Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cac2f2f-b57f-30e0-8ebb-8deae300ddaf.roa
File:                     4cac2f2f-b57f-30e0-8ebb-8deae300ddaf.roa (raw, json)
Hash identifier:          dBY0FGuWz11PHyaAayktpdrnuFAreJgvxovppWTqhFU=
Subject key identifier:   A8:2A:13:AC:88:A5:EE:54:4D:89:7B:9D:19:5A:01:81:AA:8E:CA:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430BD2E5B7DFF30E25F0400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cac2f2f-b57f-30e0-8ebb-8deae300ddaf.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        68.59.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:bd:2e:5b:7d:ff:30:e2:5f:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=24c3d4a6-e744-4e63-85eb-705419955e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:9a:e4:74:86:d9:e9:d0:34:7d:ef:4e:88:
                    7f:e5:5b:e5:16:d0:63:48:b8:67:c6:68:36:b1:b7:
                    7a:23:f6:10:0c:b7:2b:67:25:4f:2f:70:07:e6:f2:
                    d3:24:35:a6:5f:09:94:3d:da:62:f0:14:d1:f2:f6:
                    de:eb:9a:2d:fe:36:66:c4:d0:5d:ce:23:a5:01:0d:
                    00:2f:8f:e0:17:ec:3f:78:bc:d4:15:34:0d:c4:50:
                    0f:d4:df:28:87:ad:18:c4:4f:c1:1d:3f:cd:79:6e:
                    72:2f:21:60:53:da:51:5c:ef:71:fe:a8:32:99:0a:
                    73:68:5d:ba:cd:91:d6:3d:4b:23:c4:f3:5d:f0:d5:
                    65:34:2b:78:b7:14:a9:12:53:ca:ae:38:94:c6:e2:
                    8d:87:a4:9f:0d:43:d5:73:88:e8:40:7f:1f:0a:a1:
                    eb:e2:25:65:70:7d:60:7c:2e:c6:bb:e1:e2:21:c3:
                    5b:84:c2:55:91:5d:56:6d:3b:7a:4c:ee:0c:76:8a:
                    a7:4d:4d:ef:a6:ad:8d:f5:7e:0c:bd:73:92:c7:da:
                    64:fb:30:bb:e7:60:8e:98:af:7d:fb:55:75:03:bf:
                    a9:ea:ba:47:27:aa:b2:2d:9c:5a:5a:12:10:ec:fb:
                    61:96:65:df:dc:4e:8e:2d:50:24:3a:90:74:2b:ae:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2A:13:AC:88:A5:EE:54:4D:89:7B:9D:19:5A:01:81:AA:8E:CA:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cac2f2f-b57f-30e0-8ebb-8deae300ddaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:8f:a0:f4:7c:61:b5:2f:08:6c:5b:25:3a:ea:e5:09:e3:31:
         1a:19:f4:ea:03:3d:5b:22:17:c3:bc:1f:56:c2:61:ab:a6:7e:
         87:f0:8d:4f:e8:f5:99:de:d0:f5:ad:73:01:aa:92:6e:89:4b:
         e1:e5:86:68:3e:2c:cf:b7:c8:28:2f:49:33:2f:e4:71:95:2b:
         e6:cc:4d:2c:d3:d6:4c:80:33:ab:74:11:a5:67:70:b6:d4:30:
         17:98:75:6c:3f:79:8c:64:66:10:1b:29:8b:7a:7e:19:ee:10:
         97:ea:21:75:f5:7e:c3:c8:d1:0b:c5:a0:f9:36:d9:45:ce:29:
         35:73:7c:0d:c3:06:98:ef:f4:2e:24:d8:55:78:85:2d:a3:30:
         12:14:4f:72:36:03:a9:4b:7a:81:85:18:f7:ab:e5:21:4e:9b:
         7c:e4:f5:47:cb:3a:7c:4c:bc:f0:47:36:f1:62:a7:8d:b5:0f:
         4e:e3:27:fc:86:ab:03:00:fa:a3:1a:21:a7:25:11:5a:69:7a:
         29:79:58:0b:8c:45:91:30:31:cd:bf:18:61:c5:9e:9a:53:f1:
         95:33:a5:c9:ea:07:2d:cd:a6:f1:f7:01:fe:4b:59:1f:1b:0d:
         31:89:d2:4a:24:52:cd:2f:cf:67:d0:28:fa:ee:de:25:63:68:
         43:8b:b4:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUML0uW33/MOJfBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MjRjM2Q0YTYtZTc0NC00ZTYzLTg1ZWItNzA1NDE5OTU1ZTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+ya5HSG2enQNH3vToh/5VvlFtBjSLhnxmg2
sbd6I/YQDLcrZyVPL3AH5vLTJDWmXwmUPdpi8BTR8vbe65ot/jZmxNBdziOlAQ0A
L4/gF+w/eLzUFTQNxFAP1N8oh60YxE/BHT/NeW5yLyFgU9pRXO9x/qgymQpzaF26
zZHWPUsjxPNd8NVlNCt4txSpElPKrjiUxuKNh6SfDUPVc4joQH8fCqHr4iVlcH1g
fC7Gu+HiIcNbhMJVkV1WbTt6TO4MdoqnTU3vpq2N9X4MvXOSx9pk+zC752COmK99
+1V1A7+p6rpHJ6qyLZxaWhIQ7PthlmXf3E6OLVAkOpB0K65xVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgqE6yIpe5UTYl7nRlaAYGqjspbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNhYzJmMmYtYjU3Zi0z
MGUwLThlYmItOGRlYWUzMDBkZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDsUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANyPoPR8YbUvCGxbJTrq5QnjMRoZ9OoDPVsiF8O8H1bCYaumfofwjU/o
9Zne0PWtcwGqkm6JS+Hlhmg+LM+3yCgvSTMv5HGVK+bMTSzT1kyAM6t0EaVncLbU
MBeYdWw/eYxkZhAbKYt6fhnuEJfqIXX1fsPI0QvFoPk22UXOKTVzfA3DBpjv9C4k
2FV4hS2jMBIUT3I2A6lLeoGFGPer5SFOm3zk9UfLOnxMvPBHNvFip421D07jJ/yG
qwMA+qMaIaclEVppeil5WAuMRZEwMc2/GGHFnppT8ZUzpcnqBy3NpvH3Af5LWR8b
DTGJ0kokUs0vz2fQKPru3iVjaEOLtP0=
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:47:58 2025 by rpki-client