Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/499716af-8e1c-302b-9e89-677a59f8c2a3.roa
File:                     499716af-8e1c-302b-9e89-677a59f8c2a3.roa (raw, json)
Hash identifier:          TArfpsyES3KRYF3tg70LsVtSNmfMdSEwP0sMAz9MRJ8=
Subject key identifier:   F2:F7:EB:08:B5:A9:0B:36:04:78:B4:EC:14:20:85:76:C8:2A:39:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4316A95626AD9F9C6D3E940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/499716af-8e1c-302b-9e89-677a59f8c2a3.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.63.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:6a:95:62:6a:d9:f9:c6:d3:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=9bf3ce1a-ea2c-422a-9f0c-72f5adf7d5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:c0:9b:74:65:2a:1b:2f:f6:3a:72:09:62:
                    44:30:f2:c2:45:41:4a:2e:f4:58:ea:8c:6f:7d:cc:
                    43:c0:e2:ad:0d:cc:29:16:17:6d:75:50:e0:07:35:
                    5e:38:a4:9b:e1:cd:13:e6:21:86:4d:23:2e:1d:2e:
                    79:9c:34:55:8c:9d:13:6a:32:c6:54:1e:fa:ae:ce:
                    a4:8e:f0:9e:43:71:64:13:72:5c:af:62:91:7d:b2:
                    b2:78:33:43:42:7e:e4:ce:73:13:b7:72:ba:c7:ae:
                    9f:8c:03:d3:7b:8b:cb:bb:a9:b7:73:7b:d4:cc:4e:
                    29:14:c9:cc:16:b8:a7:d9:e2:aa:35:79:28:cd:d3:
                    6b:db:a3:fb:24:c6:26:1a:04:8c:08:7d:b6:b5:be:
                    ec:cc:54:c2:41:c7:7c:a0:65:26:19:6d:3f:38:f3:
                    44:17:d6:a9:94:69:ff:4c:24:77:d7:d9:a9:01:6d:
                    6e:ec:63:43:20:89:0b:34:b5:fe:f7:07:b2:b8:68:
                    ca:01:a6:fd:da:1c:54:fa:5d:62:3a:4e:fc:50:57:
                    1e:21:f6:fd:3c:ca:9e:6b:47:92:cb:dc:89:5b:89:
                    bf:ff:bc:8e:f2:2f:8c:2c:a5:f3:0c:a6:2d:d7:29:
                    0a:60:86:bc:f2:61:5b:65:8b:14:86:d2:3d:ea:35:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F7:EB:08:B5:A9:0B:36:04:78:B4:EC:14:20:85:76:C8:2A:39:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/499716af-8e1c-302b-9e89-677a59f8c2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:34:00:af:28:29:0f:bd:55:ca:ee:4f:5c:5b:41:10:19:33:
         36:f5:f0:f4:c2:ad:50:a2:3d:9d:01:5c:23:51:e0:a8:68:aa:
         59:c2:2a:2e:84:ec:79:69:f3:6f:1f:62:0b:16:76:21:47:5f:
         28:8c:1e:21:70:d3:f7:32:53:1e:1e:04:b1:d1:d3:cf:94:2d:
         b1:38:1c:d7:a5:5d:c7:1a:97:41:58:df:fa:9e:d5:74:0f:d8:
         4b:ed:9a:9f:20:16:90:49:f8:92:eb:c9:4c:28:22:50:5b:38:
         0a:fa:6d:d4:22:b0:1f:5e:ea:66:27:45:41:51:82:7f:0d:1e:
         e6:f0:6e:98:50:c3:40:22:bf:26:80:db:72:5f:cc:bb:e0:c3:
         6b:22:f9:01:42:02:70:0c:ef:4a:fc:90:e9:e4:2f:fd:b3:f4:
         53:ea:9d:dc:81:0a:50:0e:65:9f:a3:0b:91:04:e6:b4:0e:18:
         b3:c2:92:d3:1e:24:a9:86:3a:27:f4:50:3b:6f:b8:e6:ca:3d:
         ba:5a:a7:6c:3a:71:37:15:da:0c:8f:9f:8d:ea:67:e3:28:ee:
         76:3c:34:07:9c:fc:81:d1:4b:c1:92:17:63:e5:74:89:41:86:
         de:31:70:63:ef:36:7e:c5:0d:79:f7:24:77:16:e6:24:0d:87:
         87:48:8f:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMWqVYmrZ+cbT6UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OWJmM2NlMWEtZWEyYy00MjJhLTlmMGMtNzJmNWFkZjdkNWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyvAm3RlKhsv9jpyCWJEMPLCRUFKLvRY6oxv
fcxDwOKtDcwpFhdtdVDgBzVeOKSb4c0T5iGGTSMuHS55nDRVjJ0TajLGVB76rs6k
jvCeQ3FkE3Jcr2KRfbKyeDNDQn7kznMTt3K6x66fjAPTe4vLu6m3c3vUzE4pFMnM
Frin2eKqNXkozdNr26P7JMYmGgSMCH22tb7szFTCQcd8oGUmGW0/OPNEF9aplGn/
TCR319mpAW1u7GNDIIkLNLX+9weyuGjKAab92hxU+l1iOk78UFceIfb9PMqea0eS
y9yJW4m//7yO8i+MLKXzDKYt1ykKYIa88mFbZYsUhtI96jWDQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPL36wi1qQs2BHi07BQghXbIKjnzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDk5NzE2YWYtOGUxYy0z
MDJiLTllODktNjc3YTU5ZjhjMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGD9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACk0AK8oKQ+9VcruT1xbQRAZMzb18PTCrVCiPZ0BXCNR4KhoqlnCKi6E
7Hlp828fYgsWdiFHXyiMHiFw0/cyUx4eBLHR08+ULbE4HNelXccal0FY3/qe1XQP
2Evtmp8gFpBJ+JLryUwoIlBbOAr6bdQisB9e6mYnRUFRgn8NHubwbphQw0AivyaA
23JfzLvgw2si+QFCAnAM70r8kOnkL/2z9FPqndyBClAOZZ+jC5EE5rQOGLPCktMe
JKmGOif0UDtvuObKPbpap2w6cTcV2gyPn43qZ+Mo7nY8NAec/IHRS8GSF2PldIlB
ht4xcGPvNn7FDXn3JHcW5iQNh4dIj90=
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:17:55 2025 by rpki-client