Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6f86f50-cc0c-378e-b422-95cec115adfb.roa
File:                     f6f86f50-cc0c-378e-b422-95cec115adfb.roa (raw, json)
Hash identifier:          z/ZqVpFd0drVVX41FO4dKsdrM+W31QlNp/VLHpF390c=
Subject key identifier:   0D:B9:ED:FD:2E:7C:7D:10:AE:ED:3D:E0:4E:B7:9D:04:30:B8:B5:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBFE402FEB11A0833F4CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6f86f50-cc0c-378e-b422-95cec115adfb.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        24.245.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:fe:40:2f:eb:11:a0:83:3f:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=d54a6f4b-8a92-477f-977c-6e7555f32cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:a2:bc:84:62:49:2a:89:bf:8e:34:d5:f1:
                    7e:98:27:5e:9e:9d:f7:77:4d:81:5a:09:f1:92:f1:
                    77:58:26:5d:1a:5c:b8:41:42:19:ad:e4:7d:88:3b:
                    c4:e8:c6:37:3d:02:a3:dd:83:a0:7a:63:8a:d2:de:
                    8f:a3:68:26:8f:e2:1a:e3:f9:d8:05:7b:c2:b0:bd:
                    69:9a:06:04:d9:ce:4e:b2:52:8e:bb:5d:3a:df:59:
                    f1:85:ce:f2:ed:fd:da:08:f1:4a:cb:e4:2a:51:19:
                    5e:da:e5:b4:a9:a0:0c:53:5c:14:57:22:9a:0f:62:
                    80:89:27:ff:36:f0:19:9c:42:61:79:03:9e:4d:60:
                    51:af:67:49:20:94:02:15:ee:d6:8b:b1:fe:c3:ea:
                    11:39:76:83:dd:ef:8e:9e:87:2f:b7:02:2a:b4:f0:
                    03:7e:78:dc:b9:d5:73:c4:c4:cf:79:33:a2:14:df:
                    b1:f9:98:9b:ae:88:c7:27:db:b8:4a:a9:c3:81:a2:
                    38:ad:c7:65:fa:05:41:9e:b3:48:6b:4e:88:8d:4d:
                    6d:39:ea:49:73:7e:ed:66:07:23:23:de:99:47:dc:
                    6c:3a:15:b1:7e:06:0b:da:8c:03:23:04:05:d4:8c:
                    54:43:b4:7f:0e:30:60:f4:b9:de:d3:c3:56:73:14:
                    90:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:ED:FD:2E:7C:7D:10:AE:ED:3D:E0:4E:B7:9D:04:30:B8:B5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6f86f50-cc0c-378e-b422-95cec115adfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.245.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b4:d7:6c:5a:29:ae:39:1b:d5:e7:d8:cc:e6:4a:3d:5e:10:
         c9:57:33:5d:22:f0:6f:85:ac:df:d2:60:69:35:0a:8b:b1:8a:
         ef:db:c8:a5:df:d0:b7:2c:87:bf:0f:e4:96:cd:f5:37:a2:d6:
         14:d5:9a:9c:2c:be:92:55:64:6b:e8:15:63:83:07:bf:e8:3d:
         8a:2f:ee:55:18:bd:02:e5:db:d2:86:85:c8:46:14:36:84:13:
         e4:04:4b:d0:b6:66:a2:4c:c5:11:46:69:a1:ec:bd:fc:55:fa:
         e3:b7:a7:c1:aa:c0:21:cd:ab:d8:62:c4:93:50:8b:87:e1:08:
         69:05:07:16:be:09:50:e2:6e:08:67:6e:d3:e8:4d:1b:b9:9a:
         0a:3e:f1:10:71:2a:09:fd:39:1d:e6:71:e9:20:90:a6:62:10:
         48:04:78:d1:4c:47:ca:d2:ae:1c:23:75:f7:b8:fc:75:81:e3:
         52:d5:a9:9b:5f:22:7c:37:ce:e9:c2:d4:89:64:a8:ea:19:52:
         e9:3b:c7:40:4e:ce:8f:41:ba:e0:53:26:b4:2f:c4:a1:3d:ff:
         18:f8:54:42:e7:d3:02:16:a7:01:3a:18:59:db:fa:c5:e2:18:
         88:65:2e:71:4e:00:68:d5:53:fe:be:af:c6:12:67:b7:8e:9a:
         4e:31:04:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+/5AL+sRoIM/TMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
ZDU0YTZmNGItOGE5Mi00NzdmLTk3N2MtNmU3NTU1ZjMyY2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWaivIRiSSqJv4401fF+mCdenp33d02BWgnx
kvF3WCZdGly4QUIZreR9iDvE6MY3PQKj3YOgemOK0t6Po2gmj+Ia4/nYBXvCsL1p
mgYE2c5OslKOu10631nxhc7y7f3aCPFKy+QqURle2uW0qaAMU1wUVyKaD2KAiSf/
NvAZnEJheQOeTWBRr2dJIJQCFe7Wi7H+w+oROXaD3e+OnocvtwIqtPADfnjcudVz
xMTPeTOiFN+x+ZibrojHJ9u4SqnDgaI4rcdl+gVBnrNIa06IjU1tOepJc37tZgcj
I96ZR9xsOhWxfgYL2owDIwQF1IxUQ7R/DjBg9Lne08NWcxSQeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA257f0ufH0Qru094E63nQQwuLVfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjZmODZmNTAtY2MwYy0z
NzhlLWI0MjItOTVjZWMxMTVhZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPUmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+012xaKa45G9Xn2MzmSj1eEMlXM10i8G+FrN/SYGk1Couxiu/byKXf
0Lcsh78P5JbN9Tei1hTVmpwsvpJVZGvoFWODB7/oPYov7lUYvQLl29KGhchGFDaE
E+QES9C2ZqJMxRFGaaHsvfxV+uO3p8GqwCHNq9hixJNQi4fhCGkFBxa+CVDibghn
btPoTRu5mgo+8RBxKgn9OR3mcekgkKZiEEgEeNFMR8rSrhwjdfe4/HWB41LVqZtf
Inw3zunC1IlkqOoZUuk7x0BOzo9BuuBTJrQvxKE9/xj4VELn0wIWpwE6GFnb+sXi
GIhlLnFOAGjVU/6+r8YSZ7eOmk4xBG4=
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:11:54 2025 by rpki-client