Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2534dc3e-e5ae-3c1c-8503-12b12caf5c94.roa
File:                     2534dc3e-e5ae-3c1c-8503-12b12caf5c94.roa (raw, json)
Hash identifier:          SYc4phELY46iFKFzKpYFXlA0o9M3LyYvnR9j8q/sr/o=
Subject key identifier:   F2:64:55:55:8F:8D:2A:C2:01:6E:16:AB:08:8B:82:2D:08:05:BB:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07895C8237A80519B6BA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2534dc3e-e5ae-3c1c-8503-12b12caf5c94.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        69.253.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:89:5c:82:37:a8:05:19:b6:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=0398c3c5-ac70-4b9e-b53d-9496b2ffaa73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f9:32:14:7c:c1:60:a8:aa:b0:10:f3:95:8b:
                    57:c4:43:cd:fa:3a:48:ed:b4:45:ca:9c:ae:a8:a6:
                    87:fc:e7:ec:e1:f6:d7:dd:68:23:06:cb:06:d3:2d:
                    88:c1:2f:0d:13:b3:da:67:c6:fd:c4:50:e5:a2:17:
                    02:d2:89:f0:79:37:b6:1c:3f:02:0d:bd:a4:c1:67:
                    23:5f:a0:95:81:24:82:66:7d:7a:43:7f:2f:f5:53:
                    5b:fd:77:09:d0:20:0a:17:70:34:78:44:41:99:48:
                    21:67:e2:e2:7d:04:5f:ce:25:72:2b:fe:48:5d:ee:
                    30:3a:29:65:65:9e:c3:bf:f9:dd:d2:ad:57:4d:19:
                    65:02:ec:80:17:f7:62:da:04:b2:84:c2:a7:f4:17:
                    55:a3:ce:62:f7:ee:9d:57:09:00:1d:c8:e2:68:98:
                    6d:0a:a8:17:86:0c:dd:ef:1b:13:cf:34:af:f7:ca:
                    cd:c8:66:88:20:3f:29:82:21:ce:a0:c7:6c:20:ee:
                    b0:70:0a:9a:5e:61:5a:3a:e5:f4:75:de:2b:ea:58:
                    25:e9:b2:84:bd:5f:04:52:15:bd:bf:68:b8:46:d1:
                    57:70:20:b3:37:6d:44:5c:b3:ba:2a:11:7c:c8:c8:
                    e5:9d:74:2d:f1:4a:b4:37:85:04:a3:7b:7e:d3:29:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:64:55:55:8F:8D:2A:C2:01:6E:16:AB:08:8B:82:2D:08:05:BB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2534dc3e-e5ae-3c1c-8503-12b12caf5c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:a5:56:fa:a3:57:2d:c0:6e:1f:73:58:bc:21:5c:93:4e:
         84:44:d5:cc:a7:a8:46:b8:7e:40:2c:3a:ec:9d:1c:2e:80:6d:
         ab:eb:6a:47:1f:22:55:1b:24:d4:8d:07:ab:33:f2:9c:aa:03:
         a8:09:fb:7a:dc:c9:d9:65:ca:8b:df:41:d3:01:56:57:46:83:
         4c:88:d2:9d:70:52:8e:d8:63:e7:04:aa:46:6f:c0:73:3f:01:
         db:d6:f6:85:1f:b5:a7:1e:90:ed:22:5b:ff:e7:b3:d6:85:14:
         99:e0:20:78:71:39:63:55:00:71:b3:41:fd:1c:2d:6f:87:25:
         27:38:f0:29:56:34:d6:a9:6c:a1:25:ff:6b:11:95:84:60:42:
         1a:21:99:f1:75:aa:ec:5d:9f:50:a4:07:c9:54:5d:d4:a9:91:
         45:ab:5a:a9:66:bd:09:38:0a:74:84:b4:f3:14:52:d9:51:30:
         5b:0a:08:23:78:6b:a3:8c:70:f7:04:79:84:08:fa:cd:e1:fd:
         e8:28:6a:5c:4a:62:d9:9d:94:d8:d2:26:68:38:e8:20:60:a1:
         6f:3a:49:16:aa:b2:43:8b:14:41:e5:53:f2:4b:66:ee:67:96:
         f2:91:ec:9d:93:cb:95:26:96:54:7a:35:91:b2:35:03:72:4b:
         07:cb:90:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB4lcgjeoBRm2ugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MDM5OGMzYzUtYWM3MC00YjllLWI1M2QtOTQ5NmIyZmZhYTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPkyFHzBYKiqsBDzlYtXxEPN+jpI7bRFypyu
qKaH/Ofs4fbX3WgjBssG0y2IwS8NE7PaZ8b9xFDlohcC0onweTe2HD8CDb2kwWcj
X6CVgSSCZn16Q38v9VNb/XcJ0CAKF3A0eERBmUghZ+LifQRfziVyK/5IXe4wOill
ZZ7Dv/nd0q1XTRllAuyAF/di2gSyhMKn9BdVo85i9+6dVwkAHcjiaJhtCqgXhgzd
7xsTzzSv98rNyGaIID8pgiHOoMdsIO6wcAqaXmFaOuX0dd4r6lgl6bKEvV8EUhW9
v2i4RtFXcCCzN21EXLO6KhF8yMjlnXQt8Uq0N4UEo3t+0ynRLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJkVVWPjSrCAW4WqwiLgi0IBbsNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjUzNGRjM2UtZTVhZS0z
YzFjLTg1MDMtMTJiMTJjYWY1Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRf3yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADa8pVb6o1ctwG4fc1i8IVyTToRE1cynqEa4fkAsOuydHC6Abavrakcf
IlUbJNSNB6sz8pyqA6gJ+3rcydllyovfQdMBVldGg0yI0p1wUo7YY+cEqkZvwHM/
AdvW9oUftacekO0iW//ns9aFFJngIHhxOWNVAHGzQf0cLW+HJSc48ClWNNapbKEl
/2sRlYRgQhohmfF1quxdn1CkB8lUXdSpkUWrWqlmvQk4CnSEtPMUUtlRMFsKCCN4
a6OMcPcEeYQI+s3h/egoalxKYtmdlNjSJmg46CBgoW86SRaqskOLFEHlU/JLZu5n
lvKR7J2Ty5UmllR6NZGyNQNySwfLkC4=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:45:31 2025 by rpki-client