Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bfb8b90-ea85-3cbf-923b-ed6a3eb4f229.roa
File:                     4bfb8b90-ea85-3cbf-923b-ed6a3eb4f229.roa (raw, json)
Hash identifier:          NDfGWM/Xfeg2Glto3wFfM+F230FX8yRZY84NSRF487c=
Subject key identifier:   C3:4C:9C:F0:17:03:59:D9:B5:8F:96:8F:6E:85:F4:8F:E5:19:E6:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8459A35F7847261298340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bfb8b90-ea85-3cbf-923b-ed6a3eb4f229.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        76.115.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:45:9a:35:f7:84:72:61:29:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=5f4b9d63-0b49-4b27-9ad2-80ed0b65b169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:82:da:a4:df:18:3a:12:1a:95:c7:c7:59:
                    d8:47:8d:c0:24:a4:aa:c9:40:27:65:89:d4:e1:8f:
                    46:f3:0b:04:17:03:ee:b9:0d:d5:c6:10:5f:4c:aa:
                    1d:75:99:d1:25:43:b5:78:53:6b:fb:e7:86:b1:bb:
                    5d:e3:7e:80:aa:ab:cf:7a:8f:f1:c4:c1:43:11:d6:
                    ae:bb:79:a3:f8:51:f2:d4:50:6f:69:85:72:ad:d1:
                    9c:ec:d6:82:48:1e:3e:27:2e:1c:37:ff:68:96:db:
                    57:d0:14:8d:ac:71:ff:d7:e3:13:73:a1:86:42:6b:
                    1b:0c:8e:0f:49:29:63:53:d4:4d:a6:bf:b0:dc:b5:
                    55:cb:a8:fc:99:20:9c:41:19:95:72:de:4c:0d:19:
                    02:a3:32:9c:06:6f:15:bc:78:ea:ef:d1:68:77:25:
                    1f:10:e7:4f:63:68:5b:45:63:2e:aa:77:d0:e0:14:
                    82:0a:e8:a3:7c:93:4f:f6:ce:87:ef:c3:fe:a9:e0:
                    41:60:64:df:46:4e:65:b6:ee:d3:33:4d:f2:a4:e3:
                    5e:f9:98:de:ee:fd:63:90:fc:10:bb:54:01:c8:7e:
                    ce:10:5c:94:f0:92:9a:88:1a:bc:7b:59:82:72:0e:
                    1d:54:54:57:48:5d:a8:f5:c5:f4:49:63:47:30:bc:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4C:9C:F0:17:03:59:D9:B5:8F:96:8F:6E:85:F4:8F:E5:19:E6:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bfb8b90-ea85-3cbf-923b-ed6a3eb4f229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:94:d3:16:97:22:c6:14:45:b0:2c:6f:41:c2:76:60:10:f7:
         03:e1:18:d2:f4:54:f0:6c:d0:63:e3:a6:96:f6:59:e7:b4:53:
         9c:c7:1e:77:53:65:a5:c4:40:55:4f:0f:e3:18:7c:a7:90:01:
         1e:a2:d2:53:91:4b:27:6d:b9:15:6f:f8:c5:27:3b:dd:56:c1:
         6b:c5:8d:8f:25:a3:a7:96:44:b4:e1:20:6b:73:0f:5b:47:54:
         e0:e0:e1:48:5d:44:17:b2:7f:d4:cf:1d:7e:22:56:27:a3:4e:
         aa:5c:96:6c:46:f0:10:97:39:ec:e4:d8:dc:27:f8:c6:6a:33:
         a4:31:2d:e9:0b:f2:fd:cc:04:bd:68:e2:ce:26:26:30:56:13:
         2c:68:3e:94:c1:83:4e:d3:59:aa:82:2e:95:08:a2:13:0d:6c:
         93:70:70:b4:9c:36:c3:e8:85:2b:3f:3d:3a:20:cd:85:a4:1e:
         21:1f:5c:9a:bb:d0:ee:f1:91:bc:15:e6:43:1f:19:13:58:d3:
         73:ec:e1:c7:f1:81:2e:bf:65:4b:9d:4c:7b:92:78:d2:1a:61:
         9a:88:76:9f:26:c6:df:59:fa:1f:5a:95:c0:0e:f8:a8:44:e5:
         2b:69:23:7c:fb:63:e5:50:05:19:92:38:42:85:9e:5b:ee:60:
         7e:cc:74:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+EWaNfeEcmEpg0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NWY0YjlkNjMtMGI0OS00YjI3LTlhZDItODBlZDBiNjViMTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPSC2qTfGDoSGpXHx1nYR43AJKSqyUAnZYnU
4Y9G8wsEFwPuuQ3VxhBfTKoddZnRJUO1eFNr++eGsbtd436AqqvPeo/xxMFDEdau
u3mj+FHy1FBvaYVyrdGc7NaCSB4+Jy4cN/9olttX0BSNrHH/1+MTc6GGQmsbDI4P
SSljU9RNpr+w3LVVy6j8mSCcQRmVct5MDRkCozKcBm8VvHjq79FodyUfEOdPY2hb
RWMuqnfQ4BSCCuijfJNP9s6H78P+qeBBYGTfRk5ltu7TM03ypONe+Zje7v1jkPwQ
u1QByH7OEFyU8JKaiBq8e1mCcg4dVFRXSF2o9cX0SWNHMLy9owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNMnPAXA1nZtY+Wj26F9I/lGeYpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGJmYjhiOTAtZWE4NS0z
Y2JmLTkyM2ItZWQ2YTNlYjRmMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHPUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGiU0xaXIsYURbAsb0HCdmAQ9wPhGNL0VPBs0GPjppb2Wee0U5zHHndT
ZaXEQFVPD+MYfKeQAR6i0lORSydtuRVv+MUnO91WwWvFjY8lo6eWRLThIGtzD1tH
VODg4UhdRBeyf9TPHX4iViejTqpclmxG8BCXOezk2Nwn+MZqM6QxLekL8v3MBL1o
4s4mJjBWEyxoPpTBg07TWaqCLpUIohMNbJNwcLScNsPohSs/PTogzYWkHiEfXJq7
0O7xkbwV5kMfGRNY03Ps4cfxgS6/ZUudTHuSeNIaYZqIdp8mxt9Z+h9alcAO+KhE
5StpI3z7Y+VQBRmSOEKFnlvuYH7MdNU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:23 2025 by rpki-client