Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73969ef0-e627-3da8-8838-477028ed6ca7.roa
File:                     73969ef0-e627-3da8-8838-477028ed6ca7.roa (raw, json)
Hash identifier:          wRFypvHmdrgjY5KCbprmagURt8Tzl925Az3UO0ZX264=
Subject key identifier:   87:9B:D6:91:5B:19:2B:F5:B2:A5:FA:0E:F7:B9:8A:BB:A5:26:9E:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8BA969A8160E20FBDAB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73969ef0-e627-3da8-8838-477028ed6ca7.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        75.68.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:ba:96:9a:81:60:e2:0f:bd:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=9bda8a01-3cf5-42b7-8e6e-14e319421d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:b7:f7:9e:8a:3f:e3:79:ce:0f:7c:b2:42:
                    e2:12:7d:92:2c:c1:ec:ce:ce:44:df:85:dd:7b:66:
                    07:8a:25:53:12:6d:0f:89:97:d0:6d:02:4a:31:9e:
                    9a:03:2b:31:11:1d:70:07:12:f8:7e:8e:e0:cf:9f:
                    73:ec:44:60:00:bb:81:54:bc:3b:57:bf:b2:ed:53:
                    5a:dc:a0:98:a0:88:e4:07:64:91:bb:e4:bb:7c:04:
                    ad:27:de:6e:34:cf:17:8d:6e:83:de:b5:5a:e0:1c:
                    5f:20:1a:b4:6b:1d:0b:ff:3a:09:6f:67:fa:64:3f:
                    7e:75:16:9a:47:b1:8f:4b:05:4d:ed:bc:12:31:cf:
                    8b:4d:a9:f7:db:a6:a9:35:ff:e6:34:63:59:ae:35:
                    0b:d4:44:99:2d:64:99:d2:07:28:92:57:cc:d8:e8:
                    ba:86:0c:00:87:ca:b0:07:51:31:a8:c7:83:54:fc:
                    d9:1e:06:37:85:4e:16:ad:0a:1a:29:60:9b:52:42:
                    3a:c9:9c:9a:ed:87:7b:c0:ea:e1:f0:9c:62:ac:7a:
                    21:7b:2f:3e:8a:fd:12:63:4f:6b:8a:58:67:55:68:
                    68:e4:66:c9:26:46:73:3a:0f:fd:20:1d:43:ec:ae:
                    6d:75:20:e8:87:11:b8:0b:7f:6e:bd:eb:b6:3a:b1:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9B:D6:91:5B:19:2B:F5:B2:A5:FA:0E:F7:B9:8A:BB:A5:26:9E:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/73969ef0-e627-3da8-8838-477028ed6ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.68.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:cc:e2:3c:51:74:ff:dd:4a:0c:d8:03:23:a7:f0:0f:a1:c5:
         49:bd:a8:47:87:f1:b6:df:ca:67:4d:c4:9f:d8:ce:86:38:5a:
         b2:50:da:f3:3e:85:ca:2f:d1:42:a6:4b:c3:a6:81:3c:6a:eb:
         b1:cb:38:4e:41:15:f7:2b:3e:1f:62:7e:cc:e8:69:10:42:05:
         2f:eb:79:15:63:2f:dc:bd:b6:37:df:e0:eb:b1:d9:b9:dd:ba:
         9f:2f:26:7f:6e:0b:d5:ef:e5:2e:a0:e9:8f:cc:50:e2:68:bf:
         0c:f0:5f:f6:da:04:7a:a2:88:f1:6b:7b:90:26:d4:44:6e:90:
         e5:00:8b:db:fc:fe:a1:53:f1:1f:d6:eb:f3:52:29:dd:4d:56:
         52:59:82:73:2b:fe:7e:e3:93:f6:8c:91:91:17:10:55:be:92:
         71:7e:3f:3d:a4:81:35:3e:11:82:1b:71:3b:b6:33:99:b6:8a:
         26:70:25:1a:04:47:33:39:06:dc:42:97:d7:16:57:21:a6:dd:
         ff:ba:33:41:de:8b:17:eb:d1:eb:6e:d8:63:33:92:d8:dd:4b:
         c7:07:85:58:15:c5:f6:93:7f:48:49:d7:94:e9:65:1a:56:d9:
         0a:63:d1:d4:9c:a2:bc:38:78:3f:c4:63:f2:4f:4b:67:1f:11:
         8c:4c:54:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+LqWmoFg4g+9q0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
OWJkYThhMDEtM2NmNS00MmI3LThlNmUtMTRlMzE5NDIxZDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCq3956KP+N5zg98skLiEn2SLMHszs5E34Xd
e2YHiiVTEm0PiZfQbQJKMZ6aAysxER1wBxL4fo7gz59z7ERgALuBVLw7V7+y7VNa
3KCYoIjkB2SRu+S7fAStJ95uNM8XjW6D3rVa4BxfIBq0ax0L/zoJb2f6ZD9+dRaa
R7GPSwVN7bwSMc+LTan326apNf/mNGNZrjUL1ESZLWSZ0gcoklfM2Oi6hgwAh8qw
B1ExqMeDVPzZHgY3hU4WrQoaKWCbUkI6yZya7Yd7wOrh8JxirHohey8+iv0SY09r
ilhnVWho5GbJJkZzOg/9IB1D7K5tdSDohxG4C39uveu2OrEDAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIeb1pFbGSv1sqX6Dve5irulJp5IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzM5NjllZjAtZTYyNy0z
ZGE4LTg4MzgtNDc3MDI4ZWQ2Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS0QwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMPM4jxRdP/dSgzYAyOn8A+hxUm9qEeH8bbfymdNxJ/YzoY4WrJQ2vM+
hcov0UKmS8OmgTxq67HLOE5BFfcrPh9ifszoaRBCBS/reRVjL9y9tjff4Oux2bnd
up8vJn9uC9Xv5S6g6Y/MUOJovwzwX/baBHqiiPFre5Am1ERukOUAi9v8/qFT8R/W
6/NSKd1NVlJZgnMr/n7jk/aMkZEXEFW+knF+Pz2kgTU+EYIbcTu2M5m2iiZwJRoE
RzM5BtxCl9cWVyGm3f+6M0Heixfr0etu2GMzktjdS8cHhVgVxfaTf0hJ15TpZRpW
2Qpj0dScorw4eD/EY/JPS2cfEYxMVAE=
-----END CERTIFICATE-----
Generated at Thu Apr 10 00:21:03 2025 by rpki-client