Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6644f24-6e94-3f4a-a1b7-cf91ce645ee7.roa
File:                     f6644f24-6e94-3f4a-a1b7-cf91ce645ee7.roa (raw, json)
Hash identifier:          iquVQMlPDWVrduTM9ejYVw2EvxFFRcNSkvG3deJIcCk=
Subject key identifier:   63:8D:BA:1C:BF:81:0B:94:11:88:2D:3F:70:5F:2F:C3:92:5D:F4:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC73FEA28B4E9E6A7D3980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6644f24-6e94-3f4a-a1b7-cf91ce645ee7.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        69.136.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:73:fe:a2:8b:4e:9e:6a:7d:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ddd22808-f293-4f9d-bb22-7952d5d39354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:bc:38:22:85:e3:80:7c:11:cf:b0:8f:e1:
                    4e:05:e3:f7:50:4b:9c:be:9d:66:ce:de:b3:b2:c9:
                    62:91:d7:42:72:7e:9e:8a:03:b3:f8:ad:38:5c:e5:
                    b9:c7:6e:aa:d3:9e:ce:a7:29:ed:75:98:44:85:43:
                    49:9a:dc:48:2c:9f:1a:26:c3:a0:0e:fb:29:d0:ec:
                    2c:ec:12:f7:6c:a9:2e:ba:cf:01:c3:37:f2:94:02:
                    43:95:e0:a7:2a:98:a2:71:47:1e:e1:69:65:7c:d2:
                    ff:81:f4:1a:95:83:aa:7e:f0:fe:53:f3:8e:fb:c6:
                    40:50:56:6a:2a:ce:17:36:25:70:ab:69:70:b4:1e:
                    4c:d7:21:d1:9f:5f:8e:54:eb:fe:b3:a8:45:98:f1:
                    75:26:80:87:25:3b:d4:07:0d:38:0b:ad:26:37:2e:
                    bc:d6:34:4a:a4:d1:f2:c4:d8:f5:7d:78:ca:2a:8c:
                    75:1b:16:e8:36:2d:90:5b:5d:37:48:03:56:da:dc:
                    d7:96:1f:7f:84:95:f3:04:01:21:43:6b:49:83:f6:
                    50:99:25:c4:06:cd:db:99:66:42:d8:2c:10:8e:5b:
                    15:cd:78:1a:4c:34:b3:40:f3:96:ce:94:66:6c:5f:
                    47:5f:da:d6:18:fd:75:a4:79:69:0f:67:b0:16:4c:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8D:BA:1C:BF:81:0B:94:11:88:2D:3F:70:5F:2F:C3:92:5D:F4:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6644f24-6e94-3f4a-a1b7-cf91ce645ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.136.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ef:15:82:01:97:43:af:d5:29:b3:9d:11:69:0f:42:bb:b7:
         df:95:3a:9e:06:67:3b:42:b7:9c:98:4a:43:ba:91:63:78:95:
         dd:01:ba:72:72:c2:42:e1:aa:c9:b2:3d:df:17:d5:2a:ef:73:
         f2:c4:2c:53:d2:4b:4f:4b:19:2c:af:6b:6c:36:cd:dc:b3:8a:
         80:88:21:f8:a4:a3:d0:2c:19:ee:1b:6e:32:42:29:8b:05:65:
         a9:0e:8c:16:c9:93:95:14:fd:ac:e1:b1:62:26:c3:9f:03:06:
         34:50:2e:59:15:61:40:25:6c:c8:5d:df:05:02:6a:b3:80:a2:
         15:e9:29:41:64:cf:b9:82:c0:d9:c5:4e:b4:43:2d:ec:87:a7:
         6a:de:26:17:e9:0a:3e:77:07:53:9d:42:76:4c:49:cb:50:68:
         a6:7a:74:ee:2e:81:a0:4f:d4:88:4b:f5:07:46:16:e3:fd:18:
         26:63:97:19:70:78:ca:a9:56:af:d0:76:07:3c:19:c6:00:24:
         e8:f3:ae:ec:0f:c6:36:23:b8:13:a9:da:46:70:1e:be:15:0a:
         65:dd:18:93:27:92:ff:24:9c:fd:f5:e6:bc:2b:15:83:e6:9d:
         42:24:71:ba:f4:17:6b:d7:0e:38:29:3a:2c:f1:9c:74:2e:19:
         cf:93:0b:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/HP+ootOnmp9OYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
ZGRkMjI4MDgtZjI5My00ZjlkLWJiMjItNzk1MmQ1ZDM5MzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIy8OCKF44B8Ec+wj+FOBeP3UEucvp1mzt6z
sslikddCcn6eigOz+K04XOW5x26q057OpyntdZhEhUNJmtxILJ8aJsOgDvsp0Ows
7BL3bKkuus8BwzfylAJDleCnKpiicUce4WllfNL/gfQalYOqfvD+U/OO+8ZAUFZq
Ks4XNiVwq2lwtB5M1yHRn1+OVOv+s6hFmPF1JoCHJTvUBw04C60mNy681jRKpNHy
xNj1fXjKKox1GxboNi2QW103SANW2tzXlh9/hJXzBAEhQ2tJg/ZQmSXEBs3bmWZC
2CwQjlsVzXgaTDSzQPOWzpRmbF9HX9rWGP11pHlpD2ewFkzMVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGONuhy/gQuUEYgtP3BfL8OSXfTMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjY2NDRmMjQtNmU5NC0z
ZjRhLWExYjctY2Y5MWNlNjQ1ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERYhgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLvFYIBl0Ov1SmznRFpD0K7t9+VOp4GZztCt5yYSkO6kWN4ld0BunJy
wkLhqsmyPd8X1Srvc/LELFPSS09LGSyva2w2zdyzioCIIfiko9AsGe4bbjJCKYsF
ZakOjBbJk5UU/azhsWImw58DBjRQLlkVYUAlbMhd3wUCarOAohXpKUFkz7mCwNnF
TrRDLeyHp2reJhfpCj53B1OdQnZMSctQaKZ6dO4ugaBP1IhL9QdGFuP9GCZjlxlw
eMqpVq/Qdgc8GcYAJOjzruwPxjYjuBOp2kZwHr4VCmXdGJMnkv8knP315rwrFYPm
nUIkcbr0F2vXDjgpOizxnHQuGc+TC9o=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:18:35 2025 by rpki-client