYi00NDkwLWE5YmMtOTA0M2ZmMjQxOGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsyQou4cgaCSEuLjUylpCPODOMiSh3u7ixO+
t8/yAhbiosRAb34mCPjQNLCfgOnAvuSMuhHQuQpzDl+cEMlx5iWx/SviyepQRaBu
nDpEq24BUgOs+Kft+3WPl6dnjR4j5sA+NqDtWCHZQfEhy/w53fJY2xt2Xt5S0KbV
3hGdweDWhqRGmaZxSFohlCTlMGPxbuOdi8+5olqbjphY7t7X9ShThbCWvxAr2AhG
2Np9OqSVUvxylRNOmleKxpIsNxGkPYazepN52LF8A98zfyI7ea0bQN45K3oHNkgS
hifiFaph43Miq30gCv4285SKWB/GeICRHEUGBPczoq8vqjS54QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKys9YyeLucyHoDd4HNGxG/L72dqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZmMzIzYzUtNDVkZC0z
OWU4LWFkYWUtODJjNWFiYTBjZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRbSMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7ENlvjd2mpOLQW5JQ/Z/cJZSu3ORqWLCFe0nBmJ0lhotFWcKk9UcNS
k77XYXVEiPbjE/qMBIp858SY2NWHdIHi0CVZ7dj2lvuB9X7dBoHj+q1Y+H7X9ZjN
iA7CEWCXxSjtq55/SeU1iaFxWJU+StfazBgCGFh8KGxK5esvU0fBkOOCt6Q2OnWU
Lofbsltt9+ewilDzADrgbOaSYL64WgSeTnEwMnJI6pXIh5IpEE3DYdBYohhnf7aY
IZ/w6Ah1d283pviVrIJdcvYnYu0EQu+7Xl4sVfarYCG5EZl8qr1KRxJISZOv46hP
lxAH4jivrhvZGk5dKIxUQIRw+KSfR4Q=
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:31:38 2025 by rpki-client