Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4704482b-fb42-33cc-82a3-2ed38c663fbb.roa
File:                     4704482b-fb42-33cc-82a3-2ed38c663fbb.roa (raw, json)
Hash identifier:          6DPv9FxJtYXmxi7aE6PAGQaxj2tBeG5/qiP7odJgulk=
Subject key identifier:   5C:A0:4D:BB:BF:3D:E1:2D:86:E5:0A:DC:C0:1E:58:18:BD:F0:F9:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430088843C6DAE4AEF45D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4704482b-fb42-33cc-82a3-2ed38c663fbb.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.91.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:08:88:43:c6:da:e4:ae:f4:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=25eaea08-fa97-4e59-85dd-9a172180ea20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:2d:b2:0a:b9:35:49:65:5e:26:eb:0f:32:
                    ce:31:5b:3a:3c:54:3b:23:91:47:a7:a3:03:e6:47:
                    2c:70:aa:19:ed:4a:4b:75:5f:ac:bb:c6:cd:1d:cf:
                    d5:02:11:9c:40:c2:a3:0b:cf:72:89:cd:bf:80:fc:
                    d4:71:97:91:0c:ca:2b:21:d4:c2:2e:bf:b6:49:93:
                    f0:af:96:4f:21:c4:bd:4a:dd:7b:ba:46:15:41:da:
                    1d:71:14:dc:a9:5a:e2:f2:84:f7:da:fd:f7:0b:19:
                    26:6e:1c:36:aa:35:de:a5:cd:f2:d2:9e:44:1d:0c:
                    53:ea:c7:1e:68:29:79:b5:6e:a6:67:f5:4d:c0:e9:
                    0e:da:6c:9b:11:6f:63:27:a6:f2:8f:2d:7e:32:8e:
                    41:00:8f:04:cb:1f:13:aa:2b:e9:af:91:cb:c4:b9:
                    f7:0b:e9:83:2a:a3:63:04:f7:a3:68:d7:a4:96:36:
                    1f:90:07:83:e0:5e:7b:cc:db:05:5e:80:94:c4:df:
                    93:ff:18:79:f6:2a:5e:02:00:01:47:57:03:30:91:
                    90:5d:f0:71:fa:f3:81:56:20:19:b6:6f:41:14:1a:
                    12:67:f3:f4:28:d5:da:40:89:08:02:5f:91:9f:e5:
                    3d:63:44:b1:2f:96:7e:d9:86:07:99:51:76:c0:03:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:4D:BB:BF:3D:E1:2D:86:E5:0A:DC:C0:1E:58:18:BD:F0:F9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4704482b-fb42-33cc-82a3-2ed38c663fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6a:38:7e:04:98:50:23:e5:80:95:0e:1c:51:11:1c:ba:b3:
         08:46:15:4f:c2:dc:a2:75:db:22:0d:02:ef:47:b7:40:66:cb:
         88:9b:7b:a4:22:72:fa:ce:24:82:29:81:ac:45:9a:b8:bd:0f:
         b9:7c:9d:0c:4d:68:11:15:40:f0:f0:88:f3:d9:cd:a6:34:4e:
         03:45:ac:a5:1c:a5:80:f2:a2:bf:b5:be:6c:9c:13:27:66:f7:
         50:66:51:92:ed:76:c1:79:bb:42:0a:2e:7b:68:9c:ee:23:80:
         06:c8:67:7c:08:b0:8a:2a:e4:f3:85:e3:d5:f5:3f:79:07:bd:
         8b:fb:1f:3b:de:4d:e3:d7:1d:3c:82:4c:a2:d6:8b:01:14:3c:
         f0:29:d5:12:5c:9a:a9:73:bd:73:cd:d8:c4:c4:b8:a9:c2:fa:
         ba:58:4e:55:f2:5b:95:c1:ce:64:d5:2e:c4:4e:05:38:df:b7:
         61:b7:16:39:49:2e:5a:81:cd:ba:8e:9f:e6:96:fd:85:46:ff:
         29:ec:7a:b8:c4:3b:62:30:ac:4b:d2:a4:a5:af:5a:57:bf:06:
         6e:d7:60:0d:a6:b6:9b:4b:69:5c:dc:f9:4a:fc:47:36:9c:d0:
         3d:c2:ce:70:21:73:dd:33:36:60:ba:42:95:21:a0:de:ab:fe:
         8f:8a:e7:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMAiIQ8ba5K70XQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MjVlYWVhMDgtZmE5Ny00ZTU5LTg1ZGQtOWExNzIxODBlYTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Etsgq5NUllXibrDzLOMVs6PFQ7I5FHp6MD
5kcscKoZ7UpLdV+su8bNHc/VAhGcQMKjC89yic2/gPzUcZeRDMorIdTCLr+2SZPw
r5ZPIcS9St17ukYVQdodcRTcqVri8oT32v33Cxkmbhw2qjXepc3y0p5EHQxT6sce
aCl5tW6mZ/VNwOkO2mybEW9jJ6byjy1+Mo5BAI8Eyx8Tqivpr5HLxLn3C+mDKqNj
BPejaNekljYfkAeD4F57zNsFXoCUxN+T/xh59ipeAgABR1cDMJGQXfBx+vOBViAZ
tm9BFBoSZ/P0KNXaQIkIAl+Rn+U9Y0SxL5Z+2YYHmVF2wAMXRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFygTbu/PeEthuUK3MAeWBi98Pm0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDcwNDQ4MmItZmI0Mi0z
M2NjLTgyYTMtMmVkMzhjNjYzZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGFssMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBqOH4EmFAj5YCVDhxRERy6swhGFU/C3KJ12yINAu9Ht0Bmy4ibe6Qi
cvrOJIIpgaxFmri9D7l8nQxNaBEVQPDwiPPZzaY0TgNFrKUcpYDyor+1vmycEydm
91BmUZLtdsF5u0IKLntonO4jgAbIZ3wIsIoq5POF49X1P3kHvYv7HzveTePXHTyC
TKLWiwEUPPAp1RJcmqlzvXPN2MTEuKnC+rpYTlXyW5XBzmTVLsROBTjft2G3FjlJ
LlqBzbqOn+aW/YVG/ynserjEO2IwrEvSpKWvWle/Bm7XYA2mtptLaVzc+Ur8Rzac
0D3CznAhc90zNmC6QpUhoN6r/o+K5xw=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:54:52 2025 by rpki-client