Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cafdca3-5e3a-3c6c-b34e-b01fbcb43e5b.roa
File:                     7cafdca3-5e3a-3c6c-b34e-b01fbcb43e5b.roa (raw, json)
Hash identifier:          xDK9Ba/O+1FLYtCIB8rl1aA2R96R+q/VXf2/jiOmDTQ=
Subject key identifier:   81:12:EB:AB:AD:60:81:A3:E1:83:C6:D5:09:1E:AB:6E:4D:AE:2B:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF7590F3D770040DC3CEDA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cafdca3-5e3a-3c6c-b34e-b01fbcb43e5b.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        174.163.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:90:f3:d7:70:04:0d:c3:ce:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=60bdfa26-aa56-4f28-b033-31ef13aabc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b4:58:54:0f:99:3d:4d:a8:aa:5c:b3:7b:cc:
                    19:80:1f:59:78:35:d5:81:a7:44:6b:01:74:91:e6:
                    91:e3:71:6b:19:20:73:66:26:9b:74:44:73:19:36:
                    0d:ff:c4:3e:67:59:b4:d1:a7:1a:95:51:3a:90:59:
                    a9:14:b2:24:92:15:5e:0b:59:6b:3d:42:48:bc:fc:
                    b8:7f:e3:ab:8c:d4:92:f6:b4:1d:a9:42:69:2f:e9:
                    c2:1c:16:c6:83:5c:f5:e3:f1:40:49:80:27:6a:54:
                    d3:de:36:af:dc:da:e9:a1:89:cd:b8:1d:24:0c:73:
                    28:76:34:55:d0:89:97:33:46:01:d9:9a:9a:c1:68:
                    95:c5:94:91:c4:fd:f6:1b:77:c4:af:1d:2c:04:bc:
                    e7:a5:79:08:de:70:6c:d4:db:0d:d4:89:ac:af:96:
                    0c:83:de:00:f5:ae:b0:4b:19:32:f3:ed:69:de:bc:
                    35:84:2b:11:85:c6:c2:e0:66:3b:9a:c7:a6:12:4f:
                    43:af:62:6b:58:e4:ea:47:5d:cc:ae:0b:ed:ec:91:
                    46:31:d1:14:f9:22:30:46:56:13:46:1e:d6:a6:7e:
                    e3:8c:43:37:a5:3e:69:29:59:89:40:fc:de:de:57:
                    94:0b:24:88:20:b2:2e:53:4b:1b:f3:52:a9:98:6b:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:12:EB:AB:AD:60:81:A3:E1:83:C6:D5:09:1E:AB:6E:4D:AE:2B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cafdca3-5e3a-3c6c-b34e-b01fbcb43e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.163.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:65:94:20:6b:ca:20:b6:65:9d:79:16:8f:5b:80:d7:a1:f1:
         cb:8e:a4:44:5e:d2:52:4c:f5:b9:b1:72:51:1a:de:9d:da:27:
         59:b8:f8:53:1e:39:74:54:81:cb:98:56:09:d2:6f:ba:cd:83:
         e9:63:70:ad:68:be:87:30:32:6d:1a:0e:e1:1e:7b:72:b6:a4:
         a9:4b:0d:4e:52:2a:df:58:de:ad:75:b8:4d:ee:89:3a:36:1a:
         04:c2:1b:fc:be:13:47:a4:98:5c:91:eb:f4:bb:c3:76:96:4c:
         e2:40:a7:01:3d:63:9c:4c:9d:b7:54:09:30:9a:1c:9d:ba:59:
         e4:00:55:33:3d:fd:b2:09:12:93:19:9a:b8:a0:49:42:d3:5f:
         cd:d2:35:a0:3a:5a:25:50:13:40:40:bf:09:85:3f:67:65:9f:
         4f:3e:2f:4e:39:95:12:32:e0:88:87:73:b8:9a:d9:40:08:dd:
         68:a3:fd:6e:a4:db:f4:98:bf:6a:84:23:2a:89:1f:60:18:f2:
         dd:09:d4:cf:76:11:3c:88:0b:9e:d7:be:92:04:55:ad:c0:ad:
         ba:8d:8f:16:ec:ca:a2:b2:36:8f:c8:fc:98:21:c1:b7:45:23:
         13:3e:6d:52:e8:68:23:0d:1a:0b:5d:33:84:31:26:dc:74:f7:
         24:bd:db:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dZDz13AEDcPO2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
NjBiZGZhMjYtYWE1Ni00ZjI4LWIwMzMtMzFlZjEzYWFiYzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLRYVA+ZPU2oqlyze8wZgB9ZeDXVgadEawF0
keaR43FrGSBzZiabdERzGTYN/8Q+Z1m00acalVE6kFmpFLIkkhVeC1lrPUJIvPy4
f+OrjNSS9rQdqUJpL+nCHBbGg1z14/FASYAnalTT3jav3NrpoYnNuB0kDHModjRV
0ImXM0YB2ZqawWiVxZSRxP32G3fErx0sBLznpXkI3nBs1NsN1Imsr5YMg94A9a6w
Sxky8+1p3rw1hCsRhcbC4GY7msemEk9Dr2JrWOTqR13Mrgvt7JFGMdEU+SIwRlYT
Rh7Wpn7jjEM3pT5pKVmJQPze3leUCySIILIuU0sb81KpmGuy+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIES66utYIGj4YPG1Qkeq25NrisgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2NhZmRjYTMtNWUzYS0z
YzZjLWIzNGUtYjAxZmJjYjQzZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqNYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhllCBryiC2ZZ15Fo9bgNeh8cuOpERe0lJM9bmxclEa3p3aJ1m4+FMe
OXRUgcuYVgnSb7rNg+ljcK1ovocwMm0aDuEee3K2pKlLDU5SKt9Y3q11uE3uiTo2
GgTCG/y+E0ekmFyR6/S7w3aWTOJApwE9Y5xMnbdUCTCaHJ26WeQAVTM9/bIJEpMZ
mrigSULTX83SNaA6WiVQE0BAvwmFP2dln08+L045lRIy4IiHc7ia2UAI3Wij/W6k
2/SYv2qEIyqJH2AY8t0J1M92ETyIC57XvpIEVa3ArbqNjxbsyqKyNo/I/JghwbdF
IxM+bVLoaCMNGgtdM4QxJtx09yS92xc=
-----END CERTIFICATE-----
Generated at Wed Jun 4 22:50:20 2025 by rpki-client