Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f841900-45c2-3e6e-a3c4-64360a24b3a4.roa
File:                     6f841900-45c2-3e6e-a3c4-64360a24b3a4.roa (raw, json)
Hash identifier:          pDgq2H99vRu++r5kfg54smTtpc4qWgx/olaiQ48b03Y=
Subject key identifier:   E3:5E:35:D9:DE:64:5E:01:F9:98:31:FE:93:CC:0B:BF:71:E5:AF:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0AE87DBA53F9408546480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f841900-45c2-3e6e-a3c4-64360a24b3a4.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        76.111.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:ae:87:db:a5:3f:94:08:54:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=0c2a917a-37ff-43f0-82a7-ff39f20cb804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:13:10:e9:be:f7:16:b6:28:03:14:39:0d:
                    e4:d2:91:a3:b6:04:0e:14:01:47:cb:83:22:12:3a:
                    5d:95:42:c7:c9:e1:89:96:b5:1f:f6:c2:2a:c7:35:
                    12:82:62:b0:48:dc:d1:c7:31:cc:be:77:55:73:7c:
                    92:47:78:b5:d9:6c:b7:32:00:38:1f:dd:06:a7:13:
                    26:fa:b2:8e:b8:64:b7:a8:b8:a9:7d:69:a4:60:13:
                    41:3f:50:bc:67:d2:6f:06:6d:92:b1:43:99:8f:71:
                    91:b4:c5:81:e7:c2:2d:b0:fc:d4:f1:d8:b9:76:aa:
                    4b:1b:b5:76:9d:3f:74:a0:86:c6:fb:4e:fb:0b:8b:
                    99:94:8d:55:fe:58:1a:df:01:81:bb:a7:46:2c:30:
                    a6:ce:fa:20:47:c1:1a:de:6d:8b:67:ed:1a:12:6e:
                    35:47:a3:23:42:fd:8a:21:05:1b:24:30:e2:94:2e:
                    77:35:8d:85:c2:60:fb:f7:27:78:16:5a:25:a2:8b:
                    d0:2b:5a:78:1f:a6:38:36:7e:09:20:e4:7f:63:ce:
                    c1:e9:df:cc:e1:99:9e:fc:1a:6d:79:e9:a7:47:44:
                    05:cf:c8:ac:00:34:63:b9:74:5b:81:00:77:ae:84:
                    e0:7e:e0:65:09:d2:62:fb:fb:6a:63:a7:71:7c:e8:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:35:D9:DE:64:5E:01:F9:98:31:FE:93:CC:0B:BF:71:E5:AF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f841900-45c2-3e6e-a3c4-64360a24b3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.111.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:99:82:5d:68:4a:f1:ab:46:86:72:ae:39:45:e1:cc:d1:f3:
         77:c8:34:b6:14:05:20:73:36:24:ce:15:3e:a8:a8:fa:f7:21:
         a6:38:ec:cc:9c:e0:78:e3:f9:1c:b1:99:d2:07:49:d0:96:5f:
         6d:97:c6:94:f8:97:02:21:7f:a3:46:ac:ca:ef:74:e1:80:1d:
         da:42:57:0e:b5:7d:c9:d1:be:51:9e:80:ca:f9:63:f8:de:d0:
         40:3f:60:97:8b:6b:90:44:81:52:5d:9a:4a:16:82:30:3e:ba:
         e5:70:7d:7a:95:c8:9c:b5:cc:f1:55:a4:9e:81:ff:e7:d6:a6:
         aa:d9:3d:bc:ae:5c:3c:33:d1:71:45:b0:48:3d:9c:1f:8b:52:
         c3:ac:a4:55:fe:fb:d9:74:0d:02:48:28:20:c9:da:e0:eb:54:
         6f:f6:cc:d2:73:b2:fe:ea:e8:01:2b:f6:6c:c5:18:80:7e:01:
         83:ae:17:ee:06:77:2c:01:e5:92:a8:91:f4:1f:8b:3a:28:cc:
         3a:a6:29:2c:88:11:0f:f8:c9:5b:59:a2:88:aa:b8:0b:89:07:
         87:c9:f9:86:11:19:03:ba:b7:0d:d6:90:6f:3a:47:f4:f0:83:
         7b:e1:ec:c0:ff:db:a1:bd:17:80:0a:45:32:f3:56:73:52:8c:
         4f:d3:39:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssK6H26U/lAhUZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MGMyYTkxN2EtMzdmZi00M2YwLTgyYTctZmYzOWYyMGNiODA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHYTEOm+9xa2KAMUOQ3k0pGjtgQOFAFHy4Mi
EjpdlULHyeGJlrUf9sIqxzUSgmKwSNzRxzHMvndVc3ySR3i12Wy3MgA4H90GpxMm
+rKOuGS3qLipfWmkYBNBP1C8Z9JvBm2SsUOZj3GRtMWB58ItsPzU8di5dqpLG7V2
nT90oIbG+077C4uZlI1V/lga3wGBu6dGLDCmzvogR8Ea3m2LZ+0aEm41R6MjQv2K
IQUbJDDilC53NY2FwmD79yd4FloloovQK1p4H6Y4Nn4JIOR/Y87B6d/M4Zme/Bpt
eemnR0QFz8isADRjuXRbgQB3roTgfuBlCdJi+/tqY6dxfOghiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFONeNdneZF4B+Zgx/pPMC79x5a/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmY4NDE5MDAtNDVjMi0z
ZTZlLWEzYzQtNjQzNjBhMjRiM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTG+kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKZgl1oSvGrRoZyrjlF4czR83fINLYUBSBzNiTOFT6oqPr3IaY47Myc
4Hjj+RyxmdIHSdCWX22XxpT4lwIhf6NGrMrvdOGAHdpCVw61fcnRvlGegMr5Y/je
0EA/YJeLa5BEgVJdmkoWgjA+uuVwfXqVyJy1zPFVpJ6B/+fWpqrZPbyuXDwz0XFF
sEg9nB+LUsOspFX++9l0DQJIKCDJ2uDrVG/2zNJzsv7q6AEr9mzFGIB+AYOuF+4G
dywB5ZKokfQfizoozDqmKSyIEQ/4yVtZooiquAuJB4fJ+YYRGQO6tw3WkG86R/Tw
g3vh7MD/26G9F4AKRTLzVnNSjE/TOcU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:07 2025 by rpki-client