Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4e5b20c-a844-3012-9b8b-24b08742dc72.roa
File:                     e4e5b20c-a844-3012-9b8b-24b08742dc72.roa (raw, json)
Hash identifier:          KlHz2wzvcvaJz4KkXTwK4psb++ElcAVYIe/GuQRLHlo=
Subject key identifier:   D9:23:D7:13:B0:BD:D1:AC:8C:B0:73:A4:08:0F:1B:4E:11:19:99:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A708602A0323E1B382EDBDE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4e5b20c-a844-3012-9b8b-24b08742dc72.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     7922
IP address blocks:        96.112.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:02:a0:32:3e:1b:38:2e:db:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=a9e41bc6-3d0d-43d9-9357-5df6dcabe50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2c:0d:62:a9:b6:ae:98:5c:00:f3:a7:dd:48:
                    ca:f2:36:90:57:f9:db:52:5e:ce:0f:35:6e:78:f0:
                    79:b4:61:39:21:35:33:4e:0e:e4:39:64:34:59:57:
                    42:82:20:fc:46:d4:89:b9:6b:d7:5f:cf:ee:5d:22:
                    ef:c2:18:91:c9:09:80:2f:fd:df:ec:0c:dd:f5:12:
                    f2:1e:7f:4a:c7:ab:03:bb:90:c6:fb:a0:38:b0:ec:
                    c5:54:fd:32:61:da:43:be:a2:4e:6e:79:8b:00:90:
                    3b:45:9a:07:fd:3e:df:20:47:e0:c2:9a:c9:ca:f0:
                    d6:bf:58:1b:7b:99:2b:d4:e6:65:03:d2:41:3a:47:
                    f2:11:15:3f:ed:5c:b1:7a:03:b6:0c:a1:67:e5:17:
                    60:12:b0:f8:d5:43:b1:c0:cd:6a:a2:3e:36:4f:a4:
                    12:4d:76:c9:2c:67:ef:e5:78:c2:7a:18:16:6a:07:
                    84:b3:c9:b3:aa:31:e1:db:b9:2f:9c:1e:5e:ed:d3:
                    a5:4e:66:54:d6:30:dd:09:1b:d1:bf:ff:1b:0f:d0:
                    06:fe:4e:a0:b8:3c:74:9e:ce:4e:fa:35:a0:dd:6f:
                    d3:3b:2e:24:31:ca:3a:65:0f:b2:13:9d:d4:e2:af:
                    06:42:16:be:4b:14:da:b9:93:a6:1e:11:5f:dc:ca:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:23:D7:13:B0:BD:D1:AC:8C:B0:73:A4:08:0F:1B:4E:11:19:99:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4e5b20c-a844-3012-9b8b-24b08742dc72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.112.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:60:38:6b:ce:6c:81:9e:7a:a1:d1:cb:95:1b:be:07:0b:87:
         d1:21:b3:7b:89:29:3d:95:ef:a6:67:57:9b:ea:93:67:4d:89:
         06:97:81:e8:9f:16:02:3f:b5:af:97:69:9a:5b:c9:ca:38:08:
         be:60:4e:90:0a:85:7d:c5:4f:b6:10:a6:49:d2:78:14:5f:3a:
         d1:b7:ba:d9:dc:22:cb:8a:6e:ef:22:b7:1e:47:9f:cd:45:e5:
         18:f5:ca:7a:1f:64:bb:6c:bc:72:e5:8a:79:ee:f1:14:a0:f7:
         03:52:09:35:10:ab:14:0d:6f:65:ca:2b:f8:4f:8e:ba:52:0f:
         a9:9a:33:a5:17:b0:46:0a:63:dd:b6:0e:53:ba:d0:e9:d9:c5:
         0f:69:41:53:90:90:c0:1e:64:6a:7f:b2:50:1f:61:14:f1:a5:
         0c:bc:f8:39:20:3f:5c:e3:50:6c:19:97:6f:d4:a2:77:fe:26:
         5b:ff:b5:3b:71:eb:8f:64:2e:be:82:6a:01:ce:ec:6e:5c:46:
         3c:2a:cb:0a:b7:70:20:99:90:9a:0d:58:27:38:9c:21:53:33:
         3b:73:e7:84:cf:6a:fa:27:6c:a9:0d:69:61:c0:8b:c9:1b:21:
         f2:2c:bc:0f:0d:e5:47:83:22:4c:c5:d7:cc:1d:f7:25:f4:7a:
         36:3e:71:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhgKgMj4bOC7b3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
YTllNDFiYzYtM2QwZC00M2Q5LTkzNTctNWRmNmRjYWJlNTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgywNYqm2rphcAPOn3UjK8jaQV/nbUl7ODzVu
ePB5tGE5ITUzTg7kOWQ0WVdCgiD8RtSJuWvXX8/uXSLvwhiRyQmAL/3f7Azd9RLy
Hn9Kx6sDu5DG+6A4sOzFVP0yYdpDvqJObnmLAJA7RZoH/T7fIEfgwprJyvDWv1gb
e5kr1OZlA9JBOkfyERU/7VyxegO2DKFn5RdgErD41UOxwM1qoj42T6QSTXbJLGfv
5XjCehgWageEs8mzqjHh27kvnB5e7dOlTmZU1jDdCRvRv/8bD9AG/k6guDx0ns5O
+jWg3W/TOy4kMco6ZQ+yE53U4q8GQha+SxTauZOmHhFf3Mp7GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkj1xOwvdGsjLBzpAgPG04RGZn/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTRlNWIyMGMtYTg0NC0z
MDEyLTliOGItMjRiMDg3NDJkYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYHDiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxgOGvObIGeeqHRy5UbvgcLh9Ehs3uJKT2V76ZnV5vqk2dNiQaXgeif
FgI/ta+XaZpbyco4CL5gTpAKhX3FT7YQpknSeBRfOtG3utncIsuKbu8itx5Hn81F
5Rj1ynofZLtsvHLlinnu8RSg9wNSCTUQqxQNb2XKK/hPjrpSD6maM6UXsEYKY922
DlO60OnZxQ9pQVOQkMAeZGp/slAfYRTxpQy8+DkgP1zjUGwZl2/Uonf+Jlv/tTtx
649kLr6CagHO7G5cRjwqywq3cCCZkJoNWCc4nCFTMztz54TPavonbKkNaWHAi8kb
IfIsvA8N5UeDIkzF18wd9yX0ejY+cXc=
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:31:30 2025 by rpki-client