Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa
File:                     1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa (raw, json)
Hash identifier:          PP3Shmzy8B2x0UesFMTv0z7gwDt0BEBoO/rUdWDI+4E=
Subject key identifier:   42:7E:2B:01:89:5D:75:17:3E:29:7C:4D:FB:68:38:1C:32:B8:CC:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFEA51CF6124905EA43640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        67.188.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:ea:51:cf:61:24:90:5e:a4:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=e31e80ee-9089-492c-917f-8d9b135440bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:d4:aa:6b:a4:97:eb:00:04:e1:7a:28:ca:
                    cd:bc:23:6a:b5:4c:3f:5e:82:27:4e:d5:7a:c6:46:
                    c3:54:40:76:b1:1a:53:1b:74:66:7c:b7:0f:8e:8e:
                    7e:5b:38:e8:a2:5c:c1:dc:d1:f6:69:64:7c:ab:9d:
                    81:57:6d:bd:12:87:cb:78:b0:74:66:69:74:ec:e8:
                    98:99:d8:6a:1d:8d:9b:78:0a:82:ee:f9:38:45:75:
                    e6:33:94:75:b5:17:92:65:b3:40:7f:72:a6:8c:96:
                    c2:90:58:55:32:78:fb:2a:b9:b2:43:6b:fa:5b:f8:
                    24:97:60:d2:16:89:6b:33:5e:70:bd:11:fa:30:fc:
                    75:0f:f0:03:c0:d5:43:f3:a0:99:44:e8:64:35:7e:
                    2c:85:d5:9e:1d:26:be:92:20:9f:af:d7:e2:3d:19:
                    4d:76:7e:94:a6:33:67:8b:8e:42:7d:02:5e:ea:59:
                    83:eb:2c:56:71:ce:80:d4:25:60:fc:5c:f5:97:7e:
                    48:59:05:c1:05:12:df:7c:97:ad:e3:af:8c:bb:66:
                    ca:8d:4e:be:03:18:68:b2:cf:98:2c:b1:dc:ed:2a:
                    2b:8a:5a:52:40:56:4c:d6:64:bc:fd:3c:82:26:d4:
                    c8:6b:c1:6c:22:82:7b:0c:d3:8a:3b:96:d2:a6:d9:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7E:2B:01:89:5D:75:17:3E:29:7C:4D:FB:68:38:1C:32:B8:CC:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.188.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:20:e0:7a:a8:64:a0:d2:6e:b4:bf:b4:12:61:8b:30:96:d9:
         c0:75:06:84:8f:68:49:44:68:97:f5:de:d4:15:9b:65:56:ec:
         07:c0:9a:ff:ba:35:39:d2:23:9a:2a:01:99:e5:8d:9c:b7:92:
         4c:ae:01:d9:18:e4:fb:a8:ea:6d:24:29:65:2d:6d:57:31:45:
         bb:a5:f1:d5:5b:68:f6:39:ce:52:d4:bc:1a:ba:d0:df:be:61:
         81:dd:ff:06:31:83:49:2c:40:d3:0d:64:f2:90:74:9c:35:c6:
         be:4c:ae:d9:28:21:cb:3d:56:b0:fd:4e:27:af:4d:58:57:4c:
         d9:26:70:c9:32:c3:42:d5:d0:30:8c:bb:6c:99:82:2d:45:13:
         84:1a:da:d7:ce:20:c5:f8:09:94:ba:a9:2f:18:d6:99:dd:21:
         1c:b9:21:37:08:d4:5b:03:80:bf:5d:e9:46:d2:68:69:28:b5:
         74:a4:e9:7e:9c:3f:54:10:15:7f:41:70:e4:81:10:aa:3d:30:
         58:77:43:4c:3e:7a:81:cd:86:96:c0:b8:f8:7a:38:a9:b3:9f:
         59:84:55:2f:e1:e2:c7:8d:af:18:b7:05:fc:d4:a6:86:1c:ac:
         f5:de:09:8f:6f:48:e4:ac:51:39:d4:e7:e0:b3:f3:82:72:c1:
         32:9a:eb:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr+pRz2EkkF6kNkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTMxZTgwZWUtOTA4OS00OTJjLTkxN2YtOGQ5YjEzNTQ0MGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMHUqmukl+sABOF6KMrNvCNqtUw/XoInTtV6
xkbDVEB2sRpTG3RmfLcPjo5+WzjoolzB3NH2aWR8q52BV229EofLeLB0Zml07OiY
mdhqHY2beAqC7vk4RXXmM5R1tReSZbNAf3KmjJbCkFhVMnj7KrmyQ2v6W/gkl2DS
FolrM15wvRH6MPx1D/ADwNVD86CZROhkNX4shdWeHSa+kiCfr9fiPRlNdn6UpjNn
i45CfQJe6lmD6yxWcc6A1CVg/Fz1l35IWQXBBRLffJet46+Mu2bKjU6+Axhoss+Y
LLHc7SorilpSQFZM1mS8/TyCJtTIa8FsIoJ7DNOKO5bSptkplQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJ+KwGJXXUXPil8TftoOBwyuMy/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY1YjFjYWEtMzUwZi0z
YjRlLThjMjktZTY0YjMyOTI3ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7yYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEg4HqoZKDSbrS/tBJhizCW2cB1BoSPaElEaJf13tQVm2VW7AfAmv+6
NTnSI5oqAZnljZy3kkyuAdkY5Puo6m0kKWUtbVcxRbul8dVbaPY5zlLUvBq60N++
YYHd/wYxg0ksQNMNZPKQdJw1xr5MrtkoIcs9VrD9TievTVhXTNkmcMkyw0LV0DCM
u2yZgi1FE4Qa2tfOIMX4CZS6qS8Y1pndIRy5ITcI1FsDgL9d6UbSaGkotXSk6X6c
P1QQFX9BcOSBEKo9MFh3Q0w+eoHNhpbAuPh6OKmzn1mEVS/h4seNrxi3BfzUpoYc
rPXeCY9vSOSsUTnU5+Cz84JywTKa6+Y=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:11:09 2025 by rpki-client