Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5be3f563-b647-3be5-bbc4-91b6f1b13390.roa
File:                     5be3f563-b647-3be5-bbc4-91b6f1b13390.roa (raw, json)
Hash identifier:          UNELwrZf2In/4DPhV96Qei3Wfuwo5exXGV8csQxkdHM=
Subject key identifier:   9B:FE:4E:33:03:7B:5E:F9:FC:F4:7E:64:AD:ED:7E:61:E7:8F:3E:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7868DE14052A747148600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5be3f563-b647-3be5-bbc4-91b6f1b13390.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.37.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:86:8d:e1:40:52:a7:47:14:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=2fa5715e-afb9-4888-a8ef-a19720e8abe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:14:0a:04:fa:e4:78:62:3b:2a:a1:44:23:3c:
                    50:f3:ce:c7:12:84:c0:de:9d:ac:f7:6c:1a:77:9b:
                    a2:9d:91:15:f4:d3:0e:e8:90:14:94:e4:bf:31:03:
                    de:da:27:8c:4a:29:9a:9b:72:95:bf:82:f8:8a:f1:
                    53:89:d2:e2:37:c7:26:74:b0:a1:f9:0c:f9:c0:00:
                    67:35:50:1a:cd:25:40:93:1f:fc:f4:a4:94:a4:2e:
                    3a:95:a4:25:e1:13:d8:0f:cd:62:dc:1c:12:db:69:
                    12:52:ae:1a:0a:1f:49:88:03:5d:66:50:3e:03:03:
                    14:82:1a:78:77:b6:89:7e:62:78:73:8c:ac:d8:96:
                    71:1d:bf:c0:a9:de:c0:4a:3a:a7:a7:bd:25:0b:fc:
                    e4:4c:ce:4b:1e:10:d3:00:dd:ca:cc:2e:3e:15:87:
                    51:d9:a0:c1:7a:6f:79:39:78:3c:fc:2c:18:6a:cd:
                    b9:e6:4d:25:1e:41:18:98:4e:58:6e:9f:b3:69:82:
                    18:b3:b1:b5:3b:ab:46:24:8c:4a:12:84:b4:d2:98:
                    98:02:9c:c5:c6:16:5d:49:67:66:77:ce:1e:e8:d3:
                    be:a0:fb:66:fb:29:34:0e:a4:26:4d:a6:cb:81:88:
                    db:17:3a:b9:2b:d3:24:30:06:cf:85:2c:f8:07:cc:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FE:4E:33:03:7B:5E:F9:FC:F4:7E:64:AD:ED:7E:61:E7:8F:3E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5be3f563-b647-3be5-bbc4-91b6f1b13390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:d9:54:5b:e2:86:9d:c7:c4:be:5c:1f:86:a2:85:94:01:33:
         fb:ea:5f:46:f2:88:f8:b8:42:0c:25:52:89:49:0c:23:69:94:
         23:11:38:32:72:4c:50:bc:58:c6:2e:33:c2:af:cc:04:8c:89:
         72:fe:0c:43:f1:70:53:3b:88:4d:27:4e:ac:0d:b2:6e:db:9f:
         fb:7d:d0:7d:9c:17:06:61:0f:c4:67:4d:bc:86:47:62:95:3c:
         d7:80:11:6c:b8:97:40:35:b1:7c:33:aa:97:3f:69:5c:01:a7:
         89:32:73:2b:a8:f8:8f:d1:0a:44:d6:c4:93:bc:d8:2e:ef:c9:
         fe:8b:e4:2c:3b:40:95:bc:96:6a:49:9d:15:f7:ed:bd:c6:5c:
         43:97:69:32:df:44:04:87:f3:20:63:c4:72:60:e3:5f:8d:41:
         f1:b4:cb:33:6e:19:48:43:cc:ee:0a:a0:89:59:e4:a2:43:37:
         33:0f:2e:59:56:cc:4b:cd:71:8a:bf:d0:83:c8:95:13:8e:57:
         7f:91:b0:3c:6f:47:f5:c7:3c:ee:95:b4:70:db:2b:28:fd:99:
         21:d1:16:b6:34:75:db:f5:e8:1c:60:b5:ea:db:ce:ca:02:55:
         8c:bd:f1:8c:90:dd:44:b4:9e:bd:9e:60:a7:fe:b5:d2:9d:b1:
         de:43:08:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094aN4UBSp0cUhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MmZhNTcxNWUtYWZiOS00ODg4LWE4ZWYtYTE5NzIwZThhYmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBQKBPrkeGI7KqFEIzxQ887HEoTA3p2s92wa
d5uinZEV9NMO6JAUlOS/MQPe2ieMSimam3KVv4L4ivFTidLiN8cmdLCh+Qz5wABn
NVAazSVAkx/89KSUpC46laQl4RPYD81i3BwS22kSUq4aCh9JiANdZlA+AwMUghp4
d7aJfmJ4c4ys2JZxHb/Aqd7ASjqnp70lC/zkTM5LHhDTAN3KzC4+FYdR2aDBem95
OXg8/CwYas255k0lHkEYmE5Ybp+zaYIYs7G1O6tGJIxKEoS00piYApzFxhZdSWdm
d84e6NO+oPtm+yk0DqQmTabLgYjbFzq5K9MkMAbPhSz4B8zHdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJv+TjMDe175/PR+ZK3tfmHnjz6PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJlM2Y1NjMtYjY0Ny0z
YmU1LWJiYzQtOTFiNmYxYjEzMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCVoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANXZVFvihp3HxL5cH4aihZQBM/vqX0byiPi4QgwlUolJDCNplCMRODJy
TFC8WMYuM8KvzASMiXL+DEPxcFM7iE0nTqwNsm7bn/t90H2cFwZhD8RnTbyGR2KV
PNeAEWy4l0A1sXwzqpc/aVwBp4kycyuo+I/RCkTWxJO82C7vyf6L5Cw7QJW8lmpJ
nRX37b3GXEOXaTLfRASH8yBjxHJg41+NQfG0yzNuGUhDzO4KoIlZ5KJDNzMPLllW
zEvNcYq/0IPIlROOV3+RsDxvR/XHPO6VtHDbKyj9mSHRFrY0ddv16BxgterbzsoC
VYy98YyQ3US0nr2eYKf+tdKdsd5DCI8=
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:11:22 2025 by rpki-client