Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49033362-ab4b-3cd7-8dbe-d0572a503081.roa
File:                     49033362-ab4b-3cd7-8dbe-d0572a503081.roa (raw, json)
Hash identifier:          KrG3yjnGYCR+s75IWyYZdthjpoMLGC3YWNCHLdkKGqU=
Subject key identifier:   A8:5A:63:D6:C4:B8:95:B9:70:0B:48:C4:57:91:A4:EB:4D:3A:DD:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6943517495471EB2048FA
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49033362-ab4b-3cd7-8dbe-d0572a503081.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        174.53.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:94:35:17:49:54:71:eb:20:48:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=44f687c2-b804-498a-a216-96de2bf5892c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:ba:ba:75:bd:f4:7d:60:fa:e4:4d:c2:da:
                    3d:ba:94:b8:70:2f:b9:41:61:2c:7f:99:80:b4:77:
                    be:f3:c5:14:fa:28:da:95:7b:50:cf:13:18:23:0e:
                    d9:a3:de:b5:8d:87:82:51:18:a8:ad:69:e1:a7:a0:
                    18:fc:43:4d:30:65:65:e2:3b:7e:7c:fb:25:db:12:
                    81:e5:c0:e0:fc:ba:1b:43:76:b9:41:e0:81:d1:1c:
                    df:af:d4:69:d7:ae:18:96:da:76:16:a4:ef:f1:3b:
                    dd:2a:6a:9a:9e:31:04:60:33:84:9e:f4:96:bf:15:
                    78:23:c3:e7:32:de:c4:d0:df:d6:81:23:5f:80:89:
                    82:a6:13:8f:5d:98:62:03:0e:ed:71:44:97:20:32:
                    d2:fe:e2:bc:1e:65:7e:35:9a:cb:09:f7:8f:5b:97:
                    86:93:6f:61:b6:82:9c:b9:29:7f:5a:41:a4:79:84:
                    4d:d8:1c:dc:6a:1a:49:7a:e1:b3:7a:6f:53:10:f2:
                    c9:6b:5d:13:b8:4b:42:70:83:8a:e3:1e:c4:05:dc:
                    e2:70:86:7a:d1:01:6e:12:01:93:70:20:e6:82:d3:
                    e5:b5:eb:5c:b8:cb:4c:d6:97:bf:d6:71:3f:76:aa:
                    f7:26:45:e6:7b:9f:c7:9c:e6:ae:de:dc:5f:3b:99:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5A:63:D6:C4:B8:95:B9:70:0B:48:C4:57:91:A4:EB:4D:3A:DD:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49033362-ab4b-3cd7-8dbe-d0572a503081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.53.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9b:22:e2:af:25:c1:81:a6:4d:53:39:2a:e3:65:80:50:9a:
         04:70:2e:f1:58:65:76:32:80:04:8a:a3:79:70:b3:50:c2:71:
         54:6d:fb:aa:00:04:37:07:13:34:e4:cf:28:e4:bc:7c:d6:21:
         00:3f:75:3a:cb:b8:11:1f:93:54:02:d3:6d:b0:42:63:ad:db:
         77:c3:f4:99:c5:5b:62:24:9a:46:85:0e:50:ad:96:fe:97:21:
         ff:39:c3:ab:cb:39:c4:f7:9d:31:7c:21:98:56:08:82:49:45:
         49:83:8e:be:50:f6:34:a4:b6:ed:97:0b:75:ba:fd:48:1d:48:
         b3:d2:96:57:2f:de:37:47:97:2f:a6:29:24:7a:19:6d:e7:7f:
         ab:6b:59:aa:c9:d9:7b:fc:8b:55:65:90:fd:49:c2:04:2d:84:
         c6:33:1c:60:4b:84:10:2f:19:c1:50:6c:96:b0:5e:34:63:37:
         89:23:de:62:ed:ee:b6:55:e3:f3:6c:e8:42:7a:96:02:66:6c:
         b3:0d:ca:62:6f:29:5a:11:43:22:30:77:10:88:e7:19:61:a9:
         b2:30:93:55:b1:09:26:f4:7b:e5:7c:39:a0:ee:c5:69:9f:5c:
         69:6a:9d:04:c2:21:3a:18:1b:a3:1b:10:6f:9f:5d:01:e7:76:
         77:48:21:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9ppQ1F0lUcesgSPowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NDRmNjg3YzItYjgwNC00OThhLWEyMTYtOTZkZTJiZjU4OTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC+6unW99H1g+uRNwto9upS4cC+5QWEsf5mA
tHe+88UU+ijalXtQzxMYIw7Zo961jYeCURiorWnhp6AY/ENNMGVl4jt+fPsl2xKB
5cDg/LobQ3a5QeCB0Rzfr9Rp164Yltp2FqTv8TvdKmqanjEEYDOEnvSWvxV4I8Pn
Mt7E0N/WgSNfgImCphOPXZhiAw7tcUSXIDLS/uK8HmV+NZrLCfePW5eGk29htoKc
uSl/WkGkeYRN2BzcahpJeuGzem9TEPLJa10TuEtCcIOK4x7EBdzicIZ60QFuEgGT
cCDmgtPltetcuMtM1pe/1nE/dqr3JkXme5/HnOau3txfO5msswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhaY9bEuJW5cAtIxFeRpOtNOt0FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDkwMzMzNjItYWI0Yi0z
Y2Q3LThkYmUtZDA1NzJhNTAzMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrjWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKmbIuKvJcGBpk1TOSrjZYBQmgRwLvFYZXYygASKo3lws1DCcVRt+6oA
BDcHEzTkzyjkvHzWIQA/dTrLuBEfk1QC022wQmOt23fD9JnFW2IkmkaFDlCtlv6X
If85w6vLOcT3nTF8IZhWCIJJRUmDjr5Q9jSktu2XC3W6/UgdSLPSllcv3jdHly+m
KSR6GW3nf6trWarJ2Xv8i1VlkP1JwgQthMYzHGBLhBAvGcFQbJawXjRjN4kj3mLt
7rZV4/Ns6EJ6lgJmbLMNymJvKVoRQyIwdxCI5xlhqbIwk1WxCSb0e+V8OaDuxWmf
XGlqnQTCIToYG6MbEG+fXQHndndIIRQ=
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:36:24 2025 by rpki-client