Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4b7e8b7-53e4-31b4-b492-0a4470292ed2.roa
File:                     f4b7e8b7-53e4-31b4-b492-0a4470292ed2.roa (raw, json)
Hash identifier:          604o89zyEt/FeyV7YeJtzI4sncGVV9fgUpO1X1qdgzw=
Subject key identifier:   C1:C3:D6:7F:7B:96:1B:C5:EF:25:08:57:39:33:69:50:9C:67:B0:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A7086057017AE610C25781480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4b7e8b7-53e4-31b4-b492-0a4470292ed2.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     7922
IP address blocks:        96.114.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:05:70:17:ae:61:0c:25:78:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=db1bc571-7747-4183-ab68-dbe7fc874393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:28:30:41:31:b5:f9:51:f4:49:b4:1b:c0:
                    25:59:1d:01:e0:86:51:9a:84:de:c4:87:cb:12:5e:
                    e7:ec:6f:99:69:2e:52:0d:0d:b9:a0:e3:3e:43:6a:
                    80:cf:de:63:a0:24:49:3e:f6:4c:2b:70:a9:6f:ae:
                    b8:0f:84:fb:37:cd:2e:2f:ed:93:0a:e3:3e:2b:27:
                    a1:13:52:60:3a:26:5a:f0:24:bc:7f:e3:24:df:69:
                    28:12:71:ce:eb:09:30:50:96:18:2b:4a:e6:10:2f:
                    b1:df:2d:b3:c9:bf:cf:85:aa:bb:a3:81:6f:33:ca:
                    3a:48:ad:33:fb:5e:5c:97:88:4c:0d:68:bd:ea:b6:
                    14:fd:05:a6:15:70:d6:28:cf:d6:61:19:de:59:60:
                    da:34:b4:6d:d5:2f:1d:98:6c:1e:2e:72:c1:1d:8a:
                    06:6f:26:45:78:1a:cb:c4:08:45:9a:49:2e:fa:8a:
                    eb:eb:62:56:28:6b:73:75:7b:b3:c7:74:b5:ab:0f:
                    42:70:31:da:a9:8e:e1:22:c0:6f:8f:1c:e2:b8:93:
                    7e:80:b8:31:2a:69:b9:2d:63:c8:0e:9d:e8:33:37:
                    91:20:b1:0f:64:92:f6:67:fc:82:05:35:9b:de:81:
                    fe:8f:9e:e4:1d:0d:ff:fc:58:99:df:fa:89:af:f2:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C3:D6:7F:7B:96:1B:C5:EF:25:08:57:39:33:69:50:9C:67:B0:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4b7e8b7-53e4-31b4-b492-0a4470292ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1c:a2:2c:0b:0a:e4:a1:ea:91:b9:0a:df:55:39:9a:31:e2:
         03:dc:8b:94:cc:80:c4:6e:f5:8a:e1:cc:02:48:87:93:e4:71:
         66:dc:cb:b3:05:a5:b2:ce:dc:c0:07:fc:37:34:05:a8:b1:6f:
         3f:c9:93:63:8a:78:bc:bd:27:33:89:d1:6c:68:95:3c:a5:e2:
         05:da:26:6f:a8:f9:8f:57:dc:f2:0f:57:4d:15:d1:72:ec:d4:
         ac:62:26:9d:8d:be:14:3f:c4:2a:90:50:71:6d:46:c7:20:b5:
         c3:55:69:46:04:84:ee:55:a2:ab:e9:e7:bd:24:ed:f9:51:f3:
         06:ea:ee:71:8c:54:ef:6d:1c:84:e2:78:9b:87:85:1b:04:53:
         0f:cc:2d:8a:fc:df:71:51:d0:8d:4d:b7:1b:6b:47:70:ce:48:
         00:d7:ad:79:cc:9f:f6:1b:0b:ea:d3:eb:41:af:41:cc:26:66:
         29:26:68:21:da:ff:a6:07:39:84:7e:8f:c8:93:f5:51:f2:1c:
         b9:a9:56:eb:de:50:54:73:75:29:b9:53:b0:a3:de:dd:ab:c4:
         22:33:97:c5:a7:c3:b0:bd:c4:e6:1c:2f:bd:56:04:db:2a:a1:
         73:7f:b1:5c:3d:a2:98:ac:a0:b6:94:7d:43:f9:9f:14:fe:cd:
         28:f8:29:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhgVwF65hDCV4FIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
ZGIxYmM1NzEtNzc0Ny00MTgzLWFiNjgtZGJlN2ZjODc0MzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3UoMEExtflR9Em0G8AlWR0B4IZRmoTexIfL
El7n7G+ZaS5SDQ25oOM+Q2qAz95joCRJPvZMK3Cpb664D4T7N80uL+2TCuM+Kyeh
E1JgOiZa8CS8f+Mk32koEnHO6wkwUJYYK0rmEC+x3y2zyb/Phaq7o4FvM8o6SK0z
+15cl4hMDWi96rYU/QWmFXDWKM/WYRneWWDaNLRt1S8dmGweLnLBHYoGbyZFeBrL
xAhFmkku+orr62JWKGtzdXuzx3S1qw9CcDHaqY7hIsBvjxziuJN+gLgxKmm5LWPI
Dp3oMzeRILEPZJL2Z/yCBTWb3oH+j57kHQ3//FiZ3/qJr/ImcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHD1n97lhvF7yUIVzkzaVCcZ7B8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjRiN2U4YjctNTNlNC0z
MWI0LWI0OTItMGE0NDcwMjkyZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHIYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAcoiwLCuSh6pG5Ct9VOZox4gPci5TMgMRu9YrhzAJIh5PkcWbcy7MF
pbLO3MAH/Dc0Baixbz/Jk2OKeLy9JzOJ0WxolTyl4gXaJm+o+Y9X3PIPV00V0XLs
1KxiJp2NvhQ/xCqQUHFtRscgtcNVaUYEhO5Voqvp570k7flR8wbq7nGMVO9tHITi
eJuHhRsEUw/MLYr833FR0I1NtxtrR3DOSADXrXnMn/YbC+rT60GvQcwmZikmaCHa
/6YHOYR+j8iT9VHyHLmpVuveUFRzdSm5U7Cj3t2rxCIzl8Wnw7C9xOYcL71WBNsq
oXN/sVw9opisoLaUfUP5nxT+zSj4KYQ=
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:25:15 2025 by rpki-client