Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37b41adf-2742-329c-b0dd-9cfb56afb94b.roa
File:                     37b41adf-2742-329c-b0dd-9cfb56afb94b.roa (raw, json)
Hash identifier:          R1k+UpuQzEbpXPYeelPfkmZyV0miAt/+8bmImmKAXOQ=
Subject key identifier:   99:59:BC:42:98:70:D6:54:5D:89:B7:D0:2F:5E:97:C4:AF:5F:CA:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430147C6D5498F0B6F9B580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37b41adf-2742-329c-b0dd-9cfb56afb94b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        66.31.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:14:7c:6d:54:98:f0:b6:f9:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=3ffd9792-9146-4bcd-9ca7-a087cb16d93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:71:ac:64:bd:a4:1c:44:68:6c:e9:9d:ef:
                    a5:2e:b8:e7:b3:e3:e3:fb:8f:c6:ab:e6:31:39:6a:
                    80:ff:86:89:aa:4e:5d:9e:e1:63:0f:e1:fe:d5:ab:
                    6b:ee:82:dc:50:ee:84:5f:b0:60:f5:57:e7:c4:54:
                    d3:45:1a:15:0a:81:72:74:44:71:02:17:5c:8b:fe:
                    e7:6f:8c:9e:c9:17:5d:f7:2c:29:5d:ed:13:58:a9:
                    66:0c:d6:77:59:a6:c3:a3:76:28:72:4a:74:67:bb:
                    16:a1:05:f3:07:d1:ca:fb:91:2b:35:df:bc:77:79:
                    bc:27:b1:69:0f:9d:54:56:38:0f:a4:e0:1f:8b:b2:
                    a5:75:33:62:db:d4:eb:e9:ba:c0:1f:88:54:4d:3d:
                    53:ea:74:5d:03:fc:cc:e1:38:10:0b:b5:38:90:45:
                    5f:8c:85:db:fc:67:75:86:c5:ca:06:7d:ec:e8:ec:
                    c1:36:4d:42:48:b0:4d:e6:bf:93:8e:b7:23:fd:c9:
                    9c:15:41:b3:d9:c7:89:b2:48:a2:d6:ce:0c:98:69:
                    49:93:a3:2a:e6:59:dc:0a:4c:c2:57:e2:1e:be:4d:
                    29:19:db:37:30:00:be:a0:99:ca:c0:fc:09:b8:af:
                    57:78:45:49:f9:81:b1:8b:a0:00:52:c7:20:2b:8d:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:59:BC:42:98:70:D6:54:5D:89:B7:D0:2F:5E:97:C4:AF:5F:CA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37b41adf-2742-329c-b0dd-9cfb56afb94b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.31.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:90:35:0c:08:03:cc:c9:c1:92:94:5f:dc:61:02:2f:b0:54:
         a4:d1:31:04:70:50:ab:69:40:e8:fa:48:88:04:52:65:75:4f:
         84:e2:2b:8d:a6:8c:2c:b3:c1:f4:b7:d7:17:a8:c8:81:b2:58:
         c3:8b:9d:c4:cb:0a:94:2c:12:6c:be:dd:8d:70:a9:3a:d2:09:
         c7:41:36:8c:c5:63:e6:80:79:61:19:ab:94:86:16:c4:6c:4f:
         80:74:27:b5:79:19:a8:fe:38:55:41:9d:30:40:bc:71:22:bd:
         62:5d:4b:b9:5e:c0:89:1a:ef:6a:34:5f:ea:74:ab:cc:90:f6:
         59:be:a6:47:d7:a7:0a:d7:96:7f:b9:39:d9:d1:58:f4:b4:33:
         ef:8c:64:d9:d5:37:d0:25:2c:2e:d4:48:4a:d4:b7:87:e1:58:
         cc:c2:ed:82:0a:fa:df:f2:a8:0d:b2:be:e4:83:01:3a:15:d6:
         62:a4:32:f4:16:74:a3:04:45:f9:b1:93:1f:89:04:85:f1:e5:
         8d:03:8b:ed:d0:f8:e0:18:33:43:d7:ee:0f:d9:87:77:3b:26:
         73:1c:a4:a0:bd:5c:48:be:69:70:3e:f0:17:b5:20:a2:40:38:
         1a:55:4e:a4:a6:76:c8:68:d7:0a:01:27:79:76:79:da:f4:3c:
         9f:9e:29:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMBR8bVSY8Lb5tYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
M2ZmZDk3OTItOTE0Ni00YmNkLTljYTctYTA4N2NiMTZkOTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpBxrGS9pBxEaGzpne+lLrjns+Pj+4/Gq+Yx
OWqA/4aJqk5dnuFjD+H+1atr7oLcUO6EX7Bg9VfnxFTTRRoVCoFydERxAhdci/7n
b4yeyRdd9ywpXe0TWKlmDNZ3WabDo3Yockp0Z7sWoQXzB9HK+5ErNd+8d3m8J7Fp
D51UVjgPpOAfi7KldTNi29Tr6brAH4hUTT1T6nRdA/zM4TgQC7U4kEVfjIXb/Gd1
hsXKBn3s6OzBNk1CSLBN5r+Tjrcj/cmcFUGz2ceJskii1s4MmGlJk6Mq5lncCkzC
V+Ievk0pGds3MAC+oJnKwPwJuK9XeEVJ+YGxi6AAUscgK41NbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJlZvEKYcNZUXYm30C9el8SvX8qZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzdiNDFhZGYtMjc0Mi0z
MjljLWIwZGQtOWNmYjU2YWZiOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQh+IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyQNQwIA8zJwZKUX9xhAi+wVKTRMQRwUKtpQOj6SIgEUmV1T4TiK42m
jCyzwfS31xeoyIGyWMOLncTLCpQsEmy+3Y1wqTrSCcdBNozFY+aAeWEZq5SGFsRs
T4B0J7V5Gaj+OFVBnTBAvHEivWJdS7lewIka72o0X+p0q8yQ9lm+pkfXpwrXln+5
OdnRWPS0M++MZNnVN9AlLC7USErUt4fhWMzC7YIK+t/yqA2yvuSDAToV1mKkMvQW
dKMERfmxkx+JBIXx5Y0Di+3Q+OAYM0PX7g/Zh3c7JnMcpKC9XEi+aXA+8Be1IKJA
OBpVTqSmdsho1woBJ3l2edr0PJ+eKZg=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:39:55 2025 by rpki-client