Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42bd91e2-7a98-33f8-ad5e-69e596b31897.roa
File:                     42bd91e2-7a98-33f8-ad5e-69e596b31897.roa (raw, json)
Hash identifier:          c6CY0grVxK0cBLWasLIWrs62RnZBrch790uAF2dIsOg=
Subject key identifier:   94:4A:75:DB:D1:10:78:7F:F4:8A:76:8F:42:F7:BE:CD:DF:67:ED:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C08D197432ED6CF27BD39C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42bd91e2-7a98-33f8-ad5e-69e596b31897.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        76.133.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:d1:97:43:2e:d6:cf:27:bd:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5c71d46b-3b4f-4ca8-8658-f5a28a8cc0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:c5:ae:be:cb:c0:15:25:3e:f4:2e:17:bf:
                    79:7e:64:c3:f0:a2:d2:b1:bf:68:0b:e7:f9:97:34:
                    f8:48:09:43:76:89:e3:8f:3e:a9:84:2f:5c:91:7c:
                    e6:d6:e8:12:49:f1:ff:6e:4b:5a:b7:26:7c:44:10:
                    10:91:7d:0c:43:1a:c7:64:41:d2:ba:ae:26:6c:99:
                    06:59:c0:6a:b5:d1:34:fa:ee:15:50:c1:7d:3e:22:
                    60:4c:c7:d7:0d:b9:45:68:c4:fc:ba:5e:b2:66:c1:
                    cd:19:cb:be:db:bc:a8:04:05:bf:bf:59:ac:7f:96:
                    8e:a7:05:de:04:c3:d5:68:7d:b4:af:76:9c:10:2c:
                    8b:c2:4a:8b:b1:7d:7e:c2:5e:4b:28:2a:30:1f:65:
                    15:82:34:5c:dd:a6:1c:4a:89:45:cc:8c:ab:b0:f4:
                    c8:47:8e:b5:b5:44:af:d6:0a:89:66:d7:ae:b3:0b:
                    ef:f5:bb:d6:b3:d5:af:95:1a:d3:25:88:24:10:ef:
                    ad:4b:80:0a:33:32:a5:76:7c:76:7c:6d:d5:ea:ac:
                    2e:f1:bc:89:8e:8e:f7:b1:92:dc:dc:08:97:1d:67:
                    e9:72:56:44:3b:4a:ae:53:c7:98:c3:05:bb:86:6b:
                    0f:df:dd:c0:d3:60:10:b7:a6:ba:17:06:d9:8e:5c:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4A:75:DB:D1:10:78:7F:F4:8A:76:8F:42:F7:BE:CD:DF:67:ED:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42bd91e2-7a98-33f8-ad5e-69e596b31897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.133.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:7f:cf:49:6b:e0:fc:30:4d:e5:24:38:b9:1c:d7:bb:f5:ae:
         e5:bf:df:9a:62:b5:12:4c:b7:40:c1:bb:13:64:b1:f0:d7:93:
         e2:4f:ce:d3:5a:87:60:b6:a7:17:1b:a8:44:d8:6a:20:80:c4:
         93:a3:e0:50:1e:1d:66:3f:bb:e3:56:9b:15:e6:51:60:82:64:
         7d:0d:3b:20:3a:47:27:97:db:44:73:17:87:42:bb:25:34:3c:
         7b:71:37:4b:15:79:50:4c:23:c0:e6:7e:92:a8:5b:6f:5c:1b:
         f5:d4:75:e6:a5:3c:e5:fc:dc:c9:49:56:4a:c5:e0:88:08:d1:
         9c:e9:45:c9:29:80:c5:41:73:90:fa:b7:f2:ed:12:7e:ef:64:
         92:e9:7e:33:7a:3e:b4:a4:33:d2:3f:bf:b7:08:43:f4:be:c9:
         17:44:e9:a5:40:42:e8:28:91:7f:c0:2a:74:82:5e:1b:ca:86:
         b3:81:bc:8a:9e:74:13:b9:3b:3c:30:f6:ff:bc:14:82:ac:8a:
         1f:6f:cc:a3:2a:bf:ac:41:f3:41:a7:a4:7d:41:f9:78:28:b0:
         4a:28:36:e2:55:f8:c2:ec:0a:45:98:48:9f:f8:f9:58:4c:83:
         77:99:e9:e5:42:58:55:65:9c:c6:e2:8e:65:90:39:e7:b6:78:
         4b:56:dd:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCNGXQy7Wzye9OcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NWM3MWQ0NmItM2I0Zi00Y2E4LTg2NTgtZjVhMjhhOGNjMGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRzFrr7LwBUlPvQuF795fmTD8KLSsb9oC+f5
lzT4SAlDdonjjz6phC9ckXzm1ugSSfH/bktatyZ8RBAQkX0MQxrHZEHSuq4mbJkG
WcBqtdE0+u4VUMF9PiJgTMfXDblFaMT8ul6yZsHNGcu+27yoBAW/v1msf5aOpwXe
BMPVaH20r3acECyLwkqLsX1+wl5LKCowH2UVgjRc3aYcSolFzIyrsPTIR461tUSv
1gqJZteuswvv9bvWs9WvlRrTJYgkEO+tS4AKMzKldnx2fG3V6qwu8byJjo73sZLc
3AiXHWfpclZEO0quU8eYwwW7hmsP393A02AQt6a6FwbZjlx15QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRKddvREHh/9Ip2j0L3vs3fZ+0TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJiZDkxZTItN2E5OC0z
M2Y4LWFkNWUtNjllNTk2YjMxODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIUuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJ/z0lr4PwwTeUkOLkc17v1ruW/35pitRJMt0DBuxNksfDXk+JPztNa
h2C2pxcbqETYaiCAxJOj4FAeHWY/u+NWmxXmUWCCZH0NOyA6RyeX20RzF4dCuyU0
PHtxN0sVeVBMI8DmfpKoW29cG/XUdealPOX83MlJVkrF4IgI0ZzpRckpgMVBc5D6
t/LtEn7vZJLpfjN6PrSkM9I/v7cIQ/S+yRdE6aVAQugokX/AKnSCXhvKhrOBvIqe
dBO5Ozww9v+8FIKsih9vzKMqv6xB80GnpH1B+XgosEooNuJV+MLsCkWYSJ/4+VhM
g3eZ6eVCWFVlnMbijmWQOee2eEtW3f8=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:17:24 2025 by rpki-client