Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59ab0b56-ea84-3ddc-b21c-2bd278cad08c.roa
File:                     59ab0b56-ea84-3ddc-b21c-2bd278cad08c.roa (raw, json)
Hash identifier:          yG8E0Ve4KIRTdf8XHgGrtDcVUWHNCEgGDK5BWvKi93s=
Subject key identifier:   70:C5:CB:B7:8C:5A:2B:04:7A:FA:CC:17:47:95:1D:28:A0:70:63:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43060DAC57E43C8C0651600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59ab0b56-ea84-3ddc-b21c-2bd278cad08c.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        73.68.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:60:da:c5:7e:43:c8:c0:65:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=53a9dcd5-ed44-4731-bec5-f0ed4f1b9f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:39:8d:dc:98:a7:96:53:59:8f:51:57:85:
                    8f:b7:03:1d:cf:c0:16:08:ca:cf:b5:94:93:04:79:
                    28:f5:69:02:26:d8:d4:c3:ee:89:ad:9d:d8:c8:ed:
                    3b:ce:40:11:d1:25:16:4b:8e:4d:ad:8d:9d:6c:1d:
                    cf:f6:40:6a:a4:d6:7f:a0:d0:e4:62:2b:30:08:25:
                    30:39:d6:cb:33:10:66:fe:0b:21:f7:bf:5b:5b:e4:
                    45:08:d1:7f:66:7f:fc:15:35:bd:74:cc:a2:d2:15:
                    5f:63:95:1d:e9:e7:10:1f:73:42:38:82:00:8f:70:
                    97:71:9d:25:78:7c:cb:36:a4:1e:b1:b8:fd:91:22:
                    cf:75:bb:6d:3e:d3:f4:f2:97:fd:36:85:5b:37:31:
                    da:de:a1:7d:98:88:21:76:49:3e:c1:9d:97:5d:ef:
                    3b:5d:17:98:9a:cb:c2:43:4c:ce:31:70:02:bf:26:
                    89:8e:8d:8a:68:c6:cd:79:4c:1f:f9:4c:e3:e6:8d:
                    db:9d:61:1e:eb:ce:92:0a:dc:de:b7:59:b1:18:a1:
                    da:b7:90:e6:50:b9:a2:86:54:4d:e6:f4:8b:82:23:
                    b2:5b:7a:97:93:56:3d:18:f5:1c:da:08:1c:ad:52:
                    f8:f7:16:66:f3:c8:2c:38:ad:69:ad:78:ed:f7:1f:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:CB:B7:8C:5A:2B:04:7A:FA:CC:17:47:95:1D:28:A0:70:63:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59ab0b56-ea84-3ddc-b21c-2bd278cad08c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:45:4c:81:80:42:bb:8e:5b:bb:bd:da:0e:3d:ac:91:df:e4:
         5b:f7:b0:2b:a9:e6:f1:cb:23:95:19:c1:57:76:de:07:5e:52:
         9b:aa:be:2e:9a:f6:40:f4:80:fa:17:b7:c4:0f:a2:27:d0:29:
         1f:55:02:d0:94:ac:1a:a6:a9:7b:97:41:89:48:1a:31:68:00:
         04:91:16:1f:fa:d0:c2:3a:88:bd:d9:91:25:de:93:54:30:21:
         d4:02:fd:8e:14:d6:20:14:7f:db:7a:52:d3:8f:73:fc:f2:47:
         9e:3f:04:78:1f:ab:3a:c5:a7:e8:b9:fc:99:7b:f4:47:e5:6e:
         ad:7f:1e:ad:22:b0:6d:42:ad:98:bb:6a:7b:50:2e:62:eb:74:
         19:89:6b:d5:0a:de:16:1b:e5:24:4f:72:89:1c:ef:d4:e4:30:
         a2:9f:c5:41:d6:f6:a7:00:0c:8c:d6:80:1a:86:8f:0b:4c:d1:
         c2:c4:64:89:99:18:a8:9d:0b:15:e2:ac:40:ea:71:1a:8f:cf:
         4b:4a:03:6f:5d:f7:c2:1f:73:c1:34:1b:bb:69:a4:50:57:bd:
         0f:00:ef:b4:19:6d:62:af:9f:d9:00:60:95:c2:6b:49:47:1d:
         8a:bb:41:b8:0a:72:f1:3e:38:23:ba:8d:b2:f0:1b:be:4a:6d:
         4c:26:f7:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMGDaxX5DyMBlFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NTNhOWRjZDUtZWQ0NC00NzMxLWJlYzUtZjBlZDRmMWI5ZjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixE5jdyYp5ZTWY9RV4WPtwMdz8AWCMrPtZST
BHko9WkCJtjUw+6JrZ3YyO07zkAR0SUWS45NrY2dbB3P9kBqpNZ/oNDkYiswCCUw
OdbLMxBm/gsh979bW+RFCNF/Zn/8FTW9dMyi0hVfY5Ud6ecQH3NCOIIAj3CXcZ0l
eHzLNqQesbj9kSLPdbttPtP08pf9NoVbNzHa3qF9mIghdkk+wZ2XXe87XReYmsvC
Q0zOMXACvyaJjo2KaMbNeUwf+Uzj5o3bnWEe686SCtzet1mxGKHat5DmULmihlRN
5vSLgiOyW3qXk1Y9GPUc2ggcrVL49xZm88gsOK1prXjt9x+zlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDFy7eMWisEevrMF0eVHSigcGMlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTlhYjBiNTYtZWE4NC0z
ZGRjLWIyMWMtMmJkMjc4Y2FkMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUR9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFFTIGAQruOW7u92g49rJHf5Fv3sCup5vHLI5UZwVd23gdeUpuqvi6a
9kD0gPoXt8QPoifQKR9VAtCUrBqmqXuXQYlIGjFoAASRFh/60MI6iL3ZkSXek1Qw
IdQC/Y4U1iAUf9t6UtOPc/zyR54/BHgfqzrFp+i5/Jl79Eflbq1/Hq0isG1CrZi7
antQLmLrdBmJa9UK3hYb5SRPcokc79TkMKKfxUHW9qcADIzWgBqGjwtM0cLEZImZ
GKidCxXirEDqcRqPz0tKA29d98Ifc8E0G7tppFBXvQ8A77QZbWKvn9kAYJXCa0lH
HYq7QbgKcvE+OCO6jbLwG75KbUwm96s=
-----END CERTIFICATE-----
Generated at Tue Jun 3 04:58:58 2025 by rpki-client