Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576fa5df-0947-3800-b805-03c03bb1dd25.roa
File:                     576fa5df-0947-3800-b805-03c03bb1dd25.roa (raw, json)
Hash identifier:          85Q+WoRMFi511atrbNSeJdUqhYE5376+uSPaoygCkdE=
Subject key identifier:   2F:40:26:30:18:0D:C5:AF:18:90:9F:E8:24:FB:4E:04:3C:F7:9C:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA8CA705F121A6913CA940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576fa5df-0947-3800-b805-03c03bb1dd25.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        76.20.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:8c:a7:05:f1:21:a6:91:3c:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=bbb666e0-fa1b-40ce-8149-97f41332eb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:0a:ef:17:03:11:3a:84:8c:c4:56:90:44:
                    94:34:2a:24:2b:bd:1e:8a:bd:42:d3:9a:0b:24:bc:
                    ac:be:dd:39:d2:d9:34:e7:c8:67:57:06:de:67:a1:
                    9e:63:ff:86:d4:ac:d2:9b:d0:9c:90:16:54:bb:7b:
                    b6:b3:54:dd:7e:f9:f5:55:0b:d9:8b:49:6f:d3:c1:
                    06:7a:b3:1e:1b:bb:bc:d2:09:2c:b5:43:ce:33:6c:
                    79:42:e9:dd:c8:38:26:ec:a3:b7:24:a0:84:aa:a2:
                    c0:eb:8a:2c:ad:57:4e:ae:38:e5:22:be:04:0b:2a:
                    52:ad:16:43:23:7b:49:55:86:73:b4:9d:37:bf:4c:
                    db:cc:a6:1d:af:61:14:1c:d6:4c:52:d5:b1:1b:82:
                    45:c4:27:8f:3c:9b:a7:4b:6b:b1:b3:b3:6c:ec:bb:
                    93:88:9a:5c:44:30:4f:95:e5:a9:01:19:d9:f9:aa:
                    6e:b1:ad:98:6c:b2:a3:21:c6:02:47:d4:13:fe:1b:
                    8e:5c:d9:4e:47:01:ef:f2:fb:3a:df:4b:f2:28:17:
                    3b:bd:2b:2b:d1:7d:3a:ae:12:b6:22:26:c2:92:17:
                    7b:75:92:c8:ce:80:6b:e5:c9:47:94:c6:28:0f:c8:
                    47:9c:02:16:3d:63:33:18:26:ea:f7:3e:47:5a:4c:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:26:30:18:0D:C5:AF:18:90:9F:E8:24:FB:4E:04:3C:F7:9C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576fa5df-0947-3800-b805-03c03bb1dd25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.20.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:52:7c:24:17:a1:97:73:45:54:55:46:44:68:eb:52:a7:28:
         15:e4:c2:15:0e:e0:68:34:72:26:a4:b3:2c:63:2a:67:18:5b:
         a7:57:86:5e:5a:10:75:45:3a:91:2a:f1:fc:2c:ff:92:b9:6d:
         f1:4e:ea:63:53:3f:cd:94:b2:62:f5:da:1b:f6:95:03:bc:d8:
         62:b5:5f:bc:a3:54:e2:53:1d:9f:5c:2b:5d:da:b0:3c:dc:06:
         3a:74:f0:65:c7:e7:a6:62:15:6b:54:fc:a0:59:98:8d:3a:40:
         a2:1b:a8:6d:9f:d2:5d:d0:fa:57:c2:69:66:9f:52:b8:ce:f6:
         19:5f:2c:19:b8:a4:0d:ae:bc:a0:0d:04:25:0e:91:96:7f:79:
         7a:f1:9b:4e:60:cc:41:15:41:73:43:0e:7a:d5:46:65:5e:2f:
         1e:e0:12:64:f2:ad:08:23:03:0c:08:d7:67:0a:c3:70:c2:da:
         a1:7c:f1:c9:0f:74:1a:3f:97:42:1a:4a:22:7b:59:ba:20:61:
         cc:1a:59:ee:6d:51:c6:53:c6:e9:4c:a2:0f:c0:07:7f:0e:29:
         bf:a2:d0:74:84:70:a2:d6:d8:07:9c:1a:0e:aa:b8:80:27:75:
         62:a3:06:d5:80:3d:f1:82:1c:6f:b9:12:59:03:de:ff:33:f3:
         b3:c9:a9:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqoynBfEhppE8qUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
YmJiNjY2ZTAtZmExYi00MGNlLTgxNDktOTdmNDEzMzJlYjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwMK7xcDETqEjMRWkESUNCokK70eir1C05oL
JLysvt050tk058hnVwbeZ6GeY/+G1KzSm9CckBZUu3u2s1Tdfvn1VQvZi0lv08EG
erMeG7u80gkstUPOM2x5QundyDgm7KO3JKCEqqLA64osrVdOrjjlIr4ECypSrRZD
I3tJVYZztJ03v0zbzKYdr2EUHNZMUtWxG4JFxCePPJunS2uxs7Ns7LuTiJpcRDBP
leWpARnZ+apusa2YbLKjIcYCR9QT/huOXNlORwHv8vs630vyKBc7vSsr0X06rhK2
IibCkhd7dZLIzoBr5clHlMYoD8hHnAIWPWMzGCbq9z5HWkxZlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9AJjAYDcWvGJCf6CT7TgQ895zPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTc2ZmE1ZGYtMDk0Ny0z
ODAwLWI4MDUtMDNjMDNiYjFkZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBSYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFSfCQXoZdzRVRVRkRo61KnKBXkwhUO4Gg0ciaksyxjKmcYW6dXhl5a
EHVFOpEq8fws/5K5bfFO6mNTP82UsmL12hv2lQO82GK1X7yjVOJTHZ9cK13asDzc
Bjp08GXH56ZiFWtU/KBZmI06QKIbqG2f0l3Q+lfCaWafUrjO9hlfLBm4pA2uvKAN
BCUOkZZ/eXrxm05gzEEVQXNDDnrVRmVeLx7gEmTyrQgjAwwI12cKw3DC2qF88ckP
dBo/l0IaSiJ7WbogYcwaWe5tUcZTxulMog/AB38OKb+i0HSEcKLW2AecGg6quIAn
dWKjBtWAPfGCHG+5ElkD3v8z87PJqV4=
-----END CERTIFICATE-----
Generated at Wed Oct 22 00:48:48 2025 by rpki-client