Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4988d594-47e1-30f4-b5f6-de00626d3a85.roa
File:                     4988d594-47e1-30f4-b5f6-de00626d3a85.roa (raw, json)
Hash identifier:          gx7fS1tx6mr6sKre0wTsiNqWWHhXaDC7H8wHnMydDnY=
Subject key identifier:   8C:6C:64:5B:2B:8E:1A:58:39:8E:7C:DC:14:BD:0B:BE:96:8B:AD:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D432673EBDE03CCDBBC05200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4988d594-47e1-30f4-b5f6-de00626d3a85.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        76.30.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:67:3e:bd:e0:3c:cd:bb:c0:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f047ce70-c035-4c5d-9ae9-0ce6432869c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:f7:b8:ea:78:2b:9b:c2:6f:28:99:d7:a6:
                    52:33:08:27:6a:67:5c:2f:50:65:3e:3a:96:80:16:
                    a3:87:14:2a:2f:34:1d:bf:5b:da:07:77:c5:0d:3c:
                    7d:21:82:04:d0:5d:d5:51:96:d5:89:09:01:2e:ce:
                    dc:53:1f:0d:5d:b3:e2:72:7d:bf:5b:29:bc:b1:b0:
                    e9:42:80:c7:12:34:dd:7f:a8:9d:e7:4c:d1:cb:57:
                    3e:1c:e9:30:10:0b:7b:51:49:77:2b:7d:85:a7:48:
                    24:7f:dd:d8:b6:45:ea:e0:c5:34:ed:8c:fe:4f:9b:
                    a3:a7:cc:b7:c4:20:0f:0e:45:17:b4:32:43:3c:8b:
                    b4:78:74:c3:79:26:0a:18:30:73:7f:5c:09:27:ac:
                    dd:34:c0:fd:0d:44:4d:a2:e6:2e:13:37:bd:1a:ca:
                    3c:e8:df:cb:d4:5a:8a:e3:43:09:2f:e7:3e:d7:d0:
                    3b:f3:73:61:5a:44:c6:65:c6:2d:6a:82:69:fc:b4:
                    a4:c3:07:19:9f:bd:46:ff:08:86:97:ca:5e:bb:ef:
                    17:c3:8f:71:1e:f2:9d:81:b0:dd:32:40:e7:70:8a:
                    7b:7d:2e:eb:aa:6f:ad:d9:61:05:a2:a0:9c:4e:e9:
                    a7:70:3a:55:d5:cd:10:b7:d8:2c:9a:3a:8d:98:96:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6C:64:5B:2B:8E:1A:58:39:8E:7C:DC:14:BD:0B:BE:96:8B:AD:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4988d594-47e1-30f4-b5f6-de00626d3a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.30.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:95:d0:c5:43:95:62:5c:74:7f:07:c3:83:97:14:64:7e:a2:
         43:e2:cc:f1:f9:db:04:90:17:36:99:b0:cf:f5:45:1d:fb:c4:
         5c:84:40:3e:ce:c3:f0:78:84:4b:ad:f8:62:88:da:d8:52:23:
         48:22:b1:84:d3:15:b9:ee:ae:11:ea:e2:31:c3:28:c4:e5:f5:
         f5:f9:e6:4f:3e:94:f0:6d:e5:03:af:3e:32:d5:ad:fd:77:da:
         3e:69:32:bc:44:73:51:4c:3a:0e:4e:e3:7e:92:80:39:df:38:
         2a:a2:9c:39:33:5f:1c:3f:8a:f6:2e:d4:72:5f:0b:8b:8d:29:
         98:d3:5e:c2:af:5f:e8:61:61:d1:8d:80:36:ff:1e:9f:e5:a3:
         64:3a:af:35:26:f0:d3:ec:f0:4b:77:5f:b0:32:eb:a1:7b:2f:
         6e:02:4b:cc:d5:82:75:ca:ff:d4:4c:fb:f5:55:87:c8:a8:e1:
         e5:2d:4c:22:00:95:f5:e3:fb:1b:b5:bb:d5:09:e8:47:b8:fa:
         91:89:b0:fd:1f:23:d4:d4:b4:39:e5:ec:b7:7a:af:86:50:79:
         bd:f5:bd:4c:cf:80:b1:c5:10:61:4b:c3:20:1d:15:f3:a3:20:
         aa:ce:72:27:7e:16:30:c1:c7:bc:f5:02:67:8a:88:1b:60:70:
         8b:13:47:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMmc+veA8zbvAUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjA0N2NlNzAtYzAzNS00YzVkLTlhZTktMGNlNjQzMjg2OWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B33uOp4K5vCbyiZ16ZSMwgnamdcL1BlPjqW
gBajhxQqLzQdv1vaB3fFDTx9IYIE0F3VUZbViQkBLs7cUx8NXbPicn2/Wym8sbDp
QoDHEjTdf6id50zRy1c+HOkwEAt7UUl3K32Fp0gkf93YtkXq4MU07Yz+T5ujp8y3
xCAPDkUXtDJDPIu0eHTDeSYKGDBzf1wJJ6zdNMD9DURNouYuEze9Gso86N/L1FqK
40MJL+c+19A783NhWkTGZcYtaoJp/LSkwwcZn71G/wiGl8peu+8Xw49xHvKdgbDd
MkDncIp7fS7rqm+t2WEFoqCcTumncDpV1c0Qt9gsmjqNmJaw3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIxsZFsrjhpYOY583BS9C76Wi60MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDk4OGQ1OTQtNDdlMS0z
MGY0LWI1ZjYtZGUwMDYyNmQzYTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTB5WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHaV0MVDlWJcdH8Hw4OXFGR+okPizPH52wSQFzaZsM/1RR37xFyEQD7O
w/B4hEut+GKI2thSI0gisYTTFbnurhHq4jHDKMTl9fX55k8+lPBt5QOvPjLVrf13
2j5pMrxEc1FMOg5O436SgDnfOCqinDkzXxw/ivYu1HJfC4uNKZjTXsKvX+hhYdGN
gDb/Hp/lo2Q6rzUm8NPs8Et3X7Ay66F7L24CS8zVgnXK/9RM+/VVh8io4eUtTCIA
lfXj+xu1u9UJ6Ee4+pGJsP0fI9TUtDnl7Ld6r4ZQeb31vUzPgLHFEGFLwyAdFfOj
IKrOcid+FjDBx7z1AmeKiBtgcIsTRyU=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:54:48 2025 by rpki-client