Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3142142b-b1a3-39b3-9196-15b2db7e1785.roa
File:                     3142142b-b1a3-39b3-9196-15b2db7e1785.roa (raw, json)
Hash identifier:          hIbaVb1Ui/mXlHuyHDJBIx1zpU0tqJqkvTHhkLLH9fU=
Subject key identifier:   64:F9:4F:4C:E7:1E:19:F1:EF:92:41:89:71:18:5F:32:96:96:E8:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D432665ED6ED0D468FCF0000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3142142b-b1a3-39b3-9196-15b2db7e1785.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.30.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:66:5e:d6:ed:0d:46:8f:cf:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=999715c3-7360-4fb8-9957-89f0d8830fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cb:c0:69:c9:d3:03:5d:78:3f:2d:b4:db:fa:
                    18:91:54:ac:05:83:60:e5:b8:30:46:4e:e8:59:fa:
                    74:6d:5a:ac:55:ca:ff:1b:39:1f:9f:e5:a4:50:62:
                    d4:b7:4c:8c:83:6c:2f:a1:ec:98:9c:91:ef:b8:1d:
                    5f:b6:11:63:d1:67:d2:be:f5:f4:83:a6:c0:91:db:
                    50:90:ff:64:6a:cf:92:49:b1:d0:aa:35:0d:99:22:
                    7c:f2:05:8c:7b:fa:05:d4:4c:e6:12:46:2f:7c:71:
                    15:af:09:0e:52:60:03:21:eb:16:4f:28:7a:ee:17:
                    57:1c:b3:c5:97:e2:2e:e2:a1:eb:7c:da:53:27:22:
                    33:07:de:4f:41:ee:ab:1f:6b:5f:83:ea:64:54:cd:
                    e7:1d:64:65:6d:cd:24:3f:d0:16:e4:7e:2b:b3:8a:
                    99:bf:a3:e3:0e:e3:f1:07:23:44:a7:a5:46:9d:f5:
                    7a:79:01:fe:90:3e:fb:5c:db:74:74:13:3e:72:4f:
                    58:65:55:88:d8:ab:3f:8b:58:0a:3e:3c:d5:1c:a7:
                    f6:b1:d9:a0:11:51:ee:27:bc:68:ee:73:b9:0f:51:
                    03:d0:32:d0:60:29:69:70:f6:9d:b4:55:81:18:b3:
                    b8:69:dd:8b:fc:96:5b:4c:29:27:cc:1f:44:43:97:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F9:4F:4C:E7:1E:19:F1:EF:92:41:89:71:18:5F:32:96:96:E8:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3142142b-b1a3-39b3-9196-15b2db7e1785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:6e:f7:ad:a7:ae:54:7a:0d:27:7d:c6:b3:b1:c5:ee:3c:
         d7:23:d2:5d:09:0c:c2:ad:16:50:e8:d7:d2:98:76:0f:a2:2e:
         e6:54:b3:d5:f4:69:9c:28:38:8f:18:e4:55:4d:67:a3:68:d0:
         e9:f7:e0:52:39:c7:81:f1:c5:27:58:35:cd:06:27:26:bf:6e:
         8a:b9:3d:2e:d9:09:67:ff:a3:3e:d1:fe:88:e0:1f:2e:32:78:
         06:6e:7c:2e:44:ef:32:6e:4f:ea:57:ca:11:2e:22:39:d1:18:
         80:aa:b3:45:ab:0e:b1:b1:be:aa:8f:db:b5:f0:c5:d4:7d:49:
         d8:55:8a:59:7b:40:07:82:8d:32:90:1c:c2:49:02:08:3a:71:
         4a:13:3f:b4:5d:47:49:ea:93:5b:26:9a:ef:39:96:5c:5f:19:
         a8:fa:22:cd:be:7f:90:58:58:a6:74:5a:49:d3:27:70:94:9a:
         4d:b2:08:51:08:eb:48:cd:62:c9:4f:e1:4b:8e:9a:a0:bf:07:
         21:d7:29:14:6a:ce:5f:3f:59:1b:03:82:ab:c5:ef:d7:c7:3c:
         3f:c1:57:95:c3:84:7b:e6:94:81:0b:cf:86:80:1e:cc:ae:6d:
         80:28:24:1e:b8:c9:cd:00:e9:80:86:92:02:34:fb:1e:ef:3b:
         79:06:be:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMmZe1u0NRo/PAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OTk5NzE1YzMtNzM2MC00ZmI4LTk5NTctODlmMGQ4ODMwZmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisvAacnTA114Py202/oYkVSsBYNg5bgwRk7o
Wfp0bVqsVcr/Gzkfn+WkUGLUt0yMg2wvoeyYnJHvuB1fthFj0WfSvvX0g6bAkdtQ
kP9kas+SSbHQqjUNmSJ88gWMe/oF1EzmEkYvfHEVrwkOUmADIesWTyh67hdXHLPF
l+Iu4qHrfNpTJyIzB95PQe6rH2tfg+pkVM3nHWRlbc0kP9AW5H4rs4qZv6PjDuPx
ByNEp6VGnfV6eQH+kD77XNt0dBM+ck9YZVWI2Ks/i1gKPjzVHKf2sdmgEVHuJ7xo
7nO5D1ED0DLQYClpcPadtFWBGLO4ad2L/JZbTCknzB9EQ5cgLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGT5T0znHhnx75JBiXEYXzKWlug+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzE0MjE0MmItYjFhMy0z
OWIzLTkxOTYtMTViMmRiN2UxNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTB7sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALEjbvetp65Ueg0nfcazscXuPNcj0l0JDMKtFlDo19KYdg+iLuZUs9X0
aZwoOI8Y5FVNZ6No0On34FI5x4HxxSdYNc0GJya/boq5PS7ZCWf/oz7R/ojgHy4y
eAZufC5E7zJuT+pXyhEuIjnRGICqs0WrDrGxvqqP27XwxdR9SdhVill7QAeCjTKQ
HMJJAgg6cUoTP7RdR0nqk1smmu85llxfGaj6Is2+f5BYWKZ0WknTJ3CUmk2yCFEI
60jNYslP4UuOmqC/ByHXKRRqzl8/WRsDgqvF79fHPD/BV5XDhHvmlIELz4aAHsyu
bYAoJB64yc0A6YCGkgI0+x7vO3kGvtg=
-----END CERTIFICATE-----
Generated at Tue Jun 3 07:30:07 2025 by rpki-client